sysmon topic

SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

huoji120

Pushes Sysmon Configs

LaresLLC

Consolidation of various resources related to Microsoft Sysmon & sample data/log

jymcheong

A Ruleset to enhance detection capabilities of Ossec using Sysmon

Hestat

Sysmon EDR POC Build within Powershell to prove ability.

ion-storm

Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.

ceramicskate0

Qt based replacement for gnome system monitor

VioletDarkKitty

A PowerShell script to prevent Sysmon from writing its events

SecurityJosh

Universal Winlogbeat configuration

jhochwald

Deploy and maintain Symon through the Splunk Deployment Sever

olafhartong