Sysmon_OSSEC icon indicating copy to clipboard operation
Sysmon_OSSEC copied to clipboard

verified publisher icon defensivedepth
→

Metadata

OSSEC Decoder & Rulesets for Sysmon Events

Results 2 Sysmon_OSSEC issues
Sort by recently updated
recently updated
newest added

newbie question

hi, i would like to integrate sysmon to securityonion, but did not find useful manual for that.. Can you share it with me or tell me which file and where...

y0d4a avatar y0d4a

Other windows rules stop firing.

9 comment

Josh, Been playing with variations of this for Sysmon3 when I write my decoder similar to yours with parent and type as windows, OSSEC stops alerting on other windows events....

strengthnotes avatar strengthnotes

← Metadata

15
Stars
4
Forks
Watchers

Owner

verified publisher icon defensivedepth

Metadata

OSSEC Decoder & Rulesets for Sysmon Events

Back