sysmon-dfir
by MHaggis
Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
AI summary
Sysmon toolkit
A curated collection of resources and tools for learning and implementing Microsoft Sysmon for incident detection, threat hunting, and endpoint security monitoring.
- stars
- 901
- forks
- 184
- watching
- 114
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Sysmon config repo
A repository of customizable Sysmon configuration modules for security analysis and threat hunting.
System monitor
A configuration package for advanced system monitoring using Sysmon, designed to detect and alert on various threat activities and provide forensic visibility.
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
System monitoring configuration
A template configuration file for Microsoft Sysinternals' Sysmon to monitor system changes with high-quality event tracing.
EDR solution
A PowerShell-based EDR system with Sysmon integration to detect and respond to security threats.
Malware detection toolkit
A collection of resources and tools for detecting and preventing malicious activity on Windows systems.
Sysmon config guide
A community-driven guide to configuring and using the Sysmon security monitoring tool
Threat hunting tools
Collection of resources and concepts for threat hunting and detection engineering.
Security toolkit
A collection of resources to study Solana smart contract security, auditing, and exploits.
Monitoring template
A comprehensive Sysmon configuration file template with default high-quality event tracing
Event log analyzer
Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations.
System monitor
A remotely-accessible system performance monitoring and task management tool for servers and Raspberry Pi setups
Event simulator
A utility to simulate Windows event logs for testing EDR detections and correlation rules
Hyperspectral Image Dataset
Provides a dataset and tools for testing salient object detection models on hyperspectral images
Malware analyzer
Tools for analyzing and comparing malware at a function level using fuzzy hashing algorithms
Featured in 1 awesome list
Each link jumps to the spot where the list mentions sysmon-dfir.
