sysmon-edr
by ion-storm
Sysmon EDR POC Build within Powershell to prove ability.
AI summary
EDR solution
A PowerShell-based EDR system with Sysmon integration to detect and respond to security threats.
- stars
- 218
- forks
- 27
- watching
- 11
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
System monitor
A configuration package for advanced system monitoring using Sysmon, designed to detect and alert on various threat activities and provide forensic visibility.
0xrawsec/whids1.2K
EDR tool
An open source EDR solution designed to provide real-time incident response capabilities by detecting potential security threats on Windows systems.
Sysmon toolkit
A curated collection of resources and tools for learning and implementing Microsoft Sysmon for incident detection, threat hunting, and endpoint security monitoring.
Sysmon config repo
A repository of customizable Sysmon configuration modules for security analysis and threat hunting.
Event simulator
A utility to simulate Windows event logs for testing EDR detections and correlation rules
System monitoring configuration
A template configuration file for Microsoft Sysinternals' Sysmon to monitor system changes with high-quality event tracing.
System monitor
A remotely-accessible system performance monitoring and task management tool for servers and Raspberry Pi setups
Event processor
A fast and extensible system for processing JSON events from security monitoring tools
Evidence collector
Automates evidence collection and analysis from Windows machines using PowerShell.
SIEM rule collector
A repository for collecting and sharing SIEM rules in STIX format for automated translation to Sigma syntax
Intrusion analyzer
A PowerShell-based tool to gather information on O365 intrusions and potential breaches.
Puzzle solver
An AOC CLI tool that automates puzzle solving and installation
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
Threat simulator
A PowerShell repository to simulate and train threat hunting skills without malicious files.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions sysmon-edr.
