sysmonx
Sysmon clone
A drop-in replacement for Sysmon that enhances its security features and data collection capabilities.
SysmonX - An Augmented Drop-In Replacement of Sysmon
210 stars
15 watching
49 forks
Language: C++
last commit: about 5 years ago Related projects:
| Repository | Description | Stars |
|---|---|---|
 olafhartong/sysmon-modular | A repository of customizable Sysmon configuration modules for security analysis and threat hunting. | 2,664 |
 swiftonsecurity/sysmon-config | A template configuration file for Microsoft Sysinternals' Sysmon to monitor system changes with high-quality event tracing. | 4,810 |
 kurnyaannn/vuello | A Vue.js-based web application mimicking the functionality of Trello, utilizing Vite and TailwindCSS. | 18 |
 trustedsec/sysmoncommunityguide | A community-driven guide to configuring and using the Sysmon security monitoring tool | 1,147 |
 neo23x0/sysmon-config | A comprehensive Sysmon configuration file template with default high-quality event tracing | 454 |
 rajasegar/cl-trello-clone | A Common Lisp implementation of a Trello-like board management system | 37 |
 mhaggis/sysmon-dfir | A curated collection of resources and tools for learning and implementing Microsoft Sysmon for incident detection, threat hunting, and endpoint security monitoring. | 899 |
 ion-storm/sysmon-config | A configuration package for advanced system monitoring using Sysmon, designed to detect and alert on various threat activities and provide forensic visibility. | 775 |
| ion-storm/sysmon-edr | A PowerShell-based EDR system with Sysmon integration to detect and respond to security threats. | 218 |
 z-shell/z-a-submods | An annex for Z shell that allows users to clone additional submodules during plugin installation | 6 |
| marcosd4h/memhunter | Automated endpoint sensor tool to detect memory-resident malware without requiring memory dumps | 375 |
 nshalabi/sysmontools | Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity. | 1,488 |
 dead2/zlib-ng | A drop-in replacement for zlib with optimizations for modern systems | 15 |
 jpcertcc/sysmonsearch | Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations. | 417 |