SysmonTools
by nshalabi
Utilities for Sysmon
AI summary
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
- stars
- 1.5K
- forks
- 204
- watching
- 94
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Event log analyzer
Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations.
System monitoring configuration
A template configuration file for Microsoft Sysinternals' Sysmon to monitor system changes with high-quality event tracing.
Log analyzer
Automates analysis of Windows Security Events to identify user logon relations
Sysmon toolkit
A curated collection of resources and tools for learning and implementing Microsoft Sysmon for incident detection, threat hunting, and endpoint security monitoring.
Event log analyzer
Analyzes Windows Event Logs to identify security-related events and provides forensic tools for incident response.
Event log analyzer
A PowerShell module for analyzing Windows event logs to detect and respond to potential security threats.
System monitor
A configuration package for advanced system monitoring using Sysmon, designed to detect and alert on various threat activities and provide forensic visibility.
Event log analyzer
A toolset for analyzing Windows event logs to detect and analyze malware
Network analyzer
Aggregates Microsoft Sysmon network events with Elasticsearch and Kibana for threat hunting analysis
Log analyzer
A standalone tool for analyzing and detecting security-related events in various Linux logs using SIGMA rules
Event simulator
A utility to simulate Windows event logs for testing EDR detections and correlation rules
Log viewer
A Kibana plugin to view, analyze, and search log events from multiple hosts in real-time with a centralized interface.
Log setup script
Enables Windows event log settings to support a larger percentage of Sigma detection rules and retain logs for longer periods
zqqf16/sym597
Crash log analyzer
An app for processing and analyzing crash logs from various frameworks
Featured in 1 awesome list
Each link jumps to the spot where the list mentions SysmonTools.
