SysmonSimulator
by ScarredMonk
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
AI summary
Event simulator
A utility to simulate Windows event logs for testing EDR detections and correlation rules
- stars
- 836
- forks
- 109
- watching
- 20
Similar projects
Found by comparing what the projects do, not just their names.
Event log analyzer
Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations.
Network simulator
A utility to generate malicious network traffic patterns and evaluate security controls.
Vulnerability simulator
A web application designed to simulate vulnerabilities and demonstrate the importance of proper validation and logging.
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
Threat simulator
A tool for simulating and tracking adversary threats to measure detection and prevention capabilities
User simulator
Generates event data to simulate real-world user behavior for testing and development purposes.
Event simulator
Generates semi-random web events with configurable probabilities and constraints to mimic real-world scenarios.
Ransomware simulator
A toolkit for simulating and testing ransomware operations in a controlled environment
CAN simulator
A tool simulates an instrument cluster's behavior over a virtual CAN network.
Attack simulator
A collaboration to create realistic test environments for simulating real-world attacks and improving detection strategies.
System monitor
A configuration package for advanced system monitoring using Sysmon, designed to detect and alert on various threat activities and provide forensic visibility.
Ransomware simulator
A tool to simulate ransomware behavior for testing antivirus software
Attack simulator
A tool designed to simulate system compromise or attack behaviors without running processes or PoCs.
System monitoring configuration
A template configuration file for Microsoft Sysinternals' Sysmon to monitor system changes with high-quality event tracing.
Sysmon toolkit
A curated collection of resources and tools for learning and implementing Microsoft Sysmon for incident detection, threat hunting, and endpoint security monitoring.
