4 results found Sort:

netevert
sentinel-attack netevert
208
1.1k
mit
71
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
kql siem azure sysmon logging blue-team detection workbooks mitre-attack cybersecurity sysmon-config azure-sentinel security-tools threat-hunting terraform-azure
Created 2019-05-30
321 commits to master branch, last one 3 months ago
sametsazak
sysmon sametsazak
15
64
gpl-3.0
4
Sysmon and wazuh integration with Sigma sysmon rules [updated]
ossec sigma wazuh sysmon security sysmon-config wazuh-manager security-tools
Created 2018-09-14
13 commits to master branch, last one 3 years ago
0xAnalyst
Sysmon 0xAnalyst
14
55
unknown
6
Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
sysmon-config threathunting
Created 2017-09-13
36 commits to master branch, last one 7 months ago
bobby-tablez
Enable-All-The-Logs bobby-tablez
6
25
unknown
1
This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might w...
gpo lab sysmon logging windows sysmon-logs log-analysis sysmon-config malware-analysis
Created 2023-05-17
60 commits to main branch, last one 20 days ago