All materials from our Black Hat 2018 "Subverting Sysmon" talk - View it on GitHub