82 Repositories
sysmon-modular
3053
ThreatHunting
1185
sysmon-cheatsheet
568
ATTACKdatamap
358
BamboozlEDR
270
DefenderHarvester
120
MDE-AuditCheck
101
Presentations
86
ETWLocksmith
64
PockETWatcher
55
detection-sources
53
BHCEupload
33
TA-Sysmon-deploy
32
WDACme
30
sysmon-parser
18
sysmon-modular-linux
17
Sentinel-template-parser
16
parsoalto
16
SA-Threat-Hunting
15
PSSysmonTools
12
Invoke-Phant0m
12
ETWhat
10
unfetter-discover
8
osx-defaults
8
DetectionLab
6
SysmonCommunityGuide
5
scripts
5
ETWtop
5
sysmon-dfir
3
provmon
3
olafhartong
3
blackhat-arsenal-tools
3
TA-microsoft-sysmon
2
subTee-gits-backups
2
splunk-jupyter
2
LOLDrivers
2
Event-Forwarding-Guidance
2
ETW-DBG-ENUM
2
disposable-windows
2
cti
2
win-frida-scripts
1
sysmon-splunk-app
1
SplunkTools
1
SomeStuff
1
sigma
1
RTA
1
raycast-extensions
1
OSSEM-DM
1
goose
1
flushwifi
1