81 Repositories
sysmon-modular
2993
ThreatHunting
1174
sysmon-cheatsheet
566
ATTACKdatamap
356
BamboozlEDR
262
DefenderHarvester
119
MDE-AuditCheck
100
Presentations
87
ETWLocksmith
64
PockETWatcher
54
detection-sources
53
TA-Sysmon-deploy
32
BHCEupload
31
WDACme
30
sysmon-parser
18
sysmon-modular-linux
16
Sentinel-template-parser
16
parsoalto
16
SA-Threat-Hunting
15
PSSysmonTools
12
Invoke-Phant0m
12
ETWhat
9
unfetter-discover
8
osx-defaults
8
DetectionLab
6
SysmonCommunityGuide
5
scripts
5
ETWtop
4
sysmon-dfir
3
olafhartong
3
blackhat-arsenal-tools
3
TA-microsoft-sysmon
2
subTee-gits-backups
2
splunk-jupyter
2
provmon
2
LOLDrivers
2
Event-Forwarding-Guidance
2
ETW-DBG-ENUM
2
disposable-windows
2
win-frida-scripts
1
sysmon-splunk-app
1
SplunkTools
1
SomeStuff
1
sigma
1
RTA
1
raycast-extensions
1
OSSEM-DM
1
flushwifi
1
cti
1
Clear-dminline
1