71 Repositories
sysmon-modular
2739
ThreatHunting
1145
sysmon-cheatsheet
546
ATTACKdatamap
351
DefenderHarvester
105
MDE-AuditCheck
97
Presentations
66
detection-sources
53
PockETWatcher
46
TA-Sysmon-deploy
31
BHCEupload
30
WDACme
28
sysmon-parser
16
Sentinel-template-parser
16
parsoalto
16
sysmon-modular-linux
15
SA-Threat-Hunting
15
PSSysmonTools
12
unfetter-discover
8
osx-defaults
8
Invoke-Phant0m
6
SysmonCommunityGuide
5
scripts
5
DetectionLab
5
sysmon-dfir
3
olafhartong
3
blackhat-arsenal-tools
3
TA-microsoft-sysmon
2
subTee-gits-backups
2
splunk-jupyter
2
Event-Forwarding-Guidance
2
disposable-windows
2
sysmon-splunk-app
1
SplunkTools
1
SomeStuff
1
sigma
1
RTA
1
OSSEM-DM
1
LOLDrivers
1
flushwifi
1
cti
1
Clear-dminline
1
Azure-Sentinel
1
ARTHIR
1
Windows-Server-2003
0
winamp
0
win-frida-scripts
0
tim-data-investigate-platform
0
sysmon-version-history
0
SpoofMAC
0