84 Repositories
sysmon-modular
3131
ThreatHunting
1188
sysmon-cheatsheet
575
ATTACKdatamap
357
BamboozlEDR
285
DefenderHarvester
122
MDE-AuditCheck
101
ETWLocksmith
92
Presentations
86
PockETWatcher
55
detection-sources
52
BHCEupload
33
TA-Sysmon-deploy
32
WDACme
30
sysmon-parser
18
sysmon-modular-linux
17
Sentinel-template-parser
16
parsoalto
16
SA-Threat-Hunting
15
PSSysmonTools
12
Invoke-Phant0m
11
ETWhat
10
unfetter-discover
8
osx-defaults
8
ETWtop
6
DetectionLab
6
SysmonCommunityGuide
5
scripts
5
provmon
4
tableDumper
3
sysmon-dfir
3
olafhartong
3
blackhat-arsenal-tools
3
TA-microsoft-sysmon
2
subTee-gits-backups
2
splunk-jupyter
2
LOLDrivers
2
Event-Forwarding-Guidance
2
ETW-DBG-ENUM
2
disposable-windows
2
cti
2
Windows-Server-2003
1
win-frida-scripts
1
sysmon-splunk-app
1
SplunkTools
1
SomeStuff
1
sigma
1
RTA
1
raycast-extensions
1
Proxywatch
1