An Inofficial Sysmon Version History (Change Log)
☆33Oct 25, 2020Updated 6 years ago
Alternatives and similar repositories for sysmon-version-history
Users that are interested in sysmon-version-history are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sandbox feature upgrade with the help of wrapped samples☆76Jun 23, 2018Updated 8 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆83Mar 20, 2023Updated 3 years ago
- Knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.☆23Dec 13, 2018Updated 7 years ago
- Investigate suspicious activity by visualizing Sysmon's event log☆432Dec 22, 2023Updated 2 years ago
- ☆20Oct 23, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some YARA rules i will add from time to time☆12May 31, 2019Updated 7 years ago
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- A CALDERA plugin☆13Jan 23, 2024Updated 2 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Feb 20, 2024Updated 2 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- A collection of typical false positive indicators☆55Dec 5, 2020Updated 5 years ago
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A repo for security analytics & threat hunting resources☆21Sep 25, 2018Updated 8 years ago
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆222Sep 17, 2019Updated 7 years ago
- Indicator of Compromise Scanner for CVE-2019-19781☆94Mar 25, 2020Updated 6 years ago
- Command-line Interface for Binar.ly☆39Jan 13, 2017Updated 9 years ago
- Konrads' Pen-Ultimate (Windows) Log File Parser☆14Dec 27, 2025Updated 10 months ago
- Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …☆832Nov 5, 2023Updated 2 years ago
- ☆13Oct 21, 2022Updated 4 years ago
- Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…☆893Nov 17, 2020Updated 5 years ago
- ☆37Dec 17, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python scripts for parsing the index file and individual cache files from the cache2 folder of Firefox defaulted on in version 32☆27Sep 27, 2018Updated 8 years ago
- Build Automated Machine Images for MISP☆29Jun 9, 2023Updated 3 years ago
- PowerShell Utilities for Security Situational Awareness☆13Jan 10, 2017Updated 9 years ago
- Scan extracted file from Zeek with Yara rules and get statistical analysis for matching files. Optionally, simulate matching malicious fi…☆15Dec 18, 2023Updated 2 years ago
- Simple Distributed IOC Scanner☆12Jul 27, 2015Updated 11 years ago
- VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.☆16Feb 13, 2024Updated 2 years ago
- Code and yara rules to detect and analyze Cobalt Strike☆272May 5, 2021Updated 5 years ago
- API gateway for MISP☆13Dec 15, 2023Updated 2 years ago
- Placeholder for IRIS-H Digital Forensics Tool☆16May 30, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- Invisible Watermarks with Space Characters in ASCII Files☆21Jun 14, 2018Updated 8 years ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆347Dec 3, 2025Updated 10 months ago
- Identify the technologies powering any website☆11Sep 19, 2023Updated 3 years ago
- Various scrips☆12Oct 19, 2022Updated 4 years ago
- An Elasticsearch QUEry Language☆58Jul 3, 2017Updated 9 years ago
- HTTP proxy logging daemon: a tcpdump-like, at HTTP level :)☆14Nov 9, 2011Updated 14 years ago