Sysmon configuration file templates with advanced event tracing and blocking
☆62Sep 9, 2026Updated 2 weeks ago
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sysmon configuration file template with default high-quality event tracing☆619Jan 21, 2026Updated 8 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆156Jul 25, 2026Updated last month
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- YubiKey Smart Card Minidriver Administrative Template (ADMX)☆19Jun 23, 2024Updated 2 years ago
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Sep 27, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 4 months ago
- KQL Queries☆42Sep 17, 2026Updated last week
- a Pixie Plus integration for Home Assistant☆12Jun 19, 2026Updated 3 months ago
- Incident Response Report Using GitHub-Sphinx☆21Oct 28, 2019Updated 6 years ago
- Windows Forensics Environment Builder☆189Aug 1, 2026Updated last month
- ☆14Jul 12, 2025Updated last year
- Anything Sysmon related from the MSTIC R&D team☆157Jun 8, 2024Updated 2 years ago
- ☆27Jun 13, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆30May 1, 2025Updated last year
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆206Jul 4, 2026Updated 2 months ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 4 months ago
- IME tool to analyze IntuneManagementExtension.log☆10Apr 25, 2025Updated last year
- With the help of this docker image, you can easily access PEzor on your system!☆15Mar 10, 2022Updated 4 years ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆62Jun 24, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆851Jun 29, 2026Updated 2 months ago
- EDR/Analyst validation tool☆17Nov 22, 2025Updated 10 months ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆36Nov 11, 2025Updated 10 months ago
- ☆14Mar 28, 2018Updated 8 years ago
- ☆80Jun 25, 2019Updated 7 years ago
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- PowerShell Module for managing the MEMCM client☆30Aug 29, 2025Updated last year
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆31Sep 1, 2026Updated 3 weeks ago
- Script to download session files from Midwest Management Summit☆63May 6, 2026Updated 4 months ago
- Automate Entitlement Management in Azure AD Identity Governance using Microsoft Graph Powershell☆15Sep 13, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Script to automate Linux live evidence collection☆29Aug 4, 2022Updated 4 years ago
- ☆22Jan 31, 2023Updated 3 years ago
- ☆51Apr 4, 2026Updated 5 months ago
- ☆16Aug 6, 2026Updated last month
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆155Jul 28, 2026Updated last month
- A preconfigured Velociraptor triage collector☆78Aug 10, 2026Updated last month
- ☆32Oct 13, 2025Updated 11 months ago