Sysmon configuration file templates with advanced event tracing and blocking
☆72Oct 20, 2026Updated this week
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆84Sep 30, 2026Updated 3 weeks ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Community-driven PowerShell detection indicators☆46Jan 27, 2026Updated 8 months ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Sep 1, 2026Updated last month
- Sysmon configuration file template with default high-quality event tracing☆625Jan 21, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆21Oct 2, 2026Updated 3 weeks ago
- ☆21Sep 11, 2026Updated last month
- ☆37Nov 11, 2025Updated 11 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆157Jul 25, 2026Updated 3 months ago
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- Linux Persistence Detection, Hunting and Artifact Collection script☆28Jul 20, 2026Updated 3 months ago
- Windows Forensics Environment Builder☆191Sep 30, 2026Updated 3 weeks ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Sep 27, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆20Jun 25, 2026Updated 4 months ago
- A Compiler from Sigma rules to VQL☆20Updated this week
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆209Oct 11, 2026Updated 2 weeks ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- YubiKey Smart Card Minidriver Administrative Template (ADMX)☆19Jun 23, 2024Updated 2 years ago
- KQL Queries☆44Oct 2, 2026Updated 3 weeks ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated last week
- With the help of this docker image, you can easily access PEzor on your system!☆15Mar 10, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of scripts provided for public use☆46Aug 19, 2026Updated 2 months ago
- a Pixie Plus integration for Home Assistant☆12Jun 19, 2026Updated 4 months ago
- C# Desktop GUI application that either performs YARA scan locally or prepares the scan in Active Directory domain environment with a few …☆37Dec 1, 2021Updated 4 years ago
- Incident Response Report Using GitHub-Sphinx☆21Oct 28, 2019Updated 6 years ago
- ☆29May 1, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆862Jun 29, 2026Updated 3 months ago
- A repository of sysmon configuration modules☆3,171Oct 14, 2026Updated last week
- Run Claude Code CLI with DeepSeek API — cheap high-volume automation for security research & bug bounty☆27Jun 5, 2026Updated 4 months ago
- IME tool to analyze IntuneManagementExtension.log☆10Apr 25, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Anything Sysmon related from the MSTIC R&D team☆157Jun 8, 2024Updated 2 years ago
- ☆27Jun 13, 2022Updated 4 years ago
- Scripts I have written to perform various IT Security admin tasks. From validating findings to performing automated attacks☆21Mar 12, 2025Updated last year
- An AI-backed threat hunting assistant that aligns to the PEAK framework.☆65Jun 1, 2026Updated 4 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated 3 weeks ago
- ☆35Aug 8, 2023Updated 3 years ago
- Microsoft Sentinel SIEM Log Source Analyzer☆31Updated this week