Sysmon configuration file templates with advanced event tracing and blocking
☆61Jul 27, 2026Updated last week
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sysmon configuration file template with default high-quality event tracing☆605Jan 21, 2026Updated 6 months ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- YubiKey Smart Card Minidriver Administrative Template (ADMX)☆19Jun 23, 2024Updated 2 years ago
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Sep 27, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 2 months ago
- KQL Queries☆42Jun 30, 2026Updated last month
- a Pixie Plus integration for Home Assistant☆11Jun 19, 2026Updated last month
- Incident Response Report Using GitHub-Sphinx☆21Oct 28, 2019Updated 6 years ago
- Windows Forensics Environment Builder☆190Aug 1, 2026Updated last week
- ☆14Jul 12, 2025Updated last year
- Anything Sysmon related from the MSTIC R&D team☆156Jun 8, 2024Updated 2 years ago
- ☆25Jun 13, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆30May 1, 2025Updated last year
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆197Jul 4, 2026Updated last month
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 3 months ago
- IME tool to analyze IntuneManagementExtension.log☆10Apr 25, 2025Updated last year
- ☆16Feb 20, 2026Updated 5 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 6 months ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆61Jun 24, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆836Jun 29, 2026Updated last month
- EDR/Analyst validation tool☆17Nov 22, 2025Updated 8 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆57Apr 22, 2025Updated last year
- ☆35Nov 11, 2025Updated 8 months ago
- ☆80Jun 25, 2019Updated 7 years ago
- ☆14Mar 28, 2018Updated 8 years ago
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆28Jul 22, 2026Updated 2 weeks ago
- PowerShell Module for managing the MEMCM client☆30Aug 29, 2025Updated 11 months ago
- Script to download session files from Midwest Management Summit☆63May 6, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Automate Entitlement Management in Azure AD Identity Governance using Microsoft Graph Powershell☆15Sep 13, 2023Updated 2 years ago
- LotL RMM☆386Jul 15, 2026Updated 3 weeks ago
- Script to automate Linux live evidence collection☆28Aug 4, 2022Updated 4 years ago
- NANSI - An ANSI driver for DOS☆11Sep 27, 2015Updated 10 years ago
- ☆51Apr 4, 2026Updated 4 months ago
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- A preconfigured Velociraptor triage collector☆77Jun 29, 2026Updated last month