Sysmon configuration file templates with advanced event tracing and blocking
☆61Aug 31, 2026Updated this week
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sysmon configuration file template with default high-quality event tracing☆615Jan 21, 2026Updated 7 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆156Jul 25, 2026Updated last month
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- YubiKey Smart Card Minidriver Administrative Template (ADMX)☆19Jun 23, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Sep 27, 2022Updated 3 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 3 months ago
- KQL Queries☆43Aug 10, 2026Updated 3 weeks ago
- a Pixie Plus integration for Home Assistant☆12Jun 19, 2026Updated 2 months ago
- Incident Response Report Using GitHub-Sphinx☆21Oct 28, 2019Updated 6 years ago
- Windows Forensics Environment Builder☆190Aug 1, 2026Updated last month
- ☆14Jul 12, 2025Updated last year
- Anything Sysmon related from the MSTIC R&D team☆157Jun 8, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆26Jun 13, 2022Updated 4 years ago
- ☆30May 1, 2025Updated last year
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆202Jul 4, 2026Updated 2 months ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 4 months ago
- IME tool to analyze IntuneManagementExtension.log☆10Apr 25, 2025Updated last year
- ☆16Feb 20, 2026Updated 6 months ago
- With the help of this docker image, you can easily access PEzor on your system!☆15Mar 10, 2022Updated 4 years ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 6 months ago
- Scapy hands-on at #GreHack17☆17Nov 14, 2017Updated 8 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆61Jun 24, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆839Jun 29, 2026Updated 2 months ago
- EDR/Analyst validation tool☆17Nov 22, 2025Updated 9 months ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- ☆35Nov 11, 2025Updated 9 months ago
- ☆80Jun 25, 2019Updated 7 years ago
- ☆14Mar 28, 2018Updated 8 years ago
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A comprehensive collection of study materials, practice exams, and resources that helped me successfully pass the CISSP exam.☆15Feb 7, 2025Updated last year
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆30Updated this week
- PowerShell Module for managing the MEMCM client☆30Aug 29, 2025Updated last year
- Script to download session files from Midwest Management Summit☆63May 6, 2026Updated 3 months ago
- Automate Entitlement Management in Azure AD Identity Governance using Microsoft Graph Powershell☆15Sep 13, 2023Updated 2 years ago
- LotL RMM☆391Updated this week
- ☆22Jan 31, 2023Updated 3 years ago