Please see other maintained fork:
☆17Dec 4, 2025Updated 7 months ago
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains examples of micro virtual machines (microVMs) that can be run using firecracker.☆23Jan 22, 2019Updated 7 years ago
- Appendix resources for Intrinsec's "Amélioration des capacités de détection" handbook.☆13Mar 26, 2018Updated 8 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- ☆17Sep 14, 2017Updated 8 years ago
- This repository is a curated list of pro bono incident response entities.☆21Jun 21, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Script to install pentest tools on Alpine Linux☆10Jul 3, 2015Updated 11 years ago
- List of netblocks with shared hosting on 20170330☆10Apr 10, 2017Updated 9 years ago
- Nmap Script to scan for Winnti infections☆71May 22, 2018Updated 8 years ago
- Various snippets created during malware analysis☆22Apr 29, 2018Updated 8 years ago
- Pull author and committer names and emails from Travis-CI☆11Aug 9, 2020Updated 5 years ago
- ☆53Mar 4, 2019Updated 7 years ago
- Tools for parsing Forensic images☆41Dec 14, 2018Updated 7 years ago
- ☆10Jul 10, 2022Updated 4 years ago
- Understanding ATT&CK Matrix for Enterprise☆80May 16, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A python implementation of send_arp.c from the linux-ha project☆16Apr 25, 2016Updated 10 years ago
- Defender for Endpoint☆28Mar 28, 2026Updated 3 months ago
- Log Examination Tool☆27Oct 11, 2016Updated 9 years ago
- PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk☆30Oct 4, 2016Updated 9 years ago
- A collection of bro_scripts and signatures☆27Jun 26, 2019Updated 7 years ago
- ☆17Apr 20, 2022Updated 4 years ago
- Basic Auth Phish page☆25Sep 11, 2017Updated 8 years ago
- Small addin to manage digital signatures in Outlook.☆14Dec 18, 2016Updated 9 years ago
- Small and highly portable detection tests.☆13Oct 12, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Generates visualizations from the output of flow tools such as SiLK.☆33Dec 8, 2016Updated 9 years ago
- This PowerShell module allows you to create Microsoft Word documents without Word being installed on the machine☆13Oct 7, 2022Updated 3 years ago
- Speaker content from NIC2018☆18Feb 20, 2018Updated 8 years ago
- Reconstruct process trees from event logs☆148Aug 12, 2020Updated 5 years ago
- This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode☆27Jun 25, 2024Updated 2 years ago
- Rules I have researched for Microsoft Sentinel in my spare time. If someone wants to offer me a job I am open. Anyone can use this. Pleas…☆17Mar 29, 2026Updated 3 months ago
- KERnano: The No-install Python Pen Testing kit. (Windows & Linux)☆13Sep 2, 2022Updated 3 years ago
- Automated Memory Forensic☆34Jul 18, 2018Updated 8 years ago
- ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…☆71Mar 9, 2015Updated 11 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Splunk App to assist Sysmon Threat Hunting☆38Mar 7, 2017Updated 9 years ago
- How to send Windows EventLogs into Graylog☆20Oct 20, 2025Updated 9 months ago
- PowerShell Utilities for Security Situational Awareness☆13Jan 10, 2017Updated 9 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆82Nov 29, 2015Updated 10 years ago
- Script for pulling events from a MISP database and converting them to Autofocus queries.☆13Dec 28, 2015Updated 10 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆142Mar 7, 2018Updated 8 years ago