SysmonForLinux vs VanillaWindowsReference

SysmonForLinux

By Sysinternals

A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets! (by AndrewRathbun)

Dfir Windows Research Hashes incidentresponse

Source Code

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

SysmonForLinux		VanillaWindowsReference
	Project
11	Mentions	4
1,620	Stars	121
2.0%	Growth	-
6.6	Activity	2.9
4 days ago	Latest Commit	8 months ago
C	Language
MIT License	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

SysmonForLinux

Posts with mentions or reviews of SysmonForLinux. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-30.

Sysmon for Linux
1 project | news.ycombinator.com | 2 Oct 2023
Any useful cybersecurity software under $5k?
12 projects | /r/cybersecurity | 30 Sep 2022
Security Cadence: Sysmon (Logging Part 2 out of ?????)
4 projects | /r/sysadmin | 16 May 2022

Did you know that Sysmon is so fantastic that Microsoft ported it to Linux? They sure did and it is awesome. It can be found here: https://github.com/Sysinternals/SysmonForLinux
Install Sysmon for Linux on RHEL 8?
1 project | /r/redhat | 10 May 2022

I followed the install instructions for RHEL 8 found here: https://github.com/Sysinternals/SysmonForLinux/blob/main/INSTALL.md and that seemed to work correctly.
The GoDaddy hack is wider than initially thought. Started on the 6th of September!
1 project | /r/sysadmin | 25 Nov 2021
Microsoft releases Linux version of the Windows Sysmon tool
1 project | news.ycombinator.com | 21 Oct 2021
Sysmon for Linux 1.0.0 Released
3 projects | news.ycombinator.com | 15 Oct 2021
Microsoft releases Symon for Linux
1 project | /r/cybersecurity | 15 Oct 2021
Sysinternals/SysmonForLinux
1 project | news.ycombinator.com | 14 Oct 2021
Sysmon For Linux builds
1 project | /r/purpleteamsec | 14 Oct 2021

VanillaWindowsReference

Posts with mentions or reviews of VanillaWindowsReference. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-30.

Windows 10 Build 1909 Hash List
1 project | /r/computerforensics | 29 Nov 2022
Any useful cybersecurity software under $5k?
12 projects | /r/cybersecurity | 30 Sep 2022
Windows Base File and Hash Search
1 project | /r/computerforensics | 25 Aug 2022
Compare with a base image
1 project | /r/computerforensics | 20 Aug 2022

What are some alternatives?

When comparing SysmonForLinux and VanillaWindowsReference you can also consider the following projects:

sysmon-modular - A repository of sysmon configuration modules

MalwareSourceCode - Collection of malware source code for a variety of platforms in an array of different programming languages.

sysmon-config - Sysmon configuration file template with default high-quality event tracing

CyberPipe - An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

SysmonTools - Utilities for Sysmon

threat-tools - Tools for simulating threats

Aurora-Incident-Response - Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

awesome-pcaptools - A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pdfalyzer - Analyze PDFs. With colors. And Yara.