SysmonForLinux vs awesome-pcaptools

SysmonForLinux

By Sysinternals

awesome-pcaptools

A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors. (by caesar0301)

Suggest topics

Source Code

caesar0301.github.io

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

SysmonForLinux		awesome-pcaptools
	Project
11	Mentions	4
1,608	Stars	2,985
1.2%	Growth	-
6.6	Activity	2.3
about 1 month ago	Latest Commit	8 months ago
C	Language
MIT License	License	Creative Commons Zero v1.0 Universal

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

SysmonForLinux

Posts with mentions or reviews of SysmonForLinux. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-30.

Sysmon for Linux
1 project | news.ycombinator.com | 2 Oct 2023
Any useful cybersecurity software under $5k?
12 projects | /r/cybersecurity | 30 Sep 2022
Security Cadence: Sysmon (Logging Part 2 out of ?????)
4 projects | /r/sysadmin | 16 May 2022

Did you know that Sysmon is so fantastic that Microsoft ported it to Linux? They sure did and it is awesome. It can be found here: https://github.com/Sysinternals/SysmonForLinux
Install Sysmon for Linux on RHEL 8?
1 project | /r/redhat | 10 May 2022

I followed the install instructions for RHEL 8 found here: https://github.com/Sysinternals/SysmonForLinux/blob/main/INSTALL.md and that seemed to work correctly.
The GoDaddy hack is wider than initially thought. Started on the 6th of September!
1 project | /r/sysadmin | 25 Nov 2021
Microsoft releases Linux version of the Windows Sysmon tool
1 project | news.ycombinator.com | 21 Oct 2021
Sysmon for Linux 1.0.0 Released
3 projects | news.ycombinator.com | 15 Oct 2021
Microsoft releases Symon for Linux
1 project | /r/cybersecurity | 15 Oct 2021
Sysinternals/SysmonForLinux
1 project | news.ycombinator.com | 14 Oct 2021
Sysmon For Linux builds
1 project | /r/purpleteamsec | 14 Oct 2021

awesome-pcaptools

Posts with mentions or reviews of awesome-pcaptools. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-30.

Any useful cybersecurity software under $5k?
12 projects | /r/cybersecurity | 30 Sep 2022
There is framework for everything.
107 projects | /r/ProgrammerHumor | 4 Aug 2022
Cybersecurity Repositories
71 projects | /r/netsecstudents | 31 May 2022

Pcaptools
Awesome Penetration Testing
124 projects | dev.to | 6 Oct 2021

See also awesome-pcaptools.

What are some alternatives?

When comparing SysmonForLinux and awesome-pcaptools you can also consider the following projects:

sysmon-modular - A repository of sysmon configuration modules

RedELK - Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

sysmon-config - Sysmon configuration file template with default high-quality event tracing

tsunami-security-scanner - Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

SysmonTools - Utilities for Sysmon

blackarch - An ArchLinux based distribution for penetration testers and security researchers.

Aurora-Incident-Response - Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

angr - A powerful and user-friendly binary analysis platform!

VanillaWindowsReference - A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!

jwt-cracker - Simple HS256, HS384 & HS512 JWT token brute force cracker.

pdfalyzer - Analyze PDFs. With colors. And Yara.

netsniff-ng - A Swiss army knife for your daily Linux network plumbing.