sysmon
Sysmon and wazuh integration with Sigma sysmon rules [updated] (by sametsazak)
fim
FIM is an Open Source Host-based file integrity monitoring tool that performs file system analysis, file integrity checking, real time alerting and provides Audit daemon data. (by Achiefs)
| sysmon | fim | |
|---|---|---|
| 2 | 22 | |
| 55 | 113 | |
| - | 4.4% | |
| 1.8 | 8.6 | |
| almost 3 years ago | 5 days ago | |
| Rust | ||
| GNU General Public License v3.0 only | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
sysmon
Posts with mentions or reviews of sysmon.
We have used some of these posts to build our list of alternatives
and similar projects.
-
Help Me Understand This Level 12 Sysmon Rule
Alright, I'm in the process of setting up wazuh for my organization. It's been working well with the default alerts it comes with. I wanted to try ingesting and alerting on sysmon logs so I added sysmon to a test endpoint (an IT workstation), added the necessary lines to ossec.conf, and added the ruleset mentioned here to the wazuh manager (local_rules.xml). Seems to be working, I see sysmon logs in wazuh and am now being overwhelmed by this level 12 alert...
-
Wazuh or Wazuh and Graylog?
Wazuh can do a lot for you regarding Win events: - https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/how-to-collect-wlogs.html - https://wazuh.com/blog/learn-to-detect-threats-on-windows-by-monitoring-sysmon-events/ - https://github.com/sametsazak/sysmon
fim
Posts with mentions or reviews of fim.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-29.
- FIM v0.4.10 - Realtime File monitoring tool
- FIM v0.4.7 - Realtime File monitoring tool
-
Any open source projects willing to take in juniors?
Hello /u/cli_addict we are working on a File monitor in Rust if you like cybersec we are open to include any propose you have. https://github.com/Achiefs/fim
-
FIM v0.4.6 - Realtime File monitoring tool
https://achiefs.com/https://documentation.achiefs.com
-
We just published FIM v0.4.5!
https://github.com/Achiefs/fim Any feedback or questions will be appreciated. If you like the project or Rust give us a star :D
- File Integrity Monitoring v0.4.3 is out!
-
New version of file integrity monitoring software in rust (File watcher/monitor)
Just forget to publish release, sorry dudes https://github.com/Achiefs/fim/releases/tag/v0.4.0 Have a good day!
-
What's everyone working on this week (25/2022)?
I'm working on the issue https://github.com/Achiefs/fim/issues/60 mentioned by an user of this community. We come from the post of unwraps in Rust. We will review all unwraps and if it's really necessary or not.
-
File integrity monitoring software in rust (File watcher/monitoring files)
Hello /u/chrysn I have opened this issue https://github.com/Achiefs/fim/issues/61 I really think that it could be a great feature to include into the software. We will code it as soon as possible. Thanks!
What are some alternatives?
When comparing sysmon and fim you can also consider the following projects:
wazuh-ruleset - Wazuh - Ruleset
cargo-chef - A cargo-subcommand to speed up Rust Docker builds using Docker layer caching.
wazuh-dashboard-plugins - Plugins for Wazuh Dashboard
toolbox-tuner - Graphical application intended for use on Fedora Silverblue to manage containertoolbx.org containers.
wazuh-documentation - Wazuh - Project documentation
org.gnome.Todo
wazuh-docker - Wazuh - Docker containers
football-simulator - Football simulation engine (like Football Manager) written in pure Rust
TsetlinMachine - Code and datasets for the Tsetlin Machine
braindamage - A Brainfuck interpreter and compiler written in Rust
log4rs - A highly configurable logging framework for Rust
hv-dev - Slow down, upon the teeth of Orange: Heavy is an opinionated, efficient, relatively lightweight, and tightly Lua-integrated game framework for Rust.