sysmon-modular VS sysmon-config

Compare sysmon-modular vs sysmon-config and see what are their differences.

sysmon-modular

A repository of sysmon configuration modules (by olafhartong)

sysmon-config

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events. (by ion-storm)
Our great sponsors
  • Zigi - Delete the most useless function ever: context switching.
  • Scout APM - Truly a developer’s best friend
  • InfluxDB - Build time-series-based applications quickly and at scale.
  • SonarQube - Static code analysis for 29 languages.
sysmon-modular sysmon-config
11 1
2,034 649
- -
8.9 10.0
9 days ago about 1 month ago
PowerShell Batchfile
MIT License -
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

sysmon-modular

Posts with mentions or reviews of sysmon-modular. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-11-09.

sysmon-config

Posts with mentions or reviews of sysmon-config. We have used some of these posts to build our list of alternatives and similar projects.

We haven't tracked posts mentioning sysmon-config yet.
Tracking mentions began in Dec 2020.

What are some alternatives?

When comparing sysmon-modular and sysmon-config you can also consider the following projects:

atomic-red-team - Small and highly portable detection tests based on MITRE's ATT&CK.

sysmon-config - Sysmon configuration file template with default high-quality event tracing

DetectionLabELK - DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

Windows-Toolkit - PS one-liner cmdlets for Windows security

Power-Response - Powering Up Incident Response with Power-Response

vscode-sysmon - Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.

threathunting - A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

AzureHunter - A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

SysmonForLinux

cowrie - Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

SysmonTools - Utilities for Sysmon

macOS-ATTACK-DATASET - JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.