How to filter SysMon Logs for suspicious events

This page summarizes the projects mentioned and recommended in the original post on /r/sysadmin
Sysmon Threatintel threat-hunting sysinternals Windows

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

  • sysmon-config

    Sysmon configuration file template with default high-quality event tracing

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Software Hardening Tools for System Defense

    1 project | dev.to | 30 Apr 2024

  • Troubleshooting Intermittent Slowness on Network Share

    1 project | /r/msp | 7 Jul 2023

  • Sysmon not reading our config.xml-file

    1 project | /r/sysadmin | 21 Jun 2023

  • Cheap, Fast, Good and Simple Remote Monitoring for Small Environments

    1 project | /r/msp | 31 May 2023

  • How do I exclude specific event IDs in Sysmon?

    1 project | /r/sysadmin | 15 Apr 2023