Security Cadence: Sysmon (Logging Part 2 out of ?????)

• sysmon-config

  19 3,605 1.6

  Sysmon configuration file template with default high-quality event tracing

  There are also some excellent sample configuration files out there, and -in my opinion- the best of them is from Swift on Security: https://github.com/SwiftOnSecurity/sysmon-config

• sysmon-modular

  6 1,843 8.2 PowerShell

  A repository of sysmon configuration modules

  Another really excellent resource (also called out by Swift) is Olaf Hartong’s Sysmon-Modular project: https://github.com/olafhartong/sysmon-modular As well as having a few full configs, Olaf’s project has modular XML configurations for each supported Sysmon Event ID. This can be incredibly helpful for fine tuning your configs.

• Scout APM

  scoutapm.com

  sponsored

  Less time debugging, more time building. Scout APM allows you to find and fix performance issues with no hassle. Now with error monitoring and external services monitoring, Scout is a developer's best friend when it comes to application development.

  

• SysmonForLinux

  9 1,093 6.8 C

  

  Did you know that Sysmon is so fantastic that Microsoft ported it to Linux? They sure did and it is awesome. It can be found here: https://github.com/Sysinternals/SysmonForLinux

• SysmonTools

  2 1,267 0.7

  Utilities for Sysmon

Suggest a related project