Microsoft recommend Sysmon and EDR

• sysmon-modular

  15 2,485 6.8 PowerShell

  A repository of sysmon configuration modules

• sysmon-config

  34 4,565 0.0

  Sysmon configuration file template with default high-quality event tracing

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• sysmon-config

  3 424 6.2

  Sysmon configuration file template with default high-quality event tracing (by Neo23x0)

True. Florian Roth keeps an updated fork https://github.com/Neo23x0/sysmon-config and also a huge detection rules repo https://github.com/SigmaHQ/sigma

• sigma

  41 7,598 9.8 Python

  Main Sigma Rule Repository

  

True. Florian Roth keeps an updated fork https://github.com/Neo23x0/sysmon-config and also a huge detection rules repo https://github.com/SigmaHQ/sigma

Suggest a related project