Top 15 Sysmon Open-Source Projects

• sigma

  41 8,414 9.7 Python

  Main Sigma Rule Repository

  

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• sysmon-config

  35 4,819 0.0

  Sysmon configuration file template with default high-quality event tracing

  Project mention: Software Hardening Tools for System Defense | dev.to | 2024-04-30

  cd c:\sysmon git clone https://github.com/SwiftOnSecurity/sysmon-config sysmon -accepteula -i sysmon-config/sysmon-config.xml

• DetectionLab

  31 4,654 0.0 HTML

  Automate the creation of a lab environment complete with security tooling and logging best practices

• WindowsSpyBlocker

  43 4,659 0.0 Go

  Block spying and tracking on Windows

  Project mention: Scripts to build a trimmed-down Windows 11 image | news.ycombinator.com | 2024-04-25

• ThreatHunter-Playbook

  4 4,037 0.0 Python

  A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

  

• sysmon-modular

  15 2,669 0.9 PowerShell

  A repository of sysmon configuration modules

• SysmonTools

  2 1,489 3.3

  Utilities for Sysmon

• whids

  3 1,151 0.0 Go

  Open Source EDR for Windows

  

• sysmon-config

  1 773 7.2 PowerShell

  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events. (by ion-storm)

• Zircolite

  4 682 6.4 Python

  A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• EnableWindowsLogSettings

  1 531 4.1 Batchfile

  Documentation and scripts to properly enable Windows event logs.

  

• iMonitorSDK

  1 343 3.2 Batchfile

  The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发

• Shhmon

  1 221 0.0 C#

  Neutering Sysmon via driver unload

• SysmonConfigPusher

  2 89 0.0 C#

  Pushes Sysmon Configs

  

• sysmon

  2 61 1.8

  Sysmon and wazuh integration with Sigma sysmon rules [updated] (by sametsazak)

Sysmon related posts

• Software Hardening Tools for System Defense

  1 project | dev.to | 30 Apr 2024

• Troubleshooting Intermittent Slowness on Network Share

  1 project | /r/msp | 7 Jul 2023

• Sysmon 15.0 is out now with advanced features

  2 projects | /r/sysadmin | 29 Jun 2023

• Sysmon not reading our config.xml-file

  1 project | /r/sysadmin | 21 Jun 2023

• SysmonConfigPusher: Pushes Sysmon Configs - 2 years old, but wasn't included at the time

  1 project | /r/blueteamsec | 11 Jun 2023

• Cheap, Fast, Good and Simple Remote Monitoring for Small Environments

  1 project | /r/msp | 31 May 2023

• How do you actually threat hunt?

  3 projects | /r/cybersecurity | 30 May 2023
• A note from our sponsor - SaaSHub
  www.saashub.com | 1 Dec 2024

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com