About Blogs Community Guide Deploy Sysmon ELK General Gravwell Graylog Microsoft System Center Presentations RSA Netwitness Splunk Sysmon Configuration Files Sysmon Github Projects Utilities

Gravwell

Nov 29, 2023

Gravwell

Gravwell and Windows Event Logging
Windows DNS Threat Hunting With Sysmon and Gravwell
Sysmon DNS Logging Video (Security Weekly Episode #608)

Sysmon-DFIR

Sysmon-DFIR

MHaggis
M_Haggis

A curated and bespoke list of resources for learning about deploying, managing and hunting with Microsoft Sysmon. Contains presentations, deployment methods, configuration file examples, blogs and additional GitHub repositories.