Sysmon-DFIR
AboutBlogsCommunity GuideDeploy SysmonELKGeneralGravwellGraylogMicrosoft System CenterPresentationsRSA NetwitnessSplunkSysmon Configuration FilesSysmon Github ProjectsUtilities

Sysmon Configuration Files

Nov 29, 2023

  • @Neo23x0 Fork of SwiftOnSecurity Sysmon Config
  • Ion-Storm Sysmon Config
  • Sysmon Config files - Moti Bani @MotiBa
  • sysmon-modular - A Sysmon configuration repository for everybody to customize - @olafhartong
  • SwiftOnSecurity Sysmon Configuration
  • Ion-Storm Graylog App and Sysmon Configuration
  • 909Research Blog
  • Decent Security Config
  • MalwareArchaeology

Sysmon-DFIR

  • Sysmon-DFIR
  • MHaggis
  • M_Haggis

A curated and bespoke list of resources for learning about deploying, managing and hunting with Microsoft Sysmon. Contains presentations, deployment methods, configuration file examples, blogs and additional GitHub repositories.