mirror of
https://github.com/OTRF/OSSEM-DD
synced 2026-06-08 12:05:33 +00:00
e56a0abbfb
* event_code --> event_id * title --> name
5 lines
445 B
YAML
5 lines
445 B
YAML
name: Sysmon Event Logs
|
|
description: System Monitor (Sysmon) for Linux is an open-source system monitor tool developed to collect security events from Linux environments using eBPF (Extended Berkeley Packet Filter) and sending them to Syslog for easy consumption. Sysmon for Linux is built on a library named “sysinternalsEBPF” which is built on libbpf including a library of eBPF inline functions used as helpers.
|
|
images: []
|
|
references: []
|