admin/jsecurity101-JonMon
1
0
Fork 0
mirror of https://github.com/jsecurity101/JonMon synced 2026-06-08 15:08:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: JonMon Configuration File
Pages
Event Mapping Home JonMon Configuration File JonMon Extensions
Clone
1
JonMon Configuration File
Jonathan Johnson edited this page 2025-01-27 17:27:28 -05:00
Table of Contents

Config Version 1.0:

{
    "ConfigVersion": "1.0",
    "JonMonVersion": "2.0",
    "ProcessCreation_Events": false,
    "File_Events": false,
    "ProcessHandleCreation_Events": false,
    "ProcessHandleDuplication_Events": false,
    "Registry_Events": false,
    "RemoteThreadCreation_Events": false,
    "ImageLoad_Events": false,
    "ProcessTermination_Events": false,
    "RPC_Events": false,
    "Network_Events": false,
    "DotNetLoad_Events": false,
    "AMSI_Events": false,
    "SchedTask_Events": false,
    "WMIEventSubscription_Events": false,
    "CryptUnprotect_Events": false,
    "ThreatIntelligence_Events":
    {
        "RemoteReadProcessMemory": false,
        "RemoteWriteProcessMemory": false,
        "RemoteVirtualAllocation": false,
        "RemoteQueueUserAPC": false
    },
    "TokenImpersonation_Events": false
}