admin/olafhartong-sysmon-modular
1
0
Fork 0
mirror of https://github.com/olafhartong/sysmon-modular synced 2026-06-08 16:29:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
olafhartong-sysmon-modular/12_13_14_registry_event
T
History
Olaf Hartong 91f1ee878d fix typo
2023-06-21 14:18:52 +00:00
..
exclude_cisco_anyconnect.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_cylance.xml
Create exclude_cylance.xml
2021-06-24 11:04:33 +02:00
exclude_hklm_ccs_tcpip.xml
several changes to reg events, improve signals
2023-04-13 13:50:23 -04:00
exclude_internet_explorer_settings.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_ivanti.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_kaspersky_lab_internet_security.xml
XML formatter PR skibum1869
2021-05-18 16:55:08 +02:00
exclude_mcafee_endpoint.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_microsoft_defender_for_endpoint.xml
additional filters for noise
2022-11-08 09:25:51 +01:00
exclude_microsoft_monitoring_agent.xml
additional filters for noise
2022-11-08 09:25:51 +01:00
exclude_noise.xml
several changes to reg events, improve signals
2023-04-13 13:50:23 -04:00
exclude_owncloud.xml
XML formatter PR skibum1869
2021-05-18 16:55:08 +02:00
exclude_scheduled_task_cache.xml
fixed filter error
2021-06-21 09:33:04 +02:00
exclude_sentinelone_endpoint.xml
XML formatter PR skibum1869
2021-05-18 16:55:08 +02:00
exclude_system_process.xml
added system registry exclusions
2021-05-18 13:39:53 +02:00
exclude_vmware_tools.xml
added vmware tools ip filter
2021-05-05 11:37:06 +02:00
exclude_webroot.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_widcomm_bt_driver.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_windows_bootup_control.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_windows_file_exts.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
exclude_windows_generic_binaries.xml
Bugfix condition
2021-06-24 11:00:49 +02:00
exclude_windows_misc.xml
filter additional noise
2022-11-12 20:56:26 +01:00
exclude_windows_service_autostart.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_appc_shim.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_authentication_package.xml
registry monitoring improvements
2022-08-31 12:08:16 +02:00
include_autoruns_and_startup_keys.xml
fixing https://github.com/olafhartong/sysmon-modular/issues/146
2022-09-05 09:38:12 +02:00
include_bypass_uac.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_com_hijack.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00
include_credential_dumping_via_vss.xml
added credential techniques
2021-05-18 15:31:05 +02:00
include_disable_password_change.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_dll_injection_at_process_launch.xml
registry monitoring improvements
2022-08-31 12:08:16 +02:00
include_dns_serverdll_injection.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00
include_dotnet_ETW_tampering.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_environment_mod.xml
https://github.com/olafhartong/sysmon-modular/issues/132
2022-08-31 09:31:27 +02:00
include_eventlog.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00
include_group_policy_integrity.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_image_file_exec_options.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_internet_explorer_extentions_helpers_or_toolbars.xml
https://github.com/olafhartong/sysmon-modular/issues/132
2022-08-31 09:31:27 +02:00
include_local_port_monitor.xml
Fix technique ids
2023-04-13 14:22:25 -04:00
include_mounted_devices.xml
added mounted device keys
2021-09-29 08:30:58 +02:00
include_netsh.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_office_dde.xml
Add include_office_dde
2022-02-26 08:57:44 +01:00
include_office_security_features.xml
create include_office_security_features.xml
2021-07-12 13:28:11 +02:00
include_office.xml
registry monitoring improvements
2022-08-31 12:08:16 +02:00
include_rdp_logon_execution.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00
include_rdp_terminal_service_sensitive_settings.xml
Corrected spacing issue
2021-12-31 15:07:54 +01:00
include_scheduled_tasks_path.xml
added rules
2022-03-11 18:31:43 +01:00
include_security_support_provider.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_services.xml
several changes to reg events, improve signals
2023-04-13 13:50:23 -04:00
include_sip_trust_provider_hijacking.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_sysinternals.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_sysmon.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_terminal_service_execution.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_w32time_provider.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_windows_address_book.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_windows_app_path_hijack.xml
removed MDE tag extra char
2021-09-29 13:02:48 +02:00
include_windows_com_objects.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_windows_consent.xml
several changes to reg events, improve signals
2023-04-13 13:50:23 -04:00
include_windows_credential_providers.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_windows_defender_tampering.xml
fix typo
2023-06-21 14:18:52 +00:00
include_windows_disabling_security_services.xml
https://github.com/olafhartong/sysmon-modular/issues/132
2022-08-31 09:31:27 +02:00
include_windows_firewall_tampering.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_windows_integrity_monitoring.xml
registry monitoring improvements
2022-08-31 12:08:16 +02:00
include_windows_networking.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_windows_port_changes.xml
https://github.com/olafhartong/sysmon-modular/issues/132
2022-08-31 09:31:27 +02:00
include_windows_powershell_logging_tampering.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_windows_root_certs.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_windows_security_center_tampering.xml
Updating to v11 TIDs and minor fixes
2022-06-28 16:13:53 -04:00
include_windows_shell_hijack.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_windows_spooler_connections.xml
registry monitoring improvements
2022-08-31 12:08:16 +02:00
include_windows_store_tampering.xml
https://github.com/olafhartong/sysmon-modular/issues/132
2022-08-31 09:31:27 +02:00
include_windows_thumbnail_autostart.xml
Proper XML formatting
2021-04-24 20:22:10 +02:00
include_windows_uac_tampering.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00
include_windowsupdate_autostart.xml
additional coverage
2021-09-29 08:35:14 +02:00
include_winsock.xml
MDE tags added
2021-09-29 08:35:39 +02:00
include_wmi_implant.xml
hive and coverage improvements
2021-09-29 08:34:41 +02:00