2f6a5c265c
Update Build script
...
update build to add new cover page .. painful
2025-12-04 12:50:04 -04:00
326bbf0bd3
update logos following new marketing styles
...
update logos following new marketing styles
2025-12-04 12:48:39 -04:00
b840b84e3f
Update configuration.md
...
add examples for all oprators
2025-12-04 12:48:01 -04:00
746e3401c2
Merge branch '2025-Update' of https://github.com/trustedsec/SysmonCommunityGuide into 2025-Update
2025-11-30 13:44:40 -04:00
8374ed0ca9
Delete CLAUDE.md
...
used claude code for PDF generation script. Removing md since no longer needed
2025-11-30 13:44:31 -04:00
1371c000ac
Update ReadMe
...
Added the entry for the Detection Engineering Fundamentals and License fix
2025-11-30 13:43:41 -04:00
bde5de34c3
update to build and chapters
...
* updated to th build script for the PDF
* Detection Engineering Fundamentals chapter
* added better guidance on how to leverage each event type.
* Provided general mapping to MITRE Techniques.
* Updated with leassons learned from 2025 IRs
2025-11-30 13:36:08 -04:00
63df90b7c0
Update what-is-sysmon.md
2025-07-17 20:25:57 -04:00
a0bd03e673
Update what-is-sysmon.md
...
Initial set of changes to the guide
2025-07-17 20:24:57 -04:00
6ec381ca0c
Merge pull request #35 from giomke/master-1
...
Update network-connections.md
2025-07-01 17:17:28 -04:00
00631fd916
Merge pull request #36 from thejanit0r/master
...
Update configuration.md
2025-07-01 17:17:13 -04:00
3ec3fbead0
First pass at improving the PDF generation of the Guide
2025-07-01 16:57:54 -04:00
362514b274
Merge pull request #39 from ilan-kogan/patch-1
...
Update what-is-sysmon.md
2024-05-21 19:57:31 -04:00
8e102ebad0
Update what-is-sysmon.md
...
the tool the tool repeated twice
2024-05-21 08:42:43 +03:00
2b02f627e1
Update configuration.md
...
Added links to tools that can be used to convert the configuration binary blob stored in the registry back to XML
2023-12-03 01:56:22 +01:00
85c0a10e97
Update network-connections.md
...
Controls reverse DNS lookup by Default is True.
To disable, you need to specify as false
2023-08-10 14:59:53 +04:00
3f9e38f784
Update WMI-events.md
...
additional noted for WMI events
2023-05-25 10:25:19 -04:00
bebcadd40c
Update clipboard-capture.md
...
Add note about Hyper-V
2023-05-25 10:19:38 -04:00
16f551afdd
Update process-tampering.md
...
Fix typo
2023-05-25 10:16:09 -04:00
35b10c9704
Merge pull request #32 from tareq-alkhatib/patch-1
...
Fixed typo
2023-02-10 09:45:21 -04:00
9ceb26497b
Fixed typo
2023-02-09 12:42:59 -05:00
a60cdbd9fe
Update file-blockshredding.md
...
added guidance for software updates.
2022-10-10 14:42:01 -04:00
fdf8a60f19
Update README.md
...
Update ReadMe for the File Block Shredding event in 14.1 under Schema 4.83
2022-10-07 13:23:22 -04:00
0704ecc13e
Update file-blockshredding.md
2022-10-07 13:21:43 -04:00
f7dd4f2434
Create file-blockshredding.md
...
Intial update for file block shreeding event in sysmon 14.1
2022-10-06 10:41:49 -04:00
adcdfee209
Merge branch 'master' of https://github.com/trustedsec/SysmonCommunityGuide
2022-08-18 11:06:59 -04:00
48e3c44f08
Add File Block EXE
...
Add File Block EXE event type information
2022-08-18 11:06:54 -04:00
8e51d8b4f5
Merge pull request #28 from TareqAlKhatib/master
...
Fixed Typo
2021-12-27 10:19:57 -04:00
1afeaec01d
Fixed Typo
2021-11-25 10:26:33 -05:00
2f16452027
Logon GUID info
2021-11-09 17:43:40 -04:00
90dce67144
Linux ProcessGUID
2021-11-09 16:25:08 -04:00
ad10e1d90d
updates for linux version of sysmon
2021-11-09 14:41:42 -04:00
87dc99cae3
Sysmon for Linux Update
...
Sysmon for Linux Update
2021-10-26 17:07:27 -04:00
16fbd6b208
eBPF Update
2021-10-22 12:55:12 -04:00
523f529c8d
Start update for Sysmon for Linux
...
Start update for Sysmon for Linux
2021-10-22 10:57:56 -04:00
925917d9cc
Update md2pdf.sh
2021-05-11 11:31:47 -04:00
0a47791d14
Update what-is-sysmon.md
2021-05-03 17:05:31 -04:00
8b50831a61
Update README.md
2021-05-03 17:01:55 -04:00
8ad16374d6
Create file_delete_detected.md
2021-05-03 15:32:00 -04:00
dac3cce359
Create NetConnBaseline.xml
2021-04-26 14:12:37 -04:00
32c11a6536
Example of FileDeleteDetected
...
Example of FileDeleteDetected used in Youtube video
2021-04-26 13:58:05 -04:00
593ff868c5
Update Exchange_CVE_2021_26855.xml
...
added more IOCs
2021-03-05 21:08:14 -04:00
9eb48e871e
Create Exchange_CVE_2021_26855.xml
2021-03-05 18:19:51 -04:00
0192fd1253
Update clipboard-capture.md
2021-01-27 15:34:03 -04:00
098095cd6a
Update clipboard-capture.md
2021-01-27 14:49:46 -04:00
bb8e078e84
Update clipboard-capture.md
...
wrong XML element
2021-01-27 14:45:59 -04:00
72d60357fd
Update process-tampering.md
2021-01-16 08:15:47 -04:00
02eb5059da
Update README.md
2021-01-16 08:15:17 -04:00
dde0f068cf
typos and clarification
2021-01-14 07:20:39 -04:00
2d0ca29aaf
add standalone changelog table
2021-01-14 07:00:20 -04:00
Carlos Perez