489b30915d
Merge pull request #45 from einlamye/patch-5
...
Update configuration.md thanks for all the corrections !
2026-02-10 14:23:24 -04:00
e05d28691d
Merge pull request #44 from einlamye/patch-4
...
Update install_windows.md
2026-02-10 14:23:01 -04:00
69c97600b5
Merge pull request #43 from einlamye/patch-3
...
Update install_windows.md
2026-02-10 14:22:38 -04:00
c9149b05df
Merge pull request #42 from einlamye/patch-2
...
Update install_windows.md
2026-02-10 14:22:05 -04:00
07890d953f
Merge pull request #41 from einlamye/patch-1
...
Update install_windows.md
2026-02-10 14:21:35 -04:00
3e00547f24
Update configuration.md
...
Remove the duplicate command
2026-01-06 08:19:51 -08:00
7f877cbf41
Update install_windows.md
...
Fixing the typo Double S for the word of Some
2026-01-06 08:11:22 -08:00
32264ad7e7
Update install_windows.md
...
Add the sha256 as the algorithm which sysmon is capable of calculating
2026-01-06 08:09:58 -08:00
31d2602beb
Update install_windows.md
...
Fix the typo in command line of modifying the sysmon driver default name
2026-01-06 07:59:47 -08:00
5a550a8600
Update install_windows.md
...
Fix the typo in command line of the default installation method
2026-01-06 06:55:06 -08:00
2afabd6f72
Merge pull request #40 from trustedsec/2025-Update
...
2025 update
2025-12-15 18:36:24 -04:00
2f6a5c265c
Update Build script
...
update build to add new cover page .. painful
2025-12-04 12:50:04 -04:00
326bbf0bd3
update logos following new marketing styles
...
update logos following new marketing styles
2025-12-04 12:48:39 -04:00
b840b84e3f
Update configuration.md
...
add examples for all oprators
2025-12-04 12:48:01 -04:00
746e3401c2
Merge branch '2025-Update' of https://github.com/trustedsec/SysmonCommunityGuide into 2025-Update
2025-11-30 13:44:40 -04:00
8374ed0ca9
Delete CLAUDE.md
...
used claude code for PDF generation script. Removing md since no longer needed
2025-11-30 13:44:31 -04:00
1371c000ac
Update ReadMe
...
Added the entry for the Detection Engineering Fundamentals and License fix
2025-11-30 13:43:41 -04:00
bde5de34c3
update to build and chapters
...
* updated to th build script for the PDF
* Detection Engineering Fundamentals chapter
* added better guidance on how to leverage each event type.
* Provided general mapping to MITRE Techniques.
* Updated with leassons learned from 2025 IRs
2025-11-30 13:36:08 -04:00
63df90b7c0
Update what-is-sysmon.md
2025-07-17 20:25:57 -04:00
a0bd03e673
Update what-is-sysmon.md
...
Initial set of changes to the guide
2025-07-17 20:24:57 -04:00
6ec381ca0c
Merge pull request #35 from giomke/master-1
...
Update network-connections.md
2025-07-01 17:17:28 -04:00
00631fd916
Merge pull request #36 from thejanit0r/master
...
Update configuration.md
2025-07-01 17:17:13 -04:00
3ec3fbead0
First pass at improving the PDF generation of the Guide
2025-07-01 16:57:54 -04:00
362514b274
Merge pull request #39 from ilan-kogan/patch-1
...
Update what-is-sysmon.md
2024-05-21 19:57:31 -04:00
8e102ebad0
Update what-is-sysmon.md
...
the tool the tool repeated twice
2024-05-21 08:42:43 +03:00
2b02f627e1
Update configuration.md
...
Added links to tools that can be used to convert the configuration binary blob stored in the registry back to XML
2023-12-03 01:56:22 +01:00
85c0a10e97
Update network-connections.md
...
Controls reverse DNS lookup by Default is True.
To disable, you need to specify as false
2023-08-10 14:59:53 +04:00
3f9e38f784
Update WMI-events.md
...
additional noted for WMI events
2023-05-25 10:25:19 -04:00
bebcadd40c
Update clipboard-capture.md
...
Add note about Hyper-V
2023-05-25 10:19:38 -04:00
16f551afdd
Update process-tampering.md
...
Fix typo
2023-05-25 10:16:09 -04:00
35b10c9704
Merge pull request #32 from tareq-alkhatib/patch-1
...
Fixed typo
2023-02-10 09:45:21 -04:00
9ceb26497b
Fixed typo
2023-02-09 12:42:59 -05:00
a60cdbd9fe
Update file-blockshredding.md
...
added guidance for software updates.
2022-10-10 14:42:01 -04:00
fdf8a60f19
Update README.md
...
Update ReadMe for the File Block Shredding event in 14.1 under Schema 4.83
2022-10-07 13:23:22 -04:00
0704ecc13e
Update file-blockshredding.md
2022-10-07 13:21:43 -04:00
f7dd4f2434
Create file-blockshredding.md
...
Intial update for file block shreeding event in sysmon 14.1
2022-10-06 10:41:49 -04:00
adcdfee209
Merge branch 'master' of https://github.com/trustedsec/SysmonCommunityGuide
2022-08-18 11:06:59 -04:00
48e3c44f08
Add File Block EXE
...
Add File Block EXE event type information
2022-08-18 11:06:54 -04:00
8e51d8b4f5
Merge pull request #28 from TareqAlKhatib/master
...
Fixed Typo
2021-12-27 10:19:57 -04:00
1afeaec01d
Fixed Typo
2021-11-25 10:26:33 -05:00
2f16452027
Logon GUID info
2021-11-09 17:43:40 -04:00
90dce67144
Linux ProcessGUID
2021-11-09 16:25:08 -04:00
ad10e1d90d
updates for linux version of sysmon
2021-11-09 14:41:42 -04:00
87dc99cae3
Sysmon for Linux Update
...
Sysmon for Linux Update
2021-10-26 17:07:27 -04:00
16fbd6b208
eBPF Update
2021-10-22 12:55:12 -04:00
523f529c8d
Start update for Sysmon for Linux
...
Start update for Sysmon for Linux
2021-10-22 10:57:56 -04:00
925917d9cc
Update md2pdf.sh
2021-05-11 11:31:47 -04:00
0a47791d14
Update what-is-sysmon.md
2021-05-03 17:05:31 -04:00
8b50831a61
Update README.md
2021-05-03 17:01:55 -04:00
8ad16374d6
Create file_delete_detected.md
2021-05-03 15:32:00 -04:00
Carlos Perez