489b30915d
Merge pull request #45 from einlamye/patch-5
...
Update configuration.md thanks for all the corrections !
2026-02-10 14:23:24 -04:00
e05d28691d
Merge pull request #44 from einlamye/patch-4
...
Update install_windows.md
2026-02-10 14:23:01 -04:00
69c97600b5
Merge pull request #43 from einlamye/patch-3
...
Update install_windows.md
2026-02-10 14:22:38 -04:00
c9149b05df
Merge pull request #42 from einlamye/patch-2
...
Update install_windows.md
2026-02-10 14:22:05 -04:00
3e00547f24
Update configuration.md
...
Remove the duplicate command
2026-01-06 08:19:51 -08:00
7f877cbf41
Update install_windows.md
...
Fixing the typo Double S for the word of Some
2026-01-06 08:11:22 -08:00
32264ad7e7
Update install_windows.md
...
Add the sha256 as the algorithm which sysmon is capable of calculating
2026-01-06 08:09:58 -08:00
31d2602beb
Update install_windows.md
...
Fix the typo in command line of modifying the sysmon driver default name
2026-01-06 07:59:47 -08:00
5a550a8600
Update install_windows.md
...
Fix the typo in command line of the default installation method
2026-01-06 06:55:06 -08:00
2f6a5c265c
Update Build script
...
update build to add new cover page .. painful
2025-12-04 12:50:04 -04:00
326bbf0bd3
update logos following new marketing styles
...
update logos following new marketing styles
2025-12-04 12:48:39 -04:00
b840b84e3f
Update configuration.md
...
add examples for all oprators
2025-12-04 12:48:01 -04:00
bde5de34c3
update to build and chapters
...
* updated to th build script for the PDF
* Detection Engineering Fundamentals chapter
* added better guidance on how to leverage each event type.
* Provided general mapping to MITRE Techniques.
* Updated with leassons learned from 2025 IRs
2025-11-30 13:36:08 -04:00
63df90b7c0
Update what-is-sysmon.md
2025-07-17 20:25:57 -04:00
a0bd03e673
Update what-is-sysmon.md
...
Initial set of changes to the guide
2025-07-17 20:24:57 -04:00
6ec381ca0c
Merge pull request #35 from giomke/master-1
...
Update network-connections.md
2025-07-01 17:17:28 -04:00
00631fd916
Merge pull request #36 from thejanit0r/master
...
Update configuration.md
2025-07-01 17:17:13 -04:00
8e102ebad0
Update what-is-sysmon.md
...
the tool the tool repeated twice
2024-05-21 08:42:43 +03:00
2b02f627e1
Update configuration.md
...
Added links to tools that can be used to convert the configuration binary blob stored in the registry back to XML
2023-12-03 01:56:22 +01:00
85c0a10e97
Update network-connections.md
...
Controls reverse DNS lookup by Default is True.
To disable, you need to specify as false
2023-08-10 14:59:53 +04:00
3f9e38f784
Update WMI-events.md
...
additional noted for WMI events
2023-05-25 10:25:19 -04:00
bebcadd40c
Update clipboard-capture.md
...
Add note about Hyper-V
2023-05-25 10:19:38 -04:00
16f551afdd
Update process-tampering.md
...
Fix typo
2023-05-25 10:16:09 -04:00
9ceb26497b
Fixed typo
2023-02-09 12:42:59 -05:00
a60cdbd9fe
Update file-blockshredding.md
...
added guidance for software updates.
2022-10-10 14:42:01 -04:00
0704ecc13e
Update file-blockshredding.md
2022-10-07 13:21:43 -04:00
f7dd4f2434
Create file-blockshredding.md
...
Intial update for file block shreeding event in sysmon 14.1
2022-10-06 10:41:49 -04:00
adcdfee209
Merge branch 'master' of https://github.com/trustedsec/SysmonCommunityGuide
2022-08-18 11:06:59 -04:00
48e3c44f08
Add File Block EXE
...
Add File Block EXE event type information
2022-08-18 11:06:54 -04:00
1afeaec01d
Fixed Typo
2021-11-25 10:26:33 -05:00
2f16452027
Logon GUID info
2021-11-09 17:43:40 -04:00
90dce67144
Linux ProcessGUID
2021-11-09 16:25:08 -04:00
ad10e1d90d
updates for linux version of sysmon
2021-11-09 14:41:42 -04:00
87dc99cae3
Sysmon for Linux Update
...
Sysmon for Linux Update
2021-10-26 17:07:27 -04:00
16fbd6b208
eBPF Update
2021-10-22 12:55:12 -04:00
523f529c8d
Start update for Sysmon for Linux
...
Start update for Sysmon for Linux
2021-10-22 10:57:56 -04:00
Carlos Perez