 Carlos Perez
|
3ec3fbead0
|
First pass at improving the PDF generation of the Guide
|
2025-07-01 16:57:54 -04:00 |
|
|
Carlos Perez
|
362514b274
|
Merge pull request #39 from ilan-kogan/patch-1
Update what-is-sysmon.md
|
2024-05-21 19:57:31 -04:00 |
|
|
ilan-kogan
|
8e102ebad0
|
Update what-is-sysmon.md
the tool the tool repeated twice
|
2024-05-21 08:42:43 +03:00 |
|
|
Carlos Perez
|
3f9e38f784
|
Update WMI-events.md
additional noted for WMI events
|
2023-05-25 10:25:19 -04:00 |
|
|
Carlos Perez
|
bebcadd40c
|
Update clipboard-capture.md
Add note about Hyper-V
|
2023-05-25 10:19:38 -04:00 |
|
|
Carlos Perez
|
16f551afdd
|
Update process-tampering.md
Fix typo
|
2023-05-25 10:16:09 -04:00 |
|
|
Carlos Perez
|
35b10c9704
|
Merge pull request #32 from tareq-alkhatib/patch-1
Fixed typo
|
2023-02-10 09:45:21 -04:00 |
|
|
tareq-alkhatib
|
9ceb26497b
|
Fixed typo
|
2023-02-09 12:42:59 -05:00 |
|
|
Carlos Perez
|
a60cdbd9fe
|
Update file-blockshredding.md
added guidance for software updates.
|
2022-10-10 14:42:01 -04:00 |
|
|
Carlos Perez
|
fdf8a60f19
|
Update README.md
Update ReadMe for the File Block Shredding event in 14.1 under Schema 4.83
|
2022-10-07 13:23:22 -04:00 |
|
|
Carlos Perez
|
0704ecc13e
|
Update file-blockshredding.md
|
2022-10-07 13:21:43 -04:00 |
|
|
Carlos Perez
|
f7dd4f2434
|
Create file-blockshredding.md
Intial update for file block shreeding event in sysmon 14.1
|
2022-10-06 10:41:49 -04:00 |
|
|
Carlos Perez
|
adcdfee209
|
Merge branch 'master' of https://github.com/trustedsec/SysmonCommunityGuide
|
2022-08-18 11:06:59 -04:00 |
|
|
Carlos Perez
|
48e3c44f08
|
Add File Block EXE
Add File Block EXE event type information
|
2022-08-18 11:06:54 -04:00 |
|
|
Carlos Perez
|
8e51d8b4f5
|
Merge pull request #28 from TareqAlKhatib/master
Fixed Typo
|
2021-12-27 10:19:57 -04:00 |
|
|
Tareq Alkhatib
|
1afeaec01d
|
Fixed Typo
|
2021-11-25 10:26:33 -05:00 |
|
|
Carlos Perez
|
2f16452027
|
Logon GUID info
|
2021-11-09 17:43:40 -04:00 |
|
|
Carlos Perez
|
90dce67144
|
Linux ProcessGUID
|
2021-11-09 16:25:08 -04:00 |
|
|
Carlos Perez
|
ad10e1d90d
|
updates for linux version of sysmon
|
2021-11-09 14:41:42 -04:00 |
|
|
Carlos Perez
|
87dc99cae3
|
Sysmon for Linux Update
Sysmon for Linux Update
|
2021-10-26 17:07:27 -04:00 |
|
|
Carlos Perez
|
16fbd6b208
|
eBPF Update
|
2021-10-22 12:55:12 -04:00 |
|
|
Carlos Perez
|
523f529c8d
|
Start update for Sysmon for Linux
Start update for Sysmon for Linux
|
2021-10-22 10:57:56 -04:00 |
|
|
Carlos Perez
|
925917d9cc
|
Update md2pdf.sh
v1.3
|
2021-05-11 11:31:47 -04:00 |
|
|
Carlos Perez
|
0a47791d14
|
Update what-is-sysmon.md
|
2021-05-03 17:05:31 -04:00 |
|
|
Carlos Perez
|
8b50831a61
|
Update README.md
|
2021-05-03 17:01:55 -04:00 |
|
|
Carlos Perez
|
8ad16374d6
|
Create file_delete_detected.md
|
2021-05-03 15:32:00 -04:00 |
|
|
Carlos Perez
|
dac3cce359
|
Create NetConnBaseline.xml
|
2021-04-26 14:12:37 -04:00 |
|
|
Carlos Perez
|
32c11a6536
|
Example of FileDeleteDetected
Example of FileDeleteDetected used in Youtube video
|
2021-04-26 13:58:05 -04:00 |
|
|
Carlos Perez
|
593ff868c5
|
Update Exchange_CVE_2021_26855.xml
added more IOCs
|
2021-03-05 21:08:14 -04:00 |
|
|
Carlos Perez
|
9eb48e871e
|
Create Exchange_CVE_2021_26855.xml
|
2021-03-05 18:19:51 -04:00 |
|
|
Carlos Perez
|
0192fd1253
|
Update clipboard-capture.md
|
2021-01-27 15:34:03 -04:00 |
|
|
Carlos Perez
|
098095cd6a
|
Update clipboard-capture.md
|
2021-01-27 14:49:46 -04:00 |
|
|
Carlos Perez
|
bb8e078e84
|
Update clipboard-capture.md
wrong XML element
|
2021-01-27 14:45:59 -04:00 |
|
|
Carlos Perez
|
72d60357fd
|
Update process-tampering.md
|
2021-01-16 08:15:47 -04:00 |
|
|
Carlos Perez
|
02eb5059da
|
Update README.md
|
2021-01-16 08:15:17 -04:00 |
|
|
Carlos Perez
|
dde0f068cf
|
typos and clarification
|
2021-01-14 07:20:39 -04:00 |
|
|
Carlos Perez
|
2d0ca29aaf
|
add standalone changelog table
|
2021-01-14 07:00:20 -04:00 |
|
|
Carlos Perez
|
41dfcf379c
|
update table with changes
v1.2
|
2021-01-13 15:17:37 -04:00 |
|
|
Carlos Perez
|
893dd1b563
|
Initial commit for process tampering
|
2021-01-12 17:40:04 -04:00 |
|
|
Carlos Perez
|
cbb82ac257
|
Update the-sysmon-driver.md
|
2020-10-09 14:13:24 -04:00 |
|
|
Carlos Perez
|
646b521c3d
|
Update install-and-configuration.md
Added new guidance for the process protection
added description for file delete and clipboard
|
2020-10-09 13:48:45 -04:00 |
|
|
Carlos Perez
|
108877e236
|
Update what-is-sysmon.md
Added event for clipboard capture.
|
2020-10-09 13:06:19 -04:00 |
|
|
Carlos Perez
|
fcf943e0b0
|
Update clipboard-capture.md
|
2020-10-08 16:53:19 -04:00 |
|
|
Carlos Perez
|
b38bd2f41f
|
Rename clipboard-capture.med to clipboard-capture.md
wrong extension
|
2020-10-08 05:02:15 -04:00 |
|
|
Carlos Perez
|
89c4bf4e83
|
Update clipboard-capture.med
Initial set of information
|
2020-10-07 22:00:16 -04:00 |
|
|
Carlos Perez
|
98239c9dd2
|
Create clipboard-capture.med
|
2020-10-05 16:55:20 -04:00 |
|
|
Carlos Perez
|
bc0891b40f
|
Update with Warning on driver
|
2020-10-05 14:53:17 -04:00 |
|
|
Carlos Perez
|
5ed21e128b
|
Build files use for PDF crestion
Build files use for PDF crestion
v1.1
|
2020-07-16 15:12:34 -03:00 |
|
|
Carlos Perez
|
5a28b910c4
|
Update Sysmon.md
|
2020-07-10 14:41:35 -04:00 |
|
|
Carlos Perez
|
878846c78e
|
Update Sysmon.md
|
2020-07-10 14:24:12 -04:00 |
|