Skip to content

/ sysmon-config

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

32 Open 37 Closed
32 Open 37 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Crash: Sysmon v13.00 + sysmonconfig-export.xml
#136 opened Jan 11, 2021 by BeanBagKing
4
Sysmon de-installed. Still many EventID 1001, APPCRASH Sysmon64.exe (every 20 sec)
#135 opened Jan 5, 2021 by Wim277
2
RE: sysmonconfig-export.xml
#134 opened Dec 28, 2020 by zabboto
Adding GrantedAccess filter for catching credential dump.
#133 opened Dec 23, 2020 by deftoner
update configuration
#132 opened Nov 20, 2020 by Achi79
1
Sysmon installation issue
#129 opened Sep 7, 2020 by MarkAndreson
1
Configuring EventId 15 for exe and dll files
#127 opened Aug 23, 2020 by joydragon
File updated - Sysmon Event ID
#126 opened Jul 17, 2020 by kont45
1
Edge is out of Dev
#123 opened Jun 24, 2020 by neildotwilliams
This config used with Sysmon 11.0 can cause bad network file open/save delays on Windows file servers.
#122 opened Jun 19, 2020 by branchnetconsulting
4
EventID 15: FileCreateStreamHash recording N times in eventviewer
#121 opened Jun 12, 2020 by Yuvraj-Takey
3
No Sysmon Event ID 1 events are being logged
#117 opened May 21, 2020 by lindonzoo
2
Didn'n instaled with -n parameters.
#116 opened May 20, 2020 by slavaNBA
4
Ok, installed and ran sysmon ... Now what?
#114 opened May 6, 2020 by quantuumsnot
2
Broken link in README
#112 opened Apr 10, 2020 by evandrix
Wrong Metasploit default port on sysmon-config > Alert,Metasploit
#111 opened Apr 4, 2020 by snake-jump
Missing dot could allow inadvertent whitelisting
#110 opened Mar 16, 2020 by Demuxx
can't exclude event with sysmon v10.42
#103 opened Dec 24, 2019 by soukoye
4
templating for easier maintaining
#99 opened Dec 10, 2019 by brettowe
2
IMAP port typo error
#95 opened Nov 1, 2019 by zulik
The description for Event ID 1 from source Microsoft-Windows-Sysmon cannot be found
#94 opened Oct 16, 2019 by rdf6
1
Newer versions of sysmon z-alphaversion
#91 opened Oct 11, 2019 by iboje
1
DNS Logging from Domain Controller/DNS Server
#89 opened Aug 12, 2019 by rbonfadini
4
DNS Logging
#88 opened Aug 12, 2019 by svenso
Related proccess tree - have you any idea?
#84 opened Jun 24, 2019 by kont45
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.
You can’t perform that action at this time.