issues
search
SwiftOnSecurity
/
sysmon-config
Sysmon configuration file template with default high-quality event tracing
4.73k
stars
1.69k
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
The description for Event ID 1 from source Microsoft-Windows-Sysmon cannot be found
#94
rdf6
opened
4 years ago
2
Event 10 ProcessAccess - CPU Load
#93
gamble3
closed
4 years ago
1
Keyboard Layout Load
#92
Neo23x0
closed
2 years ago
2
Newer versions of sysmon z-alphaversion
#91
iboje
opened
4 years ago
1
z-AlphaVersion.xml broken on Sysmon 10.4?
#90
thefunch
closed
4 years ago
2
DNS Logging from Domain Controller/DNS Server
#89
rbonfadini
opened
5 years ago
4
DNS Logging
#88
svenso
opened
5 years ago
0
Rule Group Inclusion & Exclusion
#87
mtrog
closed
5 years ago
1
fixed typo in RecycleBin network rule
#86
tomx4096
closed
5 years ago
0
Bugfix: SecurityProvider reg key
#85
keepwatch
closed
5 years ago
2
Related proccess tree - have you any idea?
#84
kont45
opened
5 years ago
0
DestinationIp conditioned?
#83
alchy
opened
5 years ago
0
added loopback address to networkconnect exclusions
#82
itpropaul
closed
5 years ago
0
Event IDs with both Include and Exclude Filters
#81
itpropaul
opened
5 years ago
6
Evasion Technique Enhancements
#80
trustedsec
opened
5 years ago
0
DNSQuery EID not found in event viewer
#79
weiofcn
opened
5 years ago
5
typo fix: unexplanable > unexplainable
#78
itpropaul
closed
5 years ago
0
type fix unexplanable
#77
itpropaul
closed
5 years ago
0
FileCreate: match ".dmp" files
#76
simsor
closed
5 years ago
0
Update sysmonconfig-export.xml
#75
dstaulcu
closed
5 years ago
0
Issues with CommadnLine conditions "Testing Line Dllhost.exe exclusion"
#74
johnyb0312
opened
5 years ago
5
sysmonconfig-export.xml - Possible error in IMAP port
#73
fabamatic
closed
5 years ago
1
Missing LICENSE file
#72
JonZeolla
opened
5 years ago
0
Fixed IMAP port
#71
esecrpm
closed
2 years ago
1
Sysmon export logs to CSV | JSON | XML
#70
kont45
closed
5 years ago
11
Tracking SMB connections from the client?
#69
hkelley
closed
5 years ago
2
Wmi Events Log Generation
#68
nterl0k
closed
5 years ago
1
Incorrect Registry Location for WDigest Vuln
#67
twingbat
closed
5 years ago
1
Update IMAP-port in sysmonconfig-export.xml
#66
martboo
closed
2 years ago
1
Rename fixes
#65
ryanku98
closed
6 years ago
0
Typo with rtf
#64
polylogyx
closed
5 years ago
2
Additional exclusions, corrected some capitalization issues
#63
ryanku98
closed
6 years ago
0
Bug with FileCreate and Box Drive
#62
mhale1982
closed
5 years ago
1
Sysmon Event ID 10 "Process accessed" not filtering
#61
rmfatemi
closed
5 years ago
3
Suggested exclusions for Win10
#60
davidbernalm
closed
5 years ago
0
Change IMAP port to the correct one
#59
paalbra
closed
2 years ago
1
RTF File Creation Typo
#58
p1sc3s
closed
6 years ago
1
Others minifilters - some logs are not saved by Sysmon
#57
kont45
closed
5 years ago
2
Possible Config Issue on Win10
#56
robsmallridge
closed
5 years ago
3
Resilio Sync
#55
mubix
closed
5 years ago
1
Blizzard Agent
#54
mubix
closed
5 years ago
2
Micro-improvements to monitored scenarios
#53
threathunting
closed
2 years ago
1
WmiEvent onmatch error installing
#52
malwareandme
closed
5 years ago
0
having Zone identifier appended to the file name
#51
anelshaer
closed
3 years ago
1
Corrected typo for RTF extension
#50
kronflux
closed
2 years ago
0
Typo on rtf file extension on line 476
#49
mcwidg3t
closed
5 years ago
2
Fixed .rtf (was .rft)
#48
al45tair
closed
3 years ago
0
Update to Sysmon 7.x schema version
#47
cxxr
closed
6 years ago
0
Creating a Dummy process Image to test hashes in ELK (ID7)
#46
coolbluemoon34
closed
5 years ago
1
Sysmon v7 requires schema version update.
#45
kyhwana
closed
5 years ago
1
Previous
Next