Pinned

1. sysmon-modular

   A repository of sysmon configuration modules

   PowerShell 1.4k 277

2. ThreatHunting

   A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

   Python 791 130

3. ATTACKdatamap

   A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

   PowerShell 279 51

4. Presentations

   My conference presentations

   18 5

5. TA-Sysmon-deploy

   Deploy and maintain Symon through the Splunk Deployment Sever

   Batchfile 27 12

6. sysmon-cheatsheet

   All sysmon event types and their fields explained

   192 37