Event Logs

9 bookmarks

Custom sorting

GitHub - SwiftOnSecurity/sysmon-config: Sysmon configuration file template with default high-quality event tracing

Sysmon configuration file template with default high-quality event tracing - GitHub - SwiftOnSecurity/sysmon-config: Sysmon configuration file template with default high-quality event tracing

·github.com·Sep 4, 2022

GitHub - SwiftOnSecurity/sysmon-config: Sysmon configuration file template with default high-quality event tracing

Jessica Payne on Twitter

When reading reports about fantastically clever and innovative malware, it’s easy to lose sight of the fact a lot of it got installed by attackers with Domain Admin. Don’t forget that the last stage wizardry often is preceded by 90% of the attack you can detect and mitigate.— Jessica Payne (@jepayneMSFT) May 9, 2019

·twitter.com·Sep 4, 2022

Jessica Payne on Twitter

Windows Security Log Encyclopedia

·ultimatewindowssecurity.com·Sep 4, 2022

Windows Security Log Encyclopedia

wevtutil

Reference article for wevtutil, which lets you retrieve information about event logs and publishers.

·docs.microsoft.com·Sep 4, 2022

wevtutil

Tech Tuesday Workshop Cobalt Strike Detection via Log Analysis | SANS Institute

Tech Tuesday Workshop Cobalt Strike Detection via Log Analysis

·sans.org·Sep 4, 2022

Tech Tuesday Workshop Cobalt Strike Detection via Log Analysis | SANS Institute

Windows 10 and Windows Server 2016 security auditing and monitoring reference

This reference details most advanced security audit events for Windows 10 and Windows Server 2016.

·microsoft.com·Sep 9, 2022

Windows 10 and Windows Server 2016 security auditing and monitoring reference

GitHub - olafhartong/sysmon-modular: A repository of sysmon configuration modules

A repository of sysmon configuration modules. Contribute to olafhartong/sysmon-modular development by creating an account on GitHub.

·github.com·Sep 10, 2022

GitHub - olafhartong/sysmon-modular: A repository of sysmon configuration modules

Tuned and curated Winlogbeats config file

Tuned and curated Winlogbeats config file · GitHub

·gist.github.com·Oct 30, 2022

Tuned and curated Winlogbeats config file

GitHub - Yamato-Security/EnableWindowsLogSettings: Documentation and scripts to properly enable Windows event logs.

Documentation and scripts to properly enable Windows event logs. - GitHub - Yamato-Security/EnableWindowsLogSettings: Documentation and scripts to properly enable Windows event logs.

·github.com·Nov 16, 2022

GitHub - Yamato-Security/EnableWindowsLogSettings: Documentation and scripts to properly enable Windows event logs.