Threat Management

sysmon

Cyber Threat Hunting

0 (0)

A collection of tools and resources for threat hunters.

Sentinel ATT&CK

0 (0)

A threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel

Sysmon Learning Resources

0 (0)

A curated list of resources for learning about deploying, managing, and hunting with Microsoft Sysmon.

ThreatHunting

0 (0)

A Splunk app mapped to MITRE ATT&CK to guide threat hunts.

A tool for investigating incidents involving users clicking on emails with links or attachments and opening macro-enabled word documents using Sysmon.

Windows EVTX Samples [200 EVTX examples]

0 (0)

Container of 200 Windows EVTX samples for testing detection scripts and training on DFIR.