Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate clean XML configs without manually editing Sysmon files.
-
Updated
Mar 10, 2026 - Python
#
sysmon-windows
Here are 5 public repositories matching this topic...
Hands-on Windows endpoint investigation project using Sysmon to practice SOC Tier-1 triage, correlation, and escalation-ready incident analysis.
-
Updated
Jan 28, 2026
sysmonconfig-export.xml (edit) SwiftOnSecurity
-
Updated
Jun 4, 2026
A collection of hands-on labs completed as part of the CyberDefender training program. Each lab folder includes the objective, tools used, skills gained, and a write-up of the approach taken.
documentation log splunk dfir wireshark threat-hunting siem malware-analysis soc network-security threat-intelligence pcap-analyzer endpoint-security detection-engineering pcap-analysis forensics-tools mitre-attck sysmon-windows
-
Updated
Jul 22, 2026
Built SOC detection engineering lab: Sysmon + Splunk pipeline, 6 MITRE ATT&CK-mapped detections built with Atomic Red Team, a live dashboard, and a formal incident report.
splunk incident-response cybersecurity sysmon siem soc blue-team mitre-attack sysmon-config detection-engineering sysmon-logs atomic-red-team sysmon-windows
-
Updated
Aug 14, 2026
Add this topic to your repo
To associate your repository with the sysmon-windows topic, visit your repo's landing page and select "manage topics."