Jordan Drysdale // tl;dr This blog is being provided to demonstrate the capabilities of Sysmon logging broken down by event ID. The IDs will be captured in context and matched to their sysmon-modular configuration section for tuning opportunities. Please allow me a shout out here to the author of the sysmon-modular repository on Github. Olaf […]
The post A Sysmon Event ID Breakdown – Now with Event ID 25!! appeared first on Black Hills Information Security.
Print
Share
Comment
Cite
Upload
Translate
APA
() » A Sysmon Event ID Breakdown – Now with Event ID 25!!. Retrieved from https://www.truth.cx/2021/01/08/a-sysmon-event-id-breakdown-now-with-event-id-25/.
MLA" » A Sysmon Event ID Breakdown – Now with Event ID 25!!." - , https://www.truth.cx/2021/01/08/a-sysmon-event-id-breakdown-now-with-event-id-25/
HARVARD » A Sysmon Event ID Breakdown – Now with Event ID 25!!., viewed ,
VANCOUVER - » A Sysmon Event ID Breakdown – Now with Event ID 25!!. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2021/01/08/a-sysmon-event-id-breakdown-now-with-event-id-25/
CHICAGO" » A Sysmon Event ID Breakdown – Now with Event ID 25!!." - Accessed . https://www.truth.cx/2021/01/08/a-sysmon-event-id-breakdown-now-with-event-id-25/
IEEE" » A Sysmon Event ID Breakdown – Now with Event ID 25!!." [Online]. Available: https://www.truth.cx/2021/01/08/a-sysmon-event-id-breakdown-now-with-event-id-25/. [Accessed: ]