Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate clean XML configs without manually editing Sysmon files.
-
Updated
Mar 10, 2026 - Python
#
sysmon-windows
Here are 4 public repositories matching this topic...
Hands-on Windows endpoint investigation project using Sysmon to practice SOC Tier-1 triage, correlation, and escalation-ready incident analysis.
-
Updated
Jan 28, 2026
sysmonconfig-export.xml (edit) SwiftOnSecurity
-
Updated
Jun 4, 2026
A collection of hands-on labs completed as part of the CyberDefender training program. Each lab folder includes the objective, tools used, skills gained, and a write-up of the approach taken.
documentation log splunk dfir wireshark threat-hunting siem malware-analysis soc network-security threat-intelligence pcap-analyzer endpoint-security detection-engineering pcap-analysis forensics-tools mitre-attck sysmon-windows
-
Updated
Jul 22, 2026
Improve this page
Add a description, image, and links to the sysmon-windows topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the sysmon-windows topic, visit your repo's landing page and select "manage topics."