Skip to content

Issues: SwiftOnSecurity/sysmon-config

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
51 Open 44 Closed
51 Open 44 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Missing LICENSE file
#72 opened Apr 11, 2019 by JonZeolla
Issues with CommadnLine conditions "Testing Line Dllhost.exe exclusion"
#74 opened Jun 8, 2019 by johnyb0312
5
DNSQuery EID not found in event viewer
#79 opened Jun 13, 2019 by weiofcn
5
Evasion Technique Enhancements
#80 opened Jun 13, 2019 by trustedsec
Event IDs with both Include and Exclude Filters
#81 opened Jun 14, 2019 by itpropaul
6
DestinationIp conditioned?
#83 opened Jun 22, 2019 by alchy
Related proccess tree - have you any idea?
#84 opened Jun 24, 2019 by kont45
DNS Logging
#88 opened Aug 12, 2019 by svenso
DNS Logging from Domain Controller/DNS Server
#89 opened Aug 12, 2019 by rbonfadini
4
Newer versions of sysmon z-alphaversion
#91 opened Oct 11, 2019 by iboje
1
The description for Event ID 1 from source Microsoft-Windows-Sysmon cannot be found
#94 opened Oct 16, 2019 by rdf6
2
IMAP port typo error
#95 opened Nov 1, 2019 by zulik
1
templating for easier maintaining
#99 opened Dec 10, 2019 by brettowe
2
can't exclude event with sysmon v10.42
#103 opened Dec 24, 2019 by soukoye
4
Missing dot could allow inadvertent whitelisting
#110 opened Mar 16, 2020 by Demuxx
Wrong Metasploit default port on sysmon-config > Alert,Metasploit
#111 opened Apr 4, 2020 by snake-jump
1
Broken link in README
#112 opened Apr 10, 2020 by evandrix
Ok, installed and ran sysmon ... Now what?
#114 opened May 6, 2020 by quantuumsnot
2
Didn'n instaled with -n parameters.
#116 opened May 20, 2020 by slavaNBA
4
No Sysmon Event ID 1 events are being logged
#117 opened May 21, 2020 by lindonzoo
3
EventID 15: FileCreateStreamHash recording N times in eventviewer
#121 opened Jun 12, 2020 by Yuvraj-Takey
3
This config used with Sysmon 11.0 can cause bad network file open/save delays on Windows file servers.
#122 opened Jun 19, 2020 by branchnetconsulting
4
Edge is out of Dev
#123 opened Jun 24, 2020 by neildotwilliams
File updated - Sysmon Event ID
#126 opened Jul 17, 2020 by kont45
1
Configuring EventId 15 for exe and dll files
#127 opened Aug 23, 2020 by joydragon
ProTip! Exclude everything labeled bug with -label:bug.