René's URL Explorer Experiment

Title: GitHub - node011/sysmon-modular: A repository of sysmon configuration modules · GitHub

Open Graph Title: GitHub - node011/sysmon-modular: A repository of sysmon configuration modules

X Title: GitHub - node011/sysmon-modular: A repository of sysmon configuration modules

Description: A repository of sysmon configuration modules. Contribute to node011/sysmon-modular development by creating an account on GitHub.

Open Graph Description: A repository of sysmon configuration modules. Contribute to node011/sysmon-modular development by creating an account on GitHub.

X Description: A repository of sysmon configuration modules. Contribute to node011/sysmon-modular development by creating an account on GitHub.

Opengraph URL: https://github.com/node011/sysmon-modular

X: @github

direct link

Domain: github.com

route-pattern	/:user_id/:repository
route-controller	files
route-action	disambiguate
fetch-nonce	v2:cffb4dcb-6a51-fcf7-80f3-9d8f3deba715
current-catalog-service-hash	f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id	ABB8:663BE:125D7C0:18CF261:6A570811
html-safe-nonce	bf2d9ed860a270a04c1175b36425ff00c1d2a184d33480d318eef8cc2fa01708
visitor-payload	eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBQkI4OjY2M0JFOjEyNUQ3QzA6MThDRjI2MTo2QTU3MDgxMSIsInZpc2l0b3JfaWQiOiI2NjExMTI0MDIyNDE5MDY0ODQ5IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac	a1cbf9ff8df0604f39d12c26b160bdd04ba4b4091c59ddbd1586a93801d074ab
hovercard-subject-tag	repository:596973938
github-keyboard-shortcuts	repository,copilot
google-site-verification	Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-url	https://collector.github.com/github/collect
analytics-location	//
fb:app_id	1401488693436528
apple-itunes-app	app-id=1477376905, app-argument=https://github.com/node011/sysmon-modular
twitter:image	https://opengraph.githubassets.com/73b1159ffb9c84003d52408523a656f1a86193ad5f5c4ca4888f882ea4af0683/node011/sysmon-modular
twitter:card	summary_large_image
og:image	https://opengraph.githubassets.com/73b1159ffb9c84003d52408523a656f1a86193ad5f5c4ca4888f882ea4af0683/node011/sysmon-modular
og:image:alt	A repository of sysmon configuration modules. Contribute to node011/sysmon-modular development by creating an account on GitHub.
og:image:width	1200
og:image:height	600
og:site_name	GitHub
og:type	object
hostname	github.com
expected-hostname	github.com
None	4eb29e5f807bd95e41196adfbc6d28f9af12d89830d8b684f3e871774ddff2fc
turbo-cache-control	no-cache
go-import	github.com/node011/sysmon-modular git https://github.com/node011/sysmon-modular.git
octolytics-dimension-user_id	124257857
octolytics-dimension-user_login	node011
octolytics-dimension-repository_id	596973938
octolytics-dimension-repository_nwo	node011/sysmon-modular
octolytics-dimension-repository_public	true
octolytics-dimension-repository_is_fork	true
octolytics-dimension-repository_parent_id	117379388
octolytics-dimension-repository_parent_nwo	olafhartong/sysmon-modular
octolytics-dimension-repository_network_root_id	117379388
octolytics-dimension-repository_network_root_nwo	olafhartong/sysmon-modular
turbo-body-classes	logged-out env-production page-responsive
disable-turbo	false
browser-stats-url	https://api.github.com/_private/browser/stats
browser-errors-url	https://api.github.com/_private/browser/errors
release	b056788a129fb0194b61f2ebb4c43f6a9f4dfd27
ui-target	full
theme-color	#1e2327
color-scheme	light dark

Links:

Skip to content	https://github.com/node011/sysmon-modular#start-of-content
	https://github.com/
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnode011%2Fsysmon-modular
GitHub CopilotWrite better code with AI	https://github.com/features/copilot
GitHub Copilot appDirect agents from issue to merge	https://github.com/features/ai/github-app
MCP RegistryNewIntegrate external tools	https://github.com/mcp
ActionsAutomate any workflow	https://github.com/features/actions
CodespacesInstant dev environments	https://github.com/features/codespaces
IssuesPlan and track work	https://github.com/features/issues
Code ReviewManage code changes	https://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilities	https://github.com/security/advanced-security
Code securitySecure your code as you build	https://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they start	https://github.com/security/advanced-security/secret-protection
Why GitHub	https://github.com/why-github
Documentation	https://docs.github.com
Blog	https://github.blog
Changelog	https://github.blog/changelog
Marketplace	https://github.com/marketplace
View all features	https://github.com/features
Enterprises	https://github.com/enterprise
Small and medium teams	https://github.com/team
Startups	https://github.com/enterprise/startups
Nonprofits	https://github.com/solutions/industry/nonprofits
App Modernization	https://github.com/solutions/use-case/app-modernization
DevSecOps	https://github.com/solutions/use-case/devsecops
DevOps	https://github.com/solutions/use-case/devops
CI/CD	https://github.com/solutions/use-case/ci-cd
View all use cases	https://github.com/solutions/use-case
Healthcare	https://github.com/solutions/industry/healthcare
Financial services	https://github.com/solutions/industry/financial-services
Manufacturing	https://github.com/solutions/industry/manufacturing
Government	https://github.com/solutions/industry/government
View all industries	https://github.com/solutions/industry
View all solutions	https://github.com/solutions
AI	https://github.com/resources/articles?topic=ai
Software Development	https://github.com/resources/articles?topic=software-development
DevOps	https://github.com/resources/articles?topic=devops
Security	https://github.com/resources/articles?topic=security
View all topics	https://github.com/resources/articles
Customer stories	https://github.com/customer-stories
Events & webinars	https://github.com/resources/events
Ebooks & reports	https://github.com/resources/whitepapers
Business insights	https://github.com/solutions/executive-insights
GitHub Skills	https://skills.github.com
Documentation	https://docs.github.com
Customer support	https://support.github.com
Community forum	https://github.com/orgs/community/discussions
Trust center	https://github.com/trust-center
Partners	https://github.com/partners
View all resources	https://github.com/resources
GitHub SponsorsFund open source developers	https://github.com/open-source/sponsors
Security Lab	https://securitylab.github.com
Maintainer Community	https://maintainers.github.com
Accelerator	https://github.com/open-source/accelerator
GitHub Stars	https://stars.github.com
Archive Program	https://archiveprogram.github.com
Topics	https://github.com/topics
Trending	https://github.com/trending
Collections	https://github.com/collections
Enterprise platformAI-powered developer platform	https://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security features	https://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI features	https://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 support	https://github.com/enterprise/premium-support
Pricing	https://github.com/pricing
Search syntax tips	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentation	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnode011%2Fsysmon-modular
Sign up	https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=node011%2Fsysmon-modular
Reload	https://github.com/node011/sysmon-modular
Reload	https://github.com/node011/sysmon-modular
Reload	https://github.com/node011/sysmon-modular
node011	https://github.com/node011
sysmon-modular	https://github.com/node011/sysmon-modular
olafhartong/sysmon-modular	https://github.com/olafhartong/sysmon-modular
Notifications	https://github.com/login?return_to=%2Fnode011%2Fsysmon-modular
Fork 0	https://github.com/login?return_to=%2Fnode011%2Fsysmon-modular
Star 0	https://github.com/login?return_to=%2Fnode011%2Fsysmon-modular
Code	https://github.com/node011/sysmon-modular
Pull requests 0	https://github.com/node011/sysmon-modular/pulls
Actions	https://github.com/node011/sysmon-modular/actions
Projects	https://github.com/node011/sysmon-modular/projects
Security and quality 0	https://github.com/node011/sysmon-modular/security
Insights	https://github.com/node011/sysmon-modular/pulse
Code	https://github.com/node011/sysmon-modular
Pull requests	https://github.com/node011/sysmon-modular/pulls
Actions	https://github.com/node011/sysmon-modular/actions
Projects	https://github.com/node011/sysmon-modular/projects
Security and quality	https://github.com/node011/sysmon-modular/security
Insights	https://github.com/node011/sysmon-modular/pulse
	https://github.com/node011/sysmon-modular
Branches	https://github.com/node011/sysmon-modular/branches
Tags	https://github.com/node011/sysmon-modular/tags
	https://github.com/node011/sysmon-modular/branches
	https://github.com/node011/sysmon-modular/tags
831 Commits	https://github.com/node011/sysmon-modular/commits/master/
	https://github.com/node011/sysmon-modular/commits/master/
.github/workflows	https://github.com/node011/sysmon-modular/tree/master/.github/workflows
.github/workflows	https://github.com/node011/sysmon-modular/tree/master/.github/workflows
0_custom_configuration	https://github.com/node011/sysmon-modular/tree/master/0_custom_configuration
0_custom_configuration	https://github.com/node011/sysmon-modular/tree/master/0_custom_configuration
10_process_access	https://github.com/node011/sysmon-modular/tree/master/10_process_access
10_process_access	https://github.com/node011/sysmon-modular/tree/master/10_process_access
11_file_create	https://github.com/node011/sysmon-modular/tree/master/11_file_create
11_file_create	https://github.com/node011/sysmon-modular/tree/master/11_file_create
12_13_14_registry_event	https://github.com/node011/sysmon-modular/tree/master/12_13_14_registry_event
12_13_14_registry_event	https://github.com/node011/sysmon-modular/tree/master/12_13_14_registry_event
15_file_create_stream_hash	https://github.com/node011/sysmon-modular/tree/master/15_file_create_stream_hash
15_file_create_stream_hash	https://github.com/node011/sysmon-modular/tree/master/15_file_create_stream_hash
17_18_pipe_event	https://github.com/node011/sysmon-modular/tree/master/17_18_pipe_event
17_18_pipe_event	https://github.com/node011/sysmon-modular/tree/master/17_18_pipe_event
19_20_21_wmi_event	https://github.com/node011/sysmon-modular/tree/master/19_20_21_wmi_event
19_20_21_wmi_event	https://github.com/node011/sysmon-modular/tree/master/19_20_21_wmi_event
1_process_creation	https://github.com/node011/sysmon-modular/tree/master/1_process_creation
1_process_creation	https://github.com/node011/sysmon-modular/tree/master/1_process_creation
22_dns_query	https://github.com/node011/sysmon-modular/tree/master/22_dns_query
22_dns_query	https://github.com/node011/sysmon-modular/tree/master/22_dns_query
23_file_delete	https://github.com/node011/sysmon-modular/tree/master/23_file_delete
23_file_delete	https://github.com/node011/sysmon-modular/tree/master/23_file_delete
24_clipboard_change	https://github.com/node011/sysmon-modular/tree/master/24_clipboard_change
24_clipboard_change	https://github.com/node011/sysmon-modular/tree/master/24_clipboard_change
25_process_tampering	https://github.com/node011/sysmon-modular/tree/master/25_process_tampering
25_process_tampering	https://github.com/node011/sysmon-modular/tree/master/25_process_tampering
26_file_delete_deteted	https://github.com/node011/sysmon-modular/tree/master/26_file_delete_deteted
26_file_delete_deteted	https://github.com/node011/sysmon-modular/tree/master/26_file_delete_deteted
2_file_create_time	https://github.com/node011/sysmon-modular/tree/master/2_file_create_time
2_file_create_time	https://github.com/node011/sysmon-modular/tree/master/2_file_create_time
3_network_connection_initiated	https://github.com/node011/sysmon-modular/tree/master/3_network_connection_initiated
3_network_connection_initiated	https://github.com/node011/sysmon-modular/tree/master/3_network_connection_initiated
5_process_ended	https://github.com/node011/sysmon-modular/tree/master/5_process_ended
5_process_ended	https://github.com/node011/sysmon-modular/tree/master/5_process_ended
6_driver_loaded_into_kernel	https://github.com/node011/sysmon-modular/tree/master/6_driver_loaded_into_kernel
6_driver_loaded_into_kernel	https://github.com/node011/sysmon-modular/tree/master/6_driver_loaded_into_kernel
7_image_load	https://github.com/node011/sysmon-modular/tree/master/7_image_load
7_image_load	https://github.com/node011/sysmon-modular/tree/master/7_image_load
8_create_remote_thread	https://github.com/node011/sysmon-modular/tree/master/8_create_remote_thread
8_create_remote_thread	https://github.com/node011/sysmon-modular/tree/master/8_create_remote_thread
9_raw_access_read	https://github.com/node011/sysmon-modular/tree/master/9_raw_access_read
9_raw_access_read	https://github.com/node011/sysmon-modular/tree/master/9_raw_access_read
attack_matrix	https://github.com/node011/sysmon-modular/tree/master/attack_matrix
attack_matrix	https://github.com/node011/sysmon-modular/tree/master/attack_matrix
.gitignore	https://github.com/node011/sysmon-modular/blob/master/.gitignore
.gitignore	https://github.com/node011/sysmon-modular/blob/master/.gitignore
Merge-SysmonXml.ps1	https://github.com/node011/sysmon-modular/blob/master/Merge-SysmonXml.ps1
Merge-SysmonXml.ps1	https://github.com/node011/sysmon-modular/blob/master/Merge-SysmonXml.ps1
README.md	https://github.com/node011/sysmon-modular/blob/master/README.md
README.md	https://github.com/node011/sysmon-modular/blob/master/README.md
license.md	https://github.com/node011/sysmon-modular/blob/master/license.md
license.md	https://github.com/node011/sysmon-modular/blob/master/license.md
sysmonconfig-excludes-only.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-excludes-only.xml
sysmonconfig-excludes-only.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-excludes-only.xml
sysmonconfig-mde-augment.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-mde-augment.xml
sysmonconfig-mde-augment.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-mde-augment.xml
sysmonconfig-research.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-research.xml
sysmonconfig-research.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig-research.xml
sysmonconfig.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig.xml
sysmonconfig.xml	https://github.com/node011/sysmon-modular/blob/master/sysmonconfig.xml
README	https://github.com/node011/sysmon-modular
License	https://github.com/node011/sysmon-modular
	https://github.com/node011/sysmon-modular#sysmon-modular--a-sysmon-configuration-repository-for-everybody-to-customise
	https://github.com/olafhartong/sysmon-modular/blob/master/license.md
	https://camo.githubusercontent.com/7c9ad2f4cb02f8b8d86a325a74122c36790f1b7c4378aa62d2188812bbdadaea/68747470733a2f2f696d672e736869656c64732e696f2f6d61696e74656e616e63652f7965732f323032332e7376673f7374796c653d666c61742d737175617265
	https://github.com/olafhartong/sysmon-modular/commit/master
	https://github.com/olafhartong/sysmon-modular/workflows/Build%20Sysmon%20config%20with%20all%20modules/badge.svg
	https://twitter.com/olafhartong
	https://discord.gg/B5n6skNTwy
download here	https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
here	https://github.com/olafhartong/sysmon-modular/wiki/Configuration-options#generating-custom-configs
	https://github.com/node011/sysmon-modular#pre-grenerated-configurations
sysmonconfig.xml	https://raw.githubusercontent.com/olafhartong/sysmon-modular/master/sysmonconfig.xml
here	https://github.com/olafhartong/sysmon-modular/wiki/Configuration-options#generating-the-default-configuration
sysmonconfig-excludes-only.xml	https://raw.githubusercontent.com/olafhartong/sysmon-modular/master/sysmonconfig-excludes-only.xml
here	https://github.com/olafhartong/sysmon-modular/wiki/Configuration-options#generating-custom-configs
sysmonconfig-research.xml	https://raw.githubusercontent.com/olafhartong/sysmon-modular/master/sysmonconfig-research.xml
sysmonconfig-mde-augmentation.xml	https://raw.githubusercontent.com/olafhartong/sysmon-modular/master/sysmonconfig-mde-augment.xml
	https://github.com/node011/sysmon-modular#index
Required actions	https://github.com/node011/sysmon-modular#required-actions
Customization	https://github.com/node011/sysmon-modular#customization
Generating a config	https://github.com/node011/sysmon-modular#generating-a-config
PowerShell	https://github.com/node011/sysmon-modular#powershell
Generating custom configs	https://github.com/node011/sysmon-modular#generating-custom-configs
Use	https://github.com/node011/sysmon-modular#use
Install	https://github.com/node011/sysmon-modular#install
Update existing configuration	https://github.com/node011/sysmon-modular#update-existing-configuration
Sysmon Community	https://github.com/node011/sysmon-modular#sysmon-community
Contributing	https://github.com/node011/sysmon-modular#contributing
More information	https://github.com/node011/sysmon-modular#more-information
Mitre ATT&CK	https://github.com/node011/sysmon-modular#mitre-attack
NOTICE Sysmon below 13 will not completely be compatible with this configuration	https://github.com/node011/sysmon-modular#notice-sysmon-below-13-will-not-completely-be-compatible-with-this-configuration
a video	https://youtu.be/Cx_zrM8Hu7Y
	https://www.youtube.com/watch?v=Cx_zrM8Hu7Y
	https://github.com/node011/sysmon-modular#notice-sysmon-below-13-will-not-completely-be-compatible-with-this-configuration
here	https://github.com/olafhartong/sysmon-modular/tree/version-8
here	https://github.com/olafhartong/sysmon-modular/tree/version-9
here	https://github.com/olafhartong/sysmon-modular/tree/v10.4
here	https://github.com/olafhartong/sysmon-modular/tree/version-12
small blog post	https://medium.com/falconforce/sysmon-11-dns-improvements-and-filedelete-events-7a74f17ca842
DerbyCon talk	http://www.irongeek.com/i.php?page=videos/derbycon9/stable-36-endpoint-detection-super-powers-on-the-cheap-with-sysmon-olaf-hartong
	https://github.com/node011/sysmon-modular#sysmon-community
@SwiftOnSecurity	https://twitter/com/SwiftOnSecurity
https://github.com/SwiftOnSecurity/sysmon-config/	https://github.com/SwiftOnSecurity/sysmon-config/blob/master/sysmonconfig-export.xml
@cyb3rops	https://twitter.com/cyb3rops
https://github.com/Neo23x0/sysmon-config	https://github.com/Neo23x0/sysmon-config
@olafhartong	https://twitter.com/olafhartong
@Carlos_Perez	https://github.com/node011/twitter.com/Carlos_Perez
https://github.com/trustedsec/SysmonCommunityGuide	https://github.com/trustedsec/SysmonCommunityGuide
	https://github.com/node011/sysmon-modular#contributing
	https://github.com/node011/sysmon-modular#more-information
Endpoint detection Superpowers on the cheap - part1 - MITRE ATT&CK, Sysmon and my modular configuration	https://medium.com/@olafhartong/endpoint-detection-superpowers-on-the-cheap-part-1-e9c28201ac47
Endpoint detection Superpowers on the cheap — part 2 — Deploy and Maintain	https://medium.com/@olafhartong/endpoint-detection-superpowers-on-the-cheap-part-2-deploy-and-maintain-d06580329fe8
Endpoint detection Superpowers on the cheap — part 3 — Sysmon Tampering	https://medium.com/@olafhartong/endpoint-detection-superpowers-on-the-cheap-part-3-sysmon-tampering-49c2dc9bf6d9
A comparison between Sysmon and Microsoft Defender for Endpoint	https://medium.com/falconforce/sysmon-vs-microsoft-defender-for-endpoint-mde-internals-0x01-1e5663b10347
	https://github.com/node011/sysmon-modular#mitre-attack
	https://github.com/node011/sysmon-modular#required-actions
	https://github.com/node011/sysmon-modular#customization
	https://github.com/node011/sysmon-modular#generating-a-config
	https://github.com/node011/sysmon-modular#powershell
	https://github.com/node011/sysmon-modular#generating-custom-configs
	https://github.com/node011/sysmon-modular#use
	https://github.com/node011/sysmon-modular#install
	https://github.com/node011/sysmon-modular#update-existing-configuration
Readme	https://github.com/node011/sysmon-modular#readme-ov-file
MIT license	https://github.com/node011/sysmon-modular#MIT-1-ov-file
Please reload this page	https://github.com/node011/sysmon-modular
Activity	https://github.com/node011/sysmon-modular/activity
0 forks	https://github.com/node011/sysmon-modular/forks
Report repository	https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fnode011%2Fsysmon-modular&report=node011+%28user%29
Releases	https://github.com/node011/sysmon-modular/releases
Packages 0	https://github.com/users/node011/packages?repo_name=sysmon-modular
Please reload this page	https://github.com/node011/sysmon-modular
Contributors	https://github.com/node011/sysmon-modular/graphs/contributors
Please reload this page	https://github.com/node011/sysmon-modular
	https://github.com
Terms	https://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacy	https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Security	https://github.com/security
Status	https://www.githubstatus.com/
Community	https://github.community/
Docs	https://docs.github.com/
Contact	https://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.