⤷ Title: TryHackMe Walkthrough — EDR Defensive — Retracted
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Sat, 24 May 2025 20:19:29 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #sysmon #tryhackme_writeup #tryhackme_walkthrough
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Sat, 24 May 2025 20:19:29 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #sysmon #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe Walkthrough — EDR Defensive — Retracted
Investigate the case of the missing ransomware.
⤷ Title: Leveraging Sysmon to Complement EDR and Address Evasion Techniques
════════════════════════
𐀪 Author: Siddhant Mishra
════════════════════════
ⴵ Time: Mon, 26 May 2025 05:56:32 GMT
════════════════════════
⌗ Tags: #sysmon #blue_team #cybersecurity #detection_engineering #threat_hunting
════════════════════════
𐀪 Author: Siddhant Mishra
════════════════════════
ⴵ Time: Mon, 26 May 2025 05:56:32 GMT
════════════════════════
⌗ Tags: #sysmon #blue_team #cybersecurity #detection_engineering #threat_hunting
Medium
Leveraging Sysmon to Complement EDR and Address Evasion Techniques
The proliferation of sophisticated EDR evasion techniques requires organizations to rethink endpoint security strategies. EDR solutions are…
⤷ Title: [CyberSec] Sysmon On-Demand for Enhanced Visibility During Incident Investigation
════════════════════════
𐀪 Author: Pietro Romano / SecBeret
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 10:43:39 GMT
════════════════════════
⌗ Tags: #sysmon #detection_security #observability #cyberattack #cybersecurity
════════════════════════
𐀪 Author: Pietro Romano / SecBeret
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 10:43:39 GMT
════════════════════════
⌗ Tags: #sysmon #detection_security #observability #cyberattack #cybersecurity
Medium
[CyberSec] Sysmon On-Demand for Enhanced Visibility During Incident Investigation
A.I. support for text and images
⤷ Title: SYSMON
════════════════════════
𐀪 Author: rkn
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 12:14:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #sysmon
════════════════════════
𐀪 Author: rkn
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 12:14:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #sysmon
Medium
SYSMON
What is Sysmon??
⤷ Title: Intermediate Lab Environment: Configure Windows VM-1
════════════════════════
𐀪 Author: Allen Ace
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 16:48:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows #penetration_testing #technology #sysmon
════════════════════════
𐀪 Author: Allen Ace
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 16:48:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows #penetration_testing #technology #sysmon
Medium
Intermediate Lab Environment: Configure Windows VM-1
Part 6a
⤷ Title: TEMPEST TryHackMe Walkthrough
════════════════════════
𐀪 Author: Olodudeibukun
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 18:25:50 GMT
════════════════════════
⌗ Tags: #tryhackme #sysmon #windows_event_logs #tryhackme_walkthrough #tryhackme_writeup
════════════════════════
𐀪 Author: Olodudeibukun
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 18:25:50 GMT
════════════════════════
⌗ Tags: #tryhackme #sysmon #windows_event_logs #tryhackme_walkthrough #tryhackme_writeup
Medium
TEMPEST TryHackMe Walkthrough
TL;DR walkthrough of the TryHackMe Tempest room.
⤷ Title: [CyberDefenders Write-up] MeteorHit (Lab inspired by MeteorExpress incident)
════════════════════════
𐀪 Author: Chicken0248
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 10:14:36 GMT
════════════════════════
⌗ Tags: #digital_forensics #cyberdefender #cybersecurity #blue_team #sysmon
════════════════════════
𐀪 Author: Chicken0248
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 10:14:36 GMT
════════════════════════
⌗ Tags: #digital_forensics #cyberdefender #cybersecurity #blue_team #sysmon
Medium
[CyberDefenders Write-up] MeteorHit (Lab inspired by MeteorExpress incident)
Investigate compromised machine started from GPO immediate task which was inspired by MeteorExpress wiping incident.
⤷ Title: Why Sysmon is a Must-Have in Your Security Toolkit
════════════════════════
𐀪 Author: Prasidh
════════════════════════
ⴵ Time: Sun, 13 Jul 2025 12:06:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #sysmon
════════════════════════
𐀪 Author: Prasidh
════════════════════════
ⴵ Time: Sun, 13 Jul 2025 12:06:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #sysmon
Medium
Why Sysmon is a Must-Have in Your Security Toolkit
When a security incident strikes, the ability to thoroughly investigate and understand “how it happened” is paramount. While Windows’…
⤷ Title: Getting Started with Sysmon — System Monitoring for Windows
════════════════════════
𐀪 Author: Samuel George
════════════════════════
ⴵ Time: Thu, 31 Jul 2025 23:25:43 GMT
════════════════════════
⌗ Tags: #system_monitor #cyber_security_awareness #application_security #information_security #sysmon
════════════════════════
𐀪 Author: Samuel George
════════════════════════
ⴵ Time: Thu, 31 Jul 2025 23:25:43 GMT
════════════════════════
⌗ Tags: #system_monitor #cyber_security_awareness #application_security #information_security #sysmon
Medium
Getting Started with Sysmon — System Monitoring for Windows
Sysmon (System Monitor) is a powerful Windows system service and device driver that logs system activity into the Windows event log…
⤷ Title: Sysmon Config and Sending Logs to Wazuh: Enhancing Endpoint Visibility
════════════════════════
𐀪 Author: Arfan Abid
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 14:36:15 GMT
════════════════════════
⌗ Tags: #siem #wazuh #sysmon #infosec #log_analysis_sysmon
════════════════════════
𐀪 Author: Arfan Abid
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 14:36:15 GMT
════════════════════════
⌗ Tags: #siem #wazuh #sysmon #infosec #log_analysis_sysmon
Medium
Sysmon Config and Sending Logs to Wazuh: Enhancing Endpoint Visibility
By default, the Wazuh Agent collects Windows and system logs. While this provides a basic level of monitoring, it does not deliver enough…