Getting Started With Sysmon
ID: 17701dbb-fa10-5743-a1d8-7e3f7eab2caf
STIX ID: report--17701dbb-fa10-5743-a1d8-7e3f7eab2caf
Feed Name: Black Hills Infosec Blog
Threat Score
This blog demonstrates how to deploy Sysmon with a community configuration and use the ADHD toolkit to create and run a simple backdoor in a lab, then view the rich Sysmon Operational logs (process, network, user, and hash details) to illustrate improved Windows logging and detection capabilities.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.