SysmonX – An Augmented Drop-In Replacement of Sysmon

SysmonX is an open-source, community-driven, and drop-in replacement version of Sysmon that provides a modularized architecture with the purpose of enabling the infosec community to: Extend the Sysmon data collection sources and create new security events Extend the Sysmon ability to correlate events. Effectively enabling new logical operations between events and the creation of advanced […]