Jan. 17, 2024, 4:37 p.m. | /u/THE_VER1TAS

For [Blue|Purple] Teams in Cyber Defence www.reddit.com

https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon



This update to Sysmon fixes a case of system hanging on uninstall, a crash occurring while parsing configuration files, and a memory leak.



Check out my advanced config that includes blocking rules for most implants used by the bad guys. Let me know what you think!



https://github.com/THEVER1TAS/sysmon-config

advanced bad blocking blueteamsec case check config configuration configuration files crash files fixes implants leak memory memory leak parsing rules sysmon system uninstall update

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Security Operations Manager-West Coast

@ The Walt Disney Company | USA - CA - 2500 Broadway Street

Vulnerability Analyst - Remote (WFH)

@ Cognitive Medical Systems | Phoenix, AZ, US | Oak Ridge, TN, US | Austin, TX, US | Oregon, US | Austin, TX, US

Senior Mainframe Security Administrator

@ Danske Bank | Copenhagen V, Denmark