Jan. 17, 2024, 4:37 p.m. | /u/THE_VER1TAS

For [Blue|Purple] Teams in Cyber Defence www.reddit.com

https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon



This update to Sysmon fixes a case of system hanging on uninstall, a crash occurring while parsing configuration files, and a memory leak.



Check out my advanced config that includes blocking rules for most implants used by the bad guys. Let me know what you think!



https://github.com/THEVER1TAS/sysmon-config

advanced bad blocking blueteamsec case check config configuration configuration files crash files fixes implants leak memory memory leak parsing rules sysmon system uninstall update

Cybersecurity Consultant

@ Devoteam | Cité Mahrajène, Tunisia

GTI Manager of Cybersecurity Operations

@ Grant Thornton | Phoenix, AZ, United States

(Senior) Director of Information Governance, Risk, and Compliance

@ SIXT | Munich, Germany

Information System Security Engineer

@ Space Dynamics Laboratory | North Logan, UT

Intelligence Specialist (Threat/DCO) - Level 3

@ Constellation Technologies | Fort Meade, MD

Cybersecurity GRC Specialist (On-site)

@ EnerSys | Reading, PA, US, 19605