Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate clean XML configs without manually editing Sysmon files.
-
Updated
Mar 10, 2026 - Python
#
sysmon-windows
Here are 2 public repositories matching this topic...
Hands-on Windows endpoint investigation project using Sysmon to practice SOC Tier-1 triage, correlation, and escalation-ready incident analysis.
-
Updated
Jan 28, 2026
Improve this page
Add a description, image, and links to the sysmon-windows topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the sysmon-windows topic, visit your repo's landing page and select "manage topics."