Showing 30 of 30 events
Complete reference for all Sysmon v15.2 event IDs sourced from Microsoft Sysinternals documentation. Includes key fields, forensic value, noise level, and configuration guidance. Log channel: Microsoft-Windows-Sysmon/Operational
40 curated highest-signal Sigma rules from SigmaHQ/sigma using Sysmon events as their primary log source. Rules cover all key Sysmon event types. Click any EID chip to jump to that event in the reference tab.
Convert to your SIEM: sigconverter.io · License: DRL 1.1