And You, Sysmon, Against Me?
summary
A Polish talk titled “I ty, Sysmonie, przeciwko mnie?” covers practical cybersecurity knowledge focusing on Sysmon (Windows System Monitor) and its use in detection and incident analysis. It discusses how to configure and leverage Sysmon events and rules to identify malicious activity and improve defensive monitoring.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:06What is Sysmon?
- 6:50Detecting Sysmon presence
- 15:18Evading Sysmon detection
- 23:54Overwriting Sysmon rules
- 31:39Updates and recommendations
- 36:17Sysmon config file
- 39:05Summary
related talks
44mGetting The Most Out Of Sysmon
32mSysmon Deep Dive: Real Detection Scenarios You Can Reproduce
11mSysmon Monitoring Different Way
40mHunt and Gather: Developing Effective Threat Hunting Techniques
45mAdvanced Security Operations with Elastic Security
29mDetection Engineering: Defending Networks with Purpose
30mThe SOC Counter ATT&CK
36mBeing A Better Defender By Channeling Your Worst Adversary: