Search Results for "events"

sysmon-modular is a community-driven repository that provides a modular, production-ready set of Sysmon configuration modules designed to be easily composed and tuned for different environments. The project organizes detection logic into per-event modules (for example, process creation, file create, network connection, registry events, image load, and many more) so operators can pick and choose which rules to enable without editing a monolithic XML by hand. It includes pre-generated configuration variants (balanced, default with FileDelete, verbose, super-verbose, and a Microsoft Defender for Endpoint augmentation) to cover common use cases while warning about the performance tradeoffs of very verbose settings. ...

This utility observes change events of files or subdirectories in a folder and writes the event along with the file name to the console window. NOTE: Batch and PowerShell scripts are provided in order to show how to process the output of the tool. Find the examples in the Files tab.