Search Results for "notes"

sysmon-modular is a community-driven repository that provides a modular, production-ready set of Sysmon configuration modules designed to be easily composed and tuned for different environments. The project organizes detection logic into per-event modules (for example, process creation, file create, network connection, registry events, image load, and many more) so operators can pick and choose which rules to enable without editing a monolithic XML by hand. It includes pre-generated...

...It ships as a shell script plus a PowerShell variant (Invoke-Thanos.ps1) that can target files, environment variables, registry entries, functions, aliases and certificates, and the repository warns repeatedly not to run it casually. The project includes short installation notes (for example, macOS requires gshuf from coreutils) and a README that frames the script as a “real gun” that should be used with extreme caution. By design the repo is blunt and provocative: it contains a Story.md for user anecdotes, and the README even notes the script only displays how many files would be deleted in one run. The codebase is mainly PowerShell and shell, licensed MIT, and has attracted attention and stars as a curiosity / research / prank tool rather than a production utility.