Automatic sysmon install powershell script

cisagov · Oct 22, 2024 · a00102f · a00102f
1 parent 1733589
commit a00102f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/scripts/install_sysmon.ps1 b/scripts/install_sysmon.ps1
@@ -0,0 +1,8 @@
+# Curl and unzip sysmon off the windows sysinternals page
+curl https://download.sysinternals.com/files/Sysmon.zip -OutFile sysmon.zip
+Expand-Archive sysmon.zip
+# Curl and unzip the swift on config xml
+curl https://github.com/SwiftOnSecurity/sysmon-config/archive/refs/heads/master.zip -OutFile sysmon-config.zip
+Expand-Archive sysmon-config.zip
+# install sysmon 
+.\sysmon\sysmon -accepteula -i .\sysmon-config\sysmon-config-master\sysmonconfig-export.xml