ELSA Parsers for the following Sysmon events:
Event ID 1: Process Create
Event ID 3: Network Connection Detected
Specifically written for use with Security Onion. If used elsewhere, some modification will be needed.
-
Notifications
You must be signed in to change notification settings - Fork 4
ELSA Parsers for Sysmon Events
License
defensivedepth/Sysmon_ELSA_Parsers
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
ELSA Parsers for Sysmon Events
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published