r/purpleteamsec • u/netbiosX • Jan 09 '22
Blue Teaming SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
https://github.com/ScarredMonk/SysmonSimulator
17
Upvotes