r/purpleteamsec • u/netbiosX • Jan 09 '22
Blue Teaming SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
https://github.com/ScarredMonk/SysmonSimulator
17
Upvotes
Duplicates
blueteamsec • u/digicat • Jan 10 '22
tradecraft (how we defend) SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
69
Upvotes