Detect Suspicious Sysmon Events with DEVMAN and ADMIN$ Indicators
Detection of potentially malicious activities on Windows systems related to Sysmon events, focusing on executable files, registry changes, and network connections.
Splunk (SPL)
Detection of potentially malicious activities on Windows systems related to Sysmon events, focusing on executable files, registry changes, and network connections.
Already have an account?