Using Sysmon to Enrich Security Onion's Host-Level Capabilities

With more network traffic being encrypted, as well as the persistence of advanced adversaries, it is becoming increasingly imperative that there is greater visibility at the host-level. With this greater visibility comes the ability to more efficiently detect and respond to threats. This paper...

By

Josh Brower

March 27, 2015

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 18, 2024

A Prescription for Windows Prefetch Analysis

The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.

Coolest Careers Poster

Digital Forensics, Incident Response & Threat Hunting

SANSがおすすめするサイバーセキュリティの仕事20選: サイバーセキュリティアナリスト/エンジニア

サイバーセキュリティアナリスト/エンジニアの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Blog_teaser_images_(5).png

Digital Forensics, Incident Response & Threat Hunting

February 7, 2022

SANS DFIR Course Roadmap and Job Role Matrix

Here is our suggested Course Roadmap to guide you in your search for training. Use the Job Role Matrix to match a course with common job roles in DFIR