how2itsec
Pages
(Move to ...)
Home
▼
(Move to ...)
Startseite
▼
Showing posts with label
Sysmon
.
Show all posts
Showing posts with label
Sysmon
.
Show all posts
SIEM IoC regsvr32.exe outbound network connection
›
An easy to find possible indicator of compromise (IoC) for your SIEM, AEP or EDR could be a outbound network connection from Windows own reg...
Sysmon 11 released
›
Many SIEM installations use sysinternals sysmon as one of many data sources. Mark Russinovich (Microsoft Azure CTO, co-creator of sysintern...
›
Home
View web version
