0xAnalyst/Sysmon
Sysmon configs for Windows and Linux mapped to MITRE ATT&CK, tested against the latest Sysmon in CI, with a browser-based config builder to tune, test and deploy them.
GitHub repository with 54 stars and 11 forks.
Language: JavaScript
Topics: blue-team, detection-engineering, dfir, mitre-attack, sigma, soc, sysmon, sysmon-config, sysmon-for-linux, threat-hunting