Skip to main content

#sysmon

Every article tagged “sysmon”, newest first.

Articles tagged sysmon

A row of thin dark glass bars on a near-black background, with a few lit amber from inside and one glowing brightest

Tutorials

Sysmon Event IDs: All 30 Explained, and How to Turn Them On

All 30 Sysmon event IDs in v15.22: what each logs, its config tag, whether SwiftOnSecurity's config keeps it on, and the closest Security log event.

Nerea Guallar19 min read
Four dark glass cubes linked on a faint grid, with one amber pulse travelling between them and an amber glow where it lands

Tutorials

Cybersecurity Home Lab: Build One That Generates Alerts

Build a cybersecurity home lab with Active Directory, Sysmon and a SIEM, then run 5 attacks and check the exact event IDs each one should leave.

Nerea Guallar13 min read