From 40b05eead413690406fd8b0d1743765966b55008 Mon Sep 17 00:00:00 2001 From: 0x4d31 Date: Wed, 17 Jan 2018 12:11:13 +1100 Subject: [PATCH] Updated the Sysmon section --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1f090a4..c6ea4a4 100644 --- a/README.md +++ b/README.md @@ -138,6 +138,7 @@ - [Part II (Event ID 10)](https://cyberwardog.blogspot.com.au/2017/03/chronicles-of-threat-hunter-hunting-for_22.html) - Advanced Incident Detection and Threat Hunting using Sysmon (and Splunk) ([botconf 2016 Slides](https://www.botconf.eu/wp-content/uploads/2016/11/PR12-Sysmon-UELTSCHI.pdf), [FIRST 2017 Slides](https://www.first.org/resources/papers/conf2017/Advanced-Incident-Detection-and-Threat-Hunting-using-Sysmon-and-Splunk.pdf)) - [The Sysmon and Threat Hunting Mimikatz wiki for the blue team](https://www.peerlyst.com/posts/the-sysmon-and-threat-hunting-mimikatz-wiki-for-the-blue-team-guurhart) +- [Splunkmon — Taking Sysmon to the Next Level](https://www.crypsisgroup.com/wp-content/uploads/2017/07/CG_WhitePaper_Splunkmon_1216-1.pdf) ### Videos