GitHub

Security Operations Center (SOC) lab project focused on SIEM deployment, Sysmon logging, and endpoint monitoring using Splunk Enterprise.

This project demonstrates the setup of a Security Operations Center (SOC) home lab using Splunk Enterprise, Sysmon, and Splunk Universal Forwarder to collect, forward, and analyze Windows endpoint ...
PC World

Meet the hidden Windows 11 tool that reveals what Task Manager misses

PCWorld reveals Sysmon, a hidden Windows 11 tool that monitors all system processes and drivers that Task Manager completely misses, including kernel mode processes and disguised malware. This ...
SecurityWeek

Splunk, Palo Alto Networks Patch Severe Vulnerabilities

Splunk and Palo Alto Networks on Wednesday rolled out patches for multiple vulnerabilities across their product portfolios, including critical and high-severity bugs. Palo Alto Networks drew attention ...
IEEE

Sysmon-Assisted Honeypot Framework for Real-Time File Activity Monitoring and Behavioral Detection

Abstract: Ransomware has emerged as an extreme threat to the availability, integrity, and confidentiality of data in personal, organizational, and government systems. To tackle it, we propose a ...