Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update eventid 1 to handle sysmon v8.00 schema #7

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Update eventid 1 to handle sysmon v8.00 schema #7

wants to merge 5 commits into from

Commits on Jul 20, 2018

  1. update to handle sysmon v8.00 

    added a check to account in property differences
    @tomstott
    tomstott committed Jul 20, 2018
    Configuration menu
    Copy the full SHA
    3e02de8 View commit details
    Browse the repository at this point in the history

  2. Update DeepWhite-collector.ps1

    @tomstott
    tomstott committed Jul 20, 2018
    Configuration menu
    Copy the full SHA
    f25c7be View commit details
    Browse the repository at this point in the history

  3. DeepBlue.ps1 sysmon eventid 1 update 

    updated with logic to handle expanded schema of Sysmon v8.00
    @tomstott
    tomstott committed Jul 20, 2018
    Configuration menu
    Copy the full SHA
    1bef617 View commit details
    Browse the repository at this point in the history

  4. Updated logic for Sysmon v8 ID6&7

    @tomstott
    tomstott committed Jul 20, 2018
    Configuration menu
    Copy the full SHA
    e87c65b View commit details
    Browse the repository at this point in the history

  5. updated id 7 for sysmon v8 schema change

    @tomstott
    tomstott committed Jul 20, 2018
    Configuration menu
    Copy the full SHA
    8866ac8 View commit details
    Browse the repository at this point in the history