Sysmon Base Configuration - Workstations

December 23, 2016 ยท View on GitHub

MD5,SHA1,SHA256 microsoft windows System WmiPrvSE.exe FireSvc.exe Windows\CurrentVersion\Run Windows\CurrentVersion\Image File Execution Options CurrentControlSet\Services Microsoft\Windows NT\CurrentVersion\Winlogon Microsoft\Windows\CurrentVersion\Policies\Explorer Microsoft\Windows\CurrentVersion\RunOnce System\CurrentControlSet\Services\Tcpip\parameters chrome.exe iexplore.exe firefox.exe 8080