Sysmon

About this course

You should already be comfortable navigating Windows from the command line (cmd.exe or PowerShell), and know what a Windows Event Log is in general terms. You should know what a process, a registry key, and a network connection are. You do not need prior experience with XML, Event Tracing for Windows (ETW), or any SIEM product. Every piece of XML you see here is explained line by line.

Unlock it with 40 HFC, or get every paid lab and course with HackFury Pro.

Skills you practice

Difficulty: Intermediate

• Endpoint Security
• Malware Analysis
• DFIR
• Defensive security

What the course covers

1. Prerequisites
2. Purpose
3. Concept Map
4. Abbreviations
5. Terminology
6. Core Lessons
7. Danger Zone
8. Real World
9. Scope
10. Readiness Checklist
11. FAQ
12. Key Takeaways
13. Summary