Post

Eric Capuano
@eric.zip

I wanted a script I could run on a new Windows box that would install sysmon with @olafhartong.nl's configs, and set logging best practices with Zach Mathis' (Yamato Security) "EnableWindowsLogSettings" configs. So I made one! Feel free to inspect it and repurpose. gist.github.com/ecapuano/42f...

gist.github.comA PowerShell script for installing Sysmon and enabling best-practice audit logs.A PowerShell script for installing Sysmon and enabling best-practice audit logs. - better_event_logging.ps1
Eric Capuano
@eric.zip

BTW this was intended for personal systems and VMs… there are much better ways to do this across an enterprise.

0 reposts2 likes