Post

I wanted a script I could run on a new Windows box that would install sysmon with @olafhartong.nl's configs, and set logging best practices with Zach Mathis' (Yamato Security) "EnableWindowsLogSettings" configs. So I made one! Feel free to inspect it and repurpose. gist.github.com/ecapuano/42f...

gist.github.comA PowerShell script for installing Sysmon and enabling best-practice audit logs.A PowerShell script for installing Sysmon and enabling best-practice audit logs. - better_event_logging.ps1

Eric Capuano

@eric.zip

1/3/25, 8:14 pm0 reposts1 like

Taggart

@taggart-tech.com

1 Mar 2025

You may also want to check out the Sysmon Ansible role we have in Seclab: github.com/mttaggart/se...

github.comseclab/Ansible/roles/sysmon/tasks at main · mttaggart/seclabAutomated security lab provisioning. Contribute to mttaggart/seclab development by creating an account on GitHub.