Posh-Sysmon
0.7.5
Module for the creation and managing of Sysinternal Sysmon configuration XML files.
Minimum PowerShell version
3.0
Installation Options
Owners
Copyright
(c) 2017 Carlos Perez carlos_Perez@darkoperator.com. All rights reserved.
Package Details
Author(s)
- Carlos Perez carlos_Perez@darkoperator.com
Tags
Functions
Get-SysmonHashingAlgorithm Get-SysmonRule New-SysmonConfiguration New-SysmonDriverLoadFilter New-SysmonFileCreateFilter New-SysmonImageLoadFilter New-SysmonNetworkConnectFilter New-SysmonProcessCreateFilter New-SysmonProcessTerminateFilter Remove-SysmonRule Remove-SysmonRuleFilter Set-SysmonHashingAlgorithm Set-SysmonRule Get-SysmonEventData Get-SysmonRuleFilter New-SysmonProcessAccessFilter New-SysmonFileCreateStreamHashFilter New-SysmonRegistryFilter New-SysmonPipeFIlter
Dependencies
This module has no dependencies.
Release Notes
Version 0.7.5
* Support for Schema 3.3 of Sysmon v6.
* New function New-SysmonPipeEvent for filtering for named pipeline cration and connection events.
* Support of PipeEvent in config creation and event type functions.
* Several bug fixes on filtering functions when give an array of values.
FileList
- Posh-Sysmon.nuspec
- Config.ps1
- Filters.ps1
- LICENSE
- Posh-Sysmon.psd1
- Posh-SysMon.psm1
- README.md
- sysmon3_3_DTD.xml
- docs\Get-SysmonEventData.md
- docs\Get-SysmonHashingAlgorithm.md
- docs\Get-SysmonRule.md
- docs\Get-SysmonRuleFilter.md
- docs\New-SysmonConfiguration.md
- docs\New-SysmonDriverLoadFilter.md
- docs\New-SysmonFileCreateFilter.md
- docs\New-SysmonFileCreateStreamHash.md
- docs\New-SysmonFileCreateStreamHashFilter.md
- docs\New-SysmonImageLoadFilter.md
- docs\New-SysmonNetworkConnectFilter.md
- docs\New-SysmonPipeEvent.md
- docs\New-SysmonPipeFilter.md
- docs\New-SysmonProcessAccessFilter.md
- docs\New-SysmonProcessCreateFilter.md
- docs\New-SysmonProcessTerminateFilter.md
- docs\New-SysmonRegistryEvent.md
- docs\New-SysmonRegistryFilter.md
- docs\Remove-SysmonRule.md
- docs\Remove-SysmonRuleFilter.md
- docs\Set-SysmonHashingAlgorithm.md
- docs\Set-SysmonRule.md
- en-US\Posh-SysMon-help.xml
- en-US\Posh-SysMon.psm1-Help.xml
- Format\Sysmon.ConfigOption.ps1xml
- Format\Sysmon.Rule.Filter.ps1xml
- Format\Sysmon.Rule.ps1xml