# mattifestation/BHUSA2018\_Sysmon

<https://repo.masters-masters.com/en/repos/mattifestation/BHUSA2018_Sysmon>

[Home](https://repo.masters-masters.com/en) › [mattifestation](https://repo.masters-masters.com/en/owners/mattifestation) › [BHUSA2018\_Sysmon](https://repo.masters-masters.com/en/repos/mattifestation/BHUSA2018_Sysmon)

mattifestation/BHUSA2018\_Sysmon has 133 stars on GitHub. Its RepoMasters card: Prototype tier. All materials from our Black Hat 2018 "Subverting Sysmon" talk

| Field | Value |
| --- | --- |
| Owner | [mattifestation](https://repo.masters-masters.com/en/owners/mattifestation) |
| Stars | 133 |
| Forks | 23 |
| Language | [PowerShell](https://repo.masters-masters.com/en/languages/powershell) |
| License | None |
| Created | 2018 |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [mattifestation/BHUSA2018\_Sysmon](https://github.com/mattifestation/BHUSA2018_Sysmon) |

## Repository

All materials from our Black Hat 2018 "Subverting Sysmon" talk

Archived: this repository is read-only

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by mattifestation

- [mattifestation/PowerShellArsenal · ★ 902 · PowerShell · Beta](https://repo.masters-masters.com/en/repos/mattifestation/PowerShellArsenal)
- [mattifestation/CimSweep · ★ 657 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/mattifestation/CimSweep)
- [mattifestation/PIC\_Bindshell · ★ 297 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/mattifestation/PIC_Bindshell)
- [mattifestation/WMI\_Backdoor · ★ 275 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/mattifestation/WMI_Backdoor)
- [mattifestation/WDACTools · ★ 259 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/mattifestation/WDACTools)
- [mattifestation/PSSysmonTools · ★ 233 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/mattifestation/PSSysmonTools)

## Nearby in PowerShell

- [TactiKoolSec/OTHF · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/TactiKoolSec/OTHF)
- [2KAbhishek/win2k · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/2KAbhishek/win2k)
- [hyperphantasia/WSL-VHDX-Compact · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/hyperphantasia/WSL-VHDX-Compact)
- [BenjaminArmstrong/Hyper-V-PowerShell · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/BenjaminArmstrong/Hyper-V-PowerShell)
- [Dviros/Excalibur · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/Dviros/Excalibur)
- [HASecuritySolutions/Presentations · ★ 133 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/HASecuritySolutions/Presentations)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.