sysmon

Black Hat·50 min

• Black Hat
• Hardware
• Date: 2025
• Location: Black Hat

Engineers explore architecture and security mechanisms for Subverting Sysmon: Application of a Formalized Security Product Evasion Methodology.

FIRST·32 min

• FIRST
• Mobile
• Date: 2025
• Location: First

Security researchers examine technical aspects of Sysmon Deep Dive: Real Detection Scenarios You Can Reproduce.

FIRST·3 hr 40 min

• FIRST
• Blue Team
• Date: 2025
• Location: First

Engineers explore architecture and security mechanisms for Using Sysmon to Improve your Incident Response and Threat Hunting Capabilities.

PROIDEA Events·50 min

• PROIDEA
• Blue Team
• Date: 2025
• Location: Proidea

Marcin Ratajczyk [PL]

Marcin Ratajczyk [PL] investigates CONFidence 2021: Sysmon - a friend of every threat hunter.

PROIDEA Events·40 min

• PROIDEA
• Community
• Date: 2025
• Location: Proidea

Presenters detail vulnerability discovery and exploitation in OMH 2025: Marcin Ratajczyk - And you, Sysmon, against me?.

Wild West Hackin' Fest·43 min

• WWHF
• Community
• Date: 2025
• Location: Wwhf

Presenters detail vulnerability discovery and exploitation in Getting the most out of Sysmon | Amanda Berlin | WWHF Deadwood 2022.

RSAC Cybersecurity·44 min

• RSAC
• Community
• Date: 2023
• Location: Rsa

Security researchers examine technical aspects of Getting The Most Out Of Sysmon.

Blue Team Village·21 min

• DEF CON
• Blue Team
• Date: Aug 2022
• Location: Las Vegas

Project Obsidian

Project Obsidian details configuring Sysinternals Sysmon to capture critical process creation, network connection, and DLL load events for investigations.

BSidesCharm·49 min

• BSides
• Community
• Date: 2022
• Location: Bsides

Sysmon or it Didn’t Happen

Coverage of 2024 - Sysmon or it Didn’t Happen from the conference program.