Sysmon Endpoint Monitoring, Now w/ Clipboard Voyeurism - Corey Thuen - PSW #671

<p>Sysmon is a free endpoint monitoring tool published by Microsoft in their sysinternals suite. It generates process creations, network connections, file creations, DNS, and now clipboard monitoring with v12. We'll discuss what's in the events and how to easily visualize and search them with Gravwell's new Sysmon Kit. This segment is sponsored by Gravwell.</p> <p> </p> <p>Show Notes: <a href= "https://wiki.securityweekly.com/psw671">https://wiki.securityweekly.com/psw671</a></p> <p>Visit <a href= "https://securityweekly.com/gravwell">https://securityweekly.com/gravwell</a> to learn more about them!</p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes! </p>