New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

pysigma-pipeline-sysmon

Package Overview
Dependencies
Maintainers
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pysigma-pipeline-sysmon

pySigma Sysmon processing pipelines

  • 1.0.4
  • PyPI
  • Socket score

Maintainers
1

Tests Coverage Badge Status

pySigma Sysmon Processing Pipeline

This is the Sysmon processing pipeline for pySigma. It provides the package sigma.pipeline.sysmon with the sysmon_pipeline function that returns a ProcessingPipeline object.

Currently the pipeline adds support for the following event types (Sigma logsource category to EventID mapping):

  • process_creation: 1
  • file_change: 2
  • network_connection: 3
  • process_termination: 5
  • sysmon_status: 4,16
  • driver_load: 6
  • image_load: 7
  • create_remote_thread: 8
  • raw_access_thread: 9
  • process_access: 10
  • file_event: 11
  • registry_add: 12
  • registry_delete: 12
  • registry_set: 13
  • registry_rename: 14
  • registry_event: 12,13,14
  • create_stream_hash: 15
  • pipe_created: 17,18
  • wmi_event: 19,20,21
  • dns_query: 22
  • file_delete: 23,26
  • clipboard_capture: 24
  • process_tampering: 25
  • sysmon_error: 255

This backend is currently maintained by:

  • Thomas Patzke

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc