Sysinternals Sysmon suspicious activity guide – Windows Security
January 2, 2018 at 10:55:56 AM GMT+1 - permalink -

- https://blogs.technet.microsoft.com/motiba/2017/12/07/sysinternals-sysmon-suspicious-activity-guide/