Skip to main content

One post tagged with "Sysmon (System Monitor)"

A Windows system service and device driver that provides detailed information about process creations, network connections, and other system events for monitoring and security analysis purposes.

View All Tags

THM | The Lay of the Land

· 20 min read

Red Teaming | The Lay of the Land | Summary:

This room offers hands-on learning about corporate security technologies. It covers Active Directory (AD) management, host solutions like antivirus, firewalls, Sysmon, HIDS/HIPS, EDR, network security with firewalls, SIEM, and IDS/IPS, plus applications and services including installed programs, processes, file sharing, DNS, local apps.

More importantly, it equips learners with practical knowledge of corporate security infrastructures.