Updated File Event Monitor (markdown)

Namhyeon Go 2024-09-10 14:56:04 +09:00
parent d00f5b6704
commit f9880b3e13

@ -1,6 +1,6 @@
## File Event Monitor
From WelsonJS version 0.2.7.36, complete support for handling system events (mainly events related to file activities) is provided. This is implemented using [Sysinternals Sysmon (microsoft.com)](https://learn.microsoft.com/ko-kr/sysinternals/downloads/sysmon).
From WelsonJS version 0.2.7.36, complete support for handling system events (mainly events related to file activities) is provided. This is implemented using [Sysinternals Sysmon (microsoft.com)](https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon).
The events that can be handled are as follows:
@ -45,7 +45,7 @@ Once all implementations and configurations are complete, you should see the fol
WelsonJS can be utilized in conjunction with [MITRE ATT&CK (attack.mitre.org)](https://attack.mitre.org/). Please follow the steps below:
1. Download [Sysinternals Sysmon (microsoft.com)](https://learn.microsoft.com/ko-kr/sysinternals/downloads/sysmon).
1. Download [Sysinternals Sysmon (microsoft.com)](https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon).
2. Download and apply [the sysmon configuration (github.com/olafhartong/sysmon-modular)](https://github.com/olafhartong/sysmon-modular). The configuration installation will be performed along with the sysmon installation using the command below.
```