GitHub repository: sec-js/sysmon-dfir
Description: Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.