Skip to main content

vast limits GmbH and uberAgent are now part of Citrix, a business unit of Cloud Software Group. Learn more at Citrix.com.

Documentation

Version

  1. uberAgent
  2. 7.1.2
  3. ESA Features & Configuration
  4. Threat Detection Engine
  5. Sysmon Rule Converter
Previous document Next document

Sysmon Rule Converter

In this article

The Sysmon to uberAgent rule converter translates Sysmon rules into the format used by uberAgent ESA.

Sysmon is one of the most popular endpoint detection tools. Numerous quality rulesets are maintained by the security community. The Sysmon converter makes those rulesets available for use with uberAgent ESA.

uberAgent ESA as Sysmon Alternative

In addition to the Sysmon converter, vast limits also provides a converter for Sigma rules. This makes uberAgent one of the most versatile detection tools on the market. Read on to find out why you should consider uberAgent ESA as an alternative to Sysmon.

Getting Started

Download

To download the Sysmon converter, head over to the releases section of its GitHub repository.

Usage

Please see the Sysmon converter’s readme for usage information.

Sysmon Converter Details

Development Info

The Sysmon converter is developed as an open-source project on GitHub. Contributions are always welcome!

The Sysmon converter is written in C# .NET. Release builds are available for Windows.

Comments

Your email address will not be published. Required fields are marked *