Blog

Want deeper insights? Read exclusive commentary from the Gravwell team on the issues that matter most.
Filter By
Resource

What's in a Sysmon Event - Windows Registry EventIDs 12, 13, 14

read more
Resource

What's in a sysmon event - eventid 5, process termination

read more
Resource

Announcing the Gravwell Sysmon Kit

read more
Resource

What's in a Sysmon Event Pt. 2 - Network Connections

read more
Resource

What's in a Sysmon Event Pt. 1 - Process creation

read more
sysmon-hot-now
Resource

Windows DNS threat hunting with Sysmon and Gravwell

read more

Subscribe for Gravel Updates

Signup for the Gravwell newsletter to be the first to hear about announcements, new product features, events, and more.

Gravwell is an enterprise data fusion platform that enables security teams to investigate, collaborate, and analyze data from any source, on demand, all with unlimited data collection and retention. Ingest everything. Investigate anything.
TOP