Sysmon

  1. Endpoint Monitoring with Wazuh Agent
  2. Incident Analysis - DNS Exfiltration