Sysmon configuration file template with default high-quality event tracing(ibm stnd)
active 2023-08-15 → 2026-08-31 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 1113 days from 2023-08-15 to 2026-08-31. Pushes: 0 total, peak 0 in a day. Pull requests: 3 total, peak 1 in a day. Issues: 5 total, peak 1 in a day. Comments: 11 total, peak 2 in a day. Stars: 1,021 total, peak 11 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| piExpr | 2 | 0 | 0 | 0 |
| EzLucky | 1 | 0 | 0 | 1 |
| LIHAQ | 1 | 0 | 0 | 1 |
| Siddan74 | 1 | 0 | 0 | 1 |
| jttrey3 | 1 | 0 | 0 | 1 |
| R111000 | 1 | 0 | 0 | 1 |
| khulnasoft-bot | 1 | 0 | 1 | 0 |
| OlexTratisky | 1 | 0 | 0 | 1 |
| FleetwoodBat | 1 | 0 | 0 | 1 |
| mundolicki | 1 | 0 | 0 | 1 |
| SysAdminNoob | 1 | 0 | 0 | 0 |
| daniaabujuma | 1 | 0 | 0 | 1 |
| sokvathana | 1 | 0 | 0 | 0 |
| kmk142789 | 1 | 0 | 0 | 0 |
| IKBBangor | 1 | 0 | 0 | 0 |
| Copperfie1d | 1 | 0 | 0 | 1 |
| msffluffybunnies | 1 | 0 | 1 | 0 |
| fluffybunnies-h4x | 1 | 0 | 1 | 0 |
| johnnyjeannatasha | 1 | 0 | 0 | 1 |
Recent activity
Latest issues, pull requests and releases
- Pull request#196fluffybunnies-h4x2026-01-21 22:54
- Pull request#195msffluffybunnies2025-11-07 21:12
- Issue comment#194EzLucky2025-03-03 14:27Is this config now abandoned?
- Issue comment#192mundolicki2024-08-13 23:50Where are Windows Event ID???
- Issue#194IKBBangor2024-08-08 09:24Is this config now abandoned?
- Pull request#193khulnasoft-bot2024-07-03 17:24
- Issue#192piExpr2024-06-25 12:18Where are Windows Event ID???
- Issue comment#177OlexTratisky2024-06-23 04:07Event 22 DNS Query issue - not generating event from browsers
- Issue#191piExpr2024-06-21 19:41LSA Credential Guard
- Issue comment#177LIHAQ2024-05-31 08:32Event 22 DNS Query issue - not generating event from browsers
- Issue comment#183jttrey32024-04-02 15:00Sysmon v15.0 & 29 Events
- Issue#190SysAdminNoob2024-02-27 19:02Sysmonconfig XML error log when attempting to install.
- Issue comment#189Copperfie1d2024-01-26 06:03Can help show me the code how to sysmon use eventID 23, 26 ?
- Issue#189sokvathana2024-01-09 04:59Can help show me the code how to sysmon use eventID 23, 26 ?
- Issue comment#117daniaabujuma2023-09-14 07:41No Sysmon Event ID 1 events are being logged
- Issue comment#170R1110002023-09-09 11:26Many errors when install
- Issue comment#185FleetwoodBat2023-08-22 07:37Sysmon Installation Issue - wevtutil.exe returned failure
- Issue comment#185Siddan742023-08-22 05:54Sysmon Installation Issue - wevtutil.exe returned failure
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 1,021 stars here means stars gained during the window, not the repo's star count.