Learning Sysmon - Tracking File Deletion and Blocking Shredding (Video 17)
In this video, Carlos explains how to leverage Sysmon for tracking when a file is deleted and how to block a file from being shredded to prevent its recovery.
Sysmon Modular:
https://github.com/olafhartong/sysmon...
Sysmon Community Guide:
https://github.com/trustedsec/SysmonC...
PSGumshoe PowerShell Module
https://www.powershellgallery.com/pac...
Sysmon Visual Studio Code Extension
https://marketplace.visualstudio.com/...
00:00 Intro
01:25 Installing Sysmon with Alternate Archive Folder
02:08 FileDelete Detected
05:54 FileDelete
12:54 FileBlockShredding
15:38 Conclusion