Event Correlation - JPCERTCC/SysmonSearch GitHub Wiki

The correlation network graph of Sysmon events on a host in a selected date is displayed.

Click the node to see the detailed information in the text area. Double-click the node to move to Parent and Child Process.