IBM QRadar Content for Sysmon is a free Windows system service and device driver. It monitors system activity and logs events to the Windows event logs. The content pack will help you detect attacks such as WannaCry and NotPetya as well as older, tried-and-true endpoint attacks. It contains great new use cases comprised of new use. sets, reference sets, maps and custom functions developed to decipher those nasty. attacks. The solution also allows you to detect fileless memory attacks,. Dynamic Link Libraries (DLLs) that are loaded and the signature status.”]
Source: https://securityintelligence.com/news/secure-your-endpoints-with-qradar-content-for-sysmon/