Now supported! Splunk Awesomeness Video’s related to using sysmon and Splunk core for some security use cases! Splunking the Endpoint (video) by James Brodsky - http://conf.splunk.com/session/2015/recordings/2015-splunk-119.mp4 Best Practices for Scoping Infections and Disrupting Breaches - https://splunkevents.webex.com/ec3100/eventcenter/recording/recordAction.do?theAction=poprecord&AT=pb&internalRecordTicket=4832534b000000022a746a023e91ab530d7a08470e06590f342a5764bd9de2b2b9586b2dbd17ac3c&renewticket=0&isurlact=true&recordID=13376487&apiname=lsr.php&format=short&needFilter=false&&SP=EC&rID=13376487&RCID=cab764b0457c615aa5f02ddfd351fe9f&siteurl=splunkevents&actappname=ec3100&actname=%2Feventcenter%2Fframe%2Fg.do&rnd=8638316703&entappname=url3100&entactname=%2FnbrRecordingURL.do ... View more