Releases: tsale/EDR-Telemetry
Releases · tsale/EDR-Telemetry
Telemetry-Generator v0.2
New script additions to help with telemetry collection
- Added extensive Linux telemetry collection tools for executing tests and proceeding with evaluations of EDRs and onboarding to our project.
- Added a couple of separate scripts (service creation/modification/deletion, VSS Deletion) for Windows to simulate certain events for an accurate representation in the event telemetry collection without relying on indirect events.
Telemetry-Generator Tool v0.1
Initial release highlights
- Using Invoke-AtomicRedTeam under the hood.
- Reading from config.json
- Outputs results into multiple CSVs and also concatenates those CSVs into one final one.
- Basic error handling.
Full explanation of the tool & purpose: https://github.com/tsale/EDR-Telemetry/blob/main/Tools/Telemetry-Generator/README.md