This config is a good starting point. Forked from the SwiftOnSecurity config

https://github.com/Neo23x0/sysmon-config

Olag Hartong's Sysmon Cheatsheet

https://github.com/olafhartong/sysmon-cheatsheet

and modular config

https://github.com/olafhartong/sysmon-modular

TrustedSec Sysinternals Sysmon Community Guide

https://github.com/trustedsec/SysmonCommunityGuide

Utilities for Sysmon

https://github.com/nshalabi/SysmonTools