Sysmon: new tool from Windows Sysinternals to monitor key system activity in the Windows Event Log
Posted by jpluimers on 2014/08/09
We’re excited to announce Sysmon, a new Sysinternals utility that monitors and reports key system activity via the Windows event log, including detailed information about process creation, network connections and file creation timestamp changes. With Sysmon installed on your systems, you can collect and analyze these events to identify the presence of attackers, and correlate events across your network to track them as they traverse your network.
It was released on 20140714.
–jeroen
via Windows Sysinternals: Documentation, downloads and additional resources.
Leave a Comment