Sysmon · xml
Sysmon 1 — Process creation
Sysmon records process creation through its Windows Operational channel.
Log sources tagged sysmon. Browse source profiles associated with sysmon.
Sysmon · xml
Sysmon records process creation through its Windows Operational channel.
Sysmon · xml
Sysmon records network connection through its Windows Operational channel.
Sysmon · xml
Sysmon records image loaded through its Windows Operational channel.
Sysmon · xml
Sysmon records createremotethread through its Windows Operational channel.
Sysmon · xml
Sysmon records registry value set through its Windows Operational channel.
Sysmon · xml
Sysmon records dns query through its Windows Operational channel.
Sysmon · xml
Sysmon records file deletion archived through its Windows Operational channel.