Microsoft Starts Testing Built-In Sysmon Monitoring in Windows 11

Microsoft has begun rolling out native Sysmon support in Windows 11 Insider Preview Build 26300.7733, bringing Sysinternals-style system monitoring into the OS as an optional feature that logs directly to the Windows Event Log. The feature is disabled by default, requires users to enable and initialize it (and to remove any previously installed Sysmon), and is intended to simplify deployment and improve threat detection at a time when Microsoft is prioritizing reliability amid recent update-related issues.