Microsoft rolls out native Sysmon monitoring in Windows 11
ID: 5c8687ae-b183-5285-8fd9-e9114fe5ccfa
STIX ID: report--5c8687ae-b183-5285-8fd9-e9114fe5ccfa
Feed Name: Bleeping Computer
Microsoft is rolling out native Sysmon functionality as an optional feature in select Windows 11 Insider Preview builds, enabling configurable system event capture and logging to support threat detection and troubleshooting. The capability is disabled by default, requires uninstalling any previously installed Sysmon before enabling, and is currently available in the Beta and Dev channels on specific preview builds (KB5074177/KB5074178).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.