Microsoft to integrate Sysmon directly into Windows 11, Server 2025
ID: 788c00ae-fb51-53f2-a5ca-dc8ac9e15730
STIX ID: report--788c00ae-fb51-53f2-a5ca-dc8ac9e15730
Feed Name: Bleeping Computer
Microsoft will natively integrate Sysmon into Windows 11 and Windows Server 2025, enabling administrators to enable Sysmon via Optional Features and receive updates through Windows Update; the article details basic and advanced install commands (e.g., sysmon -i and sysmon -i <config>), provides an example configuration for logging executable creations (e.g., under C:\ProgramData and C:\Users), lists common Sysmon event IDs, and notes forthcoming documentation and enterprise/AI features.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.