Windows Display platforms icon
windows mac android
Sysmon icon
0 reviews
542 downloads

Monitor and track system activity

Advertisement
Older versions
Advertisement

Sysmon is an official Microsoft app for monitoring the system's status and events. With it, you can keep detailed control of system events, such as process creation, network connections, file creation and deletion, etc.

The program is installed via command line. To install it, you'll need to open CMD.exe as an administrator on the path where you've installed the program. After that, enter the command sysmon -i to install it.

From there, go to the Windows Event Viewer. Then go to the path Applications and Services Logs/Microsoft/Windows/Sysmon/Operational. There, you can see all the events occurring on the system. The process events that the program is capable of recording are as follows:

1 ProcessCreate - Creation process

2 FileCreateTime - Time of file creation

3 NetworkConnect - Network connection detected

4 Changed service status of Sysmon (cannot be filtered)

5 ProcessTerminate - Process terminated

6 DriverLoad - Loaded driver

7 ImageLoad - Image uploaded -

8 CreateRemoteThread - CreateRemoteThread detected

9 RawAccessRead - RawAccessRead detected

10 ProcessAccess - Process accessed

11 FileCreate - File created

12 RegistryEvent - Registry object added or deleted

13 RegistryEvent - Registry value set

14 RegistryEvent - Changed name of the registry object

15 FileCreateStreamHash - Created file stream

16 Changed Sysmon settings (cannot be filtered)

17 PipeEvent - Named pipeline created

18 PipeEvent - Connected to named pipeline

19 WmiEvent - WMI filter

20 WmiEvent - WMI consumer

21 WmiEvent - WMI consumer filter

22 DNSQuery - DNS queried

23 FileDelete - Deleted archived files

24 ClipboardChange - New content added to the clipboard

25 ProcessTampering - Process image changed

26 FileDeleteDetected - Recorded file deleted

Reviewed by Alberto García Translated by Uptodown Localization Team
Advertisement

More information

License Free
Op. System Windows
Category Maintenance
Language English
47 more
Author Microsoft Corporation
Downloads 542
Date Feb 15, 2023
Content Rating All ages
Why is this app published on Uptodown? (More information)

Older versions

zip 13.34 May 16, 2022

Rate this App

Review the app
Sysmon icon

Comments

There are no opinions about Sysmon yet. Be the first! Comment

Advertisement
Advertisement
HEVC Video Extensions from Device Manufacturer icon
Play HEVC (H.265) encoded videos on Windows
Windows Subsystem for Android (WSA) icon
Install Android apps and Uptodown's store on Windows 11
Microsoft Photos icon
View your photos on Windows
Windows Camera icon
The official Windows Camera App
Phone Link icon
Easily synchronize your Android with Windows
Clipchamp icon
Create stunning videos for YouTube, Instagram, and TikTok
Microsoft 365 (Office) icon
Keep all your Office programs from Microsoft 365 in one place
Groove Music icon
Play all your music on Windows
Microsoft PC Manager icon
Take care of your PC and improve its performance
Hard Disk Sentinel icon
Keep your hard disks in good condition
ASRock Polychrome RGB Sync icon
Personalize RGB lighting on your PC with ASRock motherboards
BatteryInfoView icon
Check your laptop’s battery status
StopUpdates10 icon
Put an end to automatic Windows 10 updates
Gigabyte RGB Fusion 2.0 icon
Adjust RGB LED light on Gigabyte peripherals and built-in components
CCleaner icon
Get rid of all the junk Windows accumulates
Lenovo Vantage icon
Manage your Lenovo device with the official app
GoodSync icon
Sync your files with your portable devices
XYplorer icon
Analyze each detail of your files
Samsung SSD Magician icon
The perfect companion for your SSD
Wise Memory Optimizer icon
Optimize the use of your RAM
Stellar File Eraser icon
Your Deleted Files can be Recovered
NTLite icon
Create custom Windows 10 installation disks
UFS Explorer Standard Recovery icon
A versatile deleted or defective file recovery tool