Brian Mundorff

Sysmon is designed for enhanced Windows auditing. It is separate from the built-in Windows auditing. Read more about Sysmon here: https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon#introduction You can view how to enable auditing for specific...