- Print
- DarkLight
Article summary
Did you find this summary helpful?
Thank you for your feedback
Microsoft Sysmon is a Windows system service and device driver that monitors and logs system activity to provide detailed information about process creation, network connections, and other events, helping with threat hunting and incident response.
Was this article helpful?