Sysmon
System activity monitor
System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log.
winget install --id Microsoft.Sysinternals.Sysmon --exact --source wingetLatest 15.21·June 17, 2026
Details
- Homepage
- https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon
- License
- Proprietary
- Publisher
- Sysinternals
- Support
- https://learn.microsoft.com/en-us/answers/tags/435/sysinternals
- Privacy Policy
- https://learn.microsoft.com/en-us/sysinternals/license-terms
- Copyright
- Copyright (C) 2014-2024 Mark Russinovich & Thomas Garnier Using libxml2. libxml2 is Copyright (C) 1998-2012 Daniel Veillard. All Rights Reserved.
- Moniker
sysmon