Sysinternals updates: Sysmon v15.0, Autoruns v14.1, and Process Monitor v3.95
Open link in next tab
Sysmon v15.0, Autoruns v14.1, and Process Monitor v3.95
https://techcommunity.microsoft.com/t5/sysinternals-blog/sysmon-v15-0-autoruns-v14-1-and-process-monitor-v3-95/ba-p/3857916
Sysmon v15.0 This update to Sysmon, an advanced host security monitoring tool, sets the service to run as a protected process, hardening it against tampering, adds a new event, FileExecutableDetected, for when new executable images are saved to files, and fixes a system hang occurring in certain sit...