Sysmon | Endpoint Monitoring | Logs analysis | Tryhackme Write-up
Sysmon is a Windows system monitoring tool that logs detailed events like process creation, network connections, file changes, DLL loads, and registry modifications into Windows Event Logs for threat hunting and forensics. Sysmon don’t collect every...
Oct 20, 20258 min read4
