Microsoft Sysinternals System Monitor (Sysmon) is a Windows service and driver that monitors activity and writes configured events to Windows Event Log. Event visibility depends on Sysmon's event-filter configuration. The commands below check for locally registered Sysmon services and their state; they do not inspect event filters or prove that telemetry is being collected.
N/A
RESTRICTED_ACCESS_BLUR_MARKER