Sysmon

##cybersecurity/blue-team/logging-siem

Sysmon refers to System Monitor, which is a Windows system service and device driver developed by Microsoft that is designed to monitor and log various events happening within a Windows system.