Sysmon version 11.10, released a couple of days ago, adds support for capturing content of Alternate Data Streams.
Article Link: https://isc.sans.edu/diary/rss/26292
Sysmon version 11.10, released a couple of days ago, adds support for capturing content of Alternate Data Streams.
Article Link: https://isc.sans.edu/diary/rss/26292