Sysmon just keeps getting better. I’m thrilled to mention that @markrussinovich and @mxatone release of Sysmon v6. When I first discussed Sysmon v2 two years ago it offered user seven event types. Oh, how it’s grown in the last two years, now with 19 events, plus an error event.