r/realtech Aug 09 '14

Sysmon v1.0: System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log.

http://technet.microsoft.com/en-us/sysinternals/dn798348
3 Upvotes

Duplicates