By Mark Russinovich and Thomas Garnier Published: February 13, 2024 Download Sysmon (4.6 MB) Download Sysmon for Linux (GitHub) Introduction System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creation