How to Update Sysmon on Windows – Step by Step Guide

How to Update Sysmon on 윈도우 – Step by Step Guide.

System Monitor (Sysmon) is a 윈도우 system service and device driver that, once installed on a system, remains resident across system reboots to monitor and 통나무 system activity to the 윈도우 event 통나무. It provides detailed information about process creations, network connections, and changes to file creation time. Use the next steps to update Sysmon.

1. Open the 파워셸 또는 command line (명령) or Terminal with administrative rights.

2. Navigate to the C:\윈도우:

cd C:\Windows (or cd ../)

3. Uninstall currently installed Symon:

sysmon.exe -u

또한, you can use the force key:

sysmon.exe -u force

4. 다운로드 the latest version from the Microsoft website.

5. Copy sysmon.exe from the downloaded folder to the c:\windows and replace the current file (better make some backup of sysmon.exe before replacing).

6. Run in the PowerShell:

sysmon.exe -i

7. Run in the PowerShell to check that the new version is installed:

sysmon.exe

그게 다야, the update Sysmon process successfully completed