A website that offers technical information and advanced system utilities to manage, troubleshoot, and diagnose Windows systems and applications.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I was wondering whether there is any actual, throughout and in-depth documentation of Sysmon (ID's and its atributes) and sysmonconfig schema. Often I'm using the "Troubleshooting with the Windows Sysinternal tools" by Mark Russinovich and it is in great detail but very outdated. Can anyone give me some tip (forum, book, online material etc)
Windows Internals books likely touch on it.
Otherwise most in depth and readily accessible document I know of can be found here: