Learn how you can identify malicious or anomalous activity and understand how intruders and malware operate on your network using Sysinternals Sysmon tool with Mark Russinovich, co-creator of the Sysinternals tools. Recorded in 2014.
System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log.
Learn more here:
docs.microsoft.com/sysinterna...