Windows · Developer Tools

Sysmon

Name: Sysmon
Author: Mark Russinovich

Monitors and reports key system activity via the Windows event log

Version 15.22.0 · by Mark Russinovich

Download

Official site: technet.microsoft.com

About Sysmon

## Sysmon

Monitors and reports key system activity via the Windows event log.

### Package-specific issue

If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose)

Support the package maintainer and [![Patreon](https://cdn.jsdelivr.net/gh/tunisiano187/Chocolatey-packages@d15c4e19c709e7148588d4523ffc6dd3cd3c7e5e/icons/patreon.png)](https://www.patreon.com/bePatron?u=39585820).

How to install Sysmon

Click Download — the developer's official website opens in a new tab.
Download the latest version there and run it. Choose Custom/Advanced where offered, and skip any bundled extras.
Prefer the command line? With Chocolatey you can install and update it with: choco install sysmon
Open Sysmon once it finishes installing.

How to install Windows software with Chocolatey

Frequently asked questions

Is Sysmon free to download?

Yes. The Download button sends you to technet.microsoft.com, the developer's official site, where Sysmon is available to download. Grabware doesn't host or modify any files.

What is the latest version of Sysmon?

The version listed here is 15.22.0, published /Date(1789. The developer's site always has the newest release.

How do I install Sysmon from the command line?

With Chocolatey, run: choco install sysmon. This installs it from the official source and keeps it updated.

Is Sysmon safe?

Sysmon downloads directly from the developer. As always, scan the installer with your antivirus and choose Custom setup to skip any bundled extras.