04-Sysmon

ALL STEP MUST BE DONE ON EACH WINDOWS OF YOUR LAB

DOWNLOAD SYSMON

• Go to Windows Sysinternals page

• Download Sysmon

• Extract it

DOWNLOAD THE CONFIGURATION FILE

• Download the xml file

• Save it in the Sysmon's folder

INSTALL IT

• Launch Powershell in administrator

• Install it with "sysmon.exe -accepteula -i YOURFILE.xml"