Tristan’s Cybersecurity Substack

Tristan’s Cybersecurity Substack

SIEM / SOC / MDR

SIEM 201 — What is Sysmon

Tristan Dostaler's avatar
Tristan Dostaler
Nov 13, 2024
∙ Paid
Upgrade to paid to play voiceover

In this post I’ll explain what is Sysmon, how to install it and how to use it to detect important pattern.

Note: In this post I use Logz.io for my examples, but I recently switched to Humio. For more details: https://www.tristandostaler.com/why-i-switched-from-logz-io-to-humio/

User's avatar

Continue reading this post for free, courtesy of Tristan Dostaler.

Or purchase a paid subscription.
© 2026 Tristan Dostaler · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture