This major update to Sysmon, an advanced host monitoring tool, adds a new event type, FileBlockExecutable that prevents processes from creating executable files in specified locations. It also includes several performance improvements and bug fixes.
AccessEnum, a tool for enumerating file system and registry permissions, now supports paths longer than MAX_PATH characters.
This update to Coreinfo, a utility that reports system CPU, memory and cache topology and information, now handles NUMA nodes with more than 64 processors.
Updated Dec 06, 2022
Version 5.0
Alex_Mihaiuc
Microsoft
Microsoft
