Blog Post

Sysinternals Blog
1 MIN READ

Sysmon v14.16

Alex_Mihaiuc's avatar
Alex_Mihaiuc
Icon for Microsoft rankMicrosoft
Apr 12, 2023
Sysmon v14.16 This Sysmon update fixes a regression on older versions of Windows.  
Published Apr 12, 2023
Version 1.0
ZaferBalkan's avatar
ZaferBalkan
Brass Contributor
Jun 07, 2023

I wonder if there are any plans on Sysmon to have a builtin quota for ArchiveDirectory. Currently the option is either not use it via the FileDeleteDetected event or create a WMI subscription triggering a delete command.

 

https://gist.github.com/zbalkan/17fbe38864a900a2f1eeac2088c5d49e