First published on TechNet on Mar 14, 2017
Sysmon v6
This release of Sysmon, a background monitor that records activity to the event log for use in security incident detection and forensics, includes bug fixes that could cause blue screens with named pipe monitoring, maps HKEY_USERS to the standard HKU abbreviation, and
