Blog post - Sysmon 11 — DNS improvements and FileDelete events

Post-Image

Blog post - Sysmon 11 — DNS improvements and FileDelete events

The latest release of Sysmon brings a bunch of improvements and introduces EventID 23. Great thanks to Mark for allowing me access to the beta builds. Please find my take on all improvements below.

Cross post from medium.com, please read the full article here:

https://medium.com/falconforce/sysmon-11-dns-improvements-and-filedelete-events-7a74f17ca842