Install Sysmon on Windows devices

You can install Sysmon on your Windows device to forward relevant logs to Arctic Wolf® using one of these deployment methods:

Note: Arctic Wolf does not recommend upgrading to Sysmon version 15.20 unless running Arctic Wolf Agent version 2026-01_47 or later.
Note: To continue with Active Directory installation, see Active Directory Integrations.