Install Sysmon on Windows devices
You can install Sysmon on your Windows device to forward relevant logs to Arctic Wolf® using one of these deployment methods:
Note: Arctic Wolf does not recommend upgrading to Sysmon version 15.20 unless running Arctic Wolf Agent version 2026-01_47 or later.
-
Single endpoints:
- Multiple endpoints:
Note: To continue with Active Directory installation, see Active Directory Integrations.