Sysmon is a Windows system service and device driver that monitors and logs system activity. You can use Sysmon on Windows devices to forward relevant logs to Arctic Wolf®.

Arctic Wolf エージェント uses a specific Sysmon configuration that is optimized for Arctic Wolf. エージェント also automatically updates the Arctic Wolf Sysmon configuration.