Table of Contents
=================

* [What is Sysmon](./what-is-sysmon.md)

* [The Sysmon Driver](./the-sysmon-driver.md)

* [Install and Configuration](./install-and-configuration.md)

* Sysmon Events

  * [Process Events](./process-events.md)

    * [Process Creation](./process-creation.md)

    * [Process Termination](./process-termination.md)

    * [Process Access](./process-access.md)

  * File Events
  
    * [File Create](./file-create.md)

    * [File Create Time Change](./file-create-time-change.md)

    * [File Stream Creation Hash](./file-stream-creation-hash.md)

  * [Named Pipes](./named-pipes.md)

  * [Driver Loading](./driver-loading.md)

  * [Registry Actions](./registry-actions.md)

  * [Image Loading](./image-loading.md)

  * [Network Connections](./network-connections.md)

  * [Create Remote Thread](./create-remote-thread.md)

  * [Raw Access Read](./raw-access-read.md)

  * [DNS Query](./dns-query.md)

  * [WMI Events](./wmi-events.md)