Skip to content
Download.sa Download.sa
Install Download.sa on iPhone or iPad: tap the Share button, then choose “Add to Home Screen”.

Sysmon

v15.22

System activity monitor

Free Security 57 Health 77

Download

Choose the file for your device below.

Download for Windows

ZIP · x86 · — — from download.sysinternals.com

SHA-256 checksum available

Update confidence: High

Latest release 15.22

Several positive signals and no warning.

  • Released days ago: 51.
  • No newer version was withdrawn.
  • Every file has a checksum published by the publisher.
  • Signatures could not be checked.
  • No open report about this release.
  • No vulnerability feed for this software.
  • Based on stored facts about this release; it is a guide, not a guarantee.
Latest
15.22
Licence
Free
Verification
SHA-256
Platforms
Windows

About ⁨Sysmon⁩

System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log.
Platforms
Windows
Licence
Free — free to use; the source code is not public.

Official downloads

Version 15.22 · released 10 September 2026 · via the WinGet repository

Release source
FileSizeVerification
Windows · x86 · ZIP Best for you
Sysmon.zip — download.sysinternals.com
—
00ecf1b46aec99299d3ae0bca79dc621458bd014b20b509d7c5c8e8c8611aa54
SHA-256 · published by the publisher / package manifest
Scan pending Signature not verified
Download Not scanned

Clicking “Download” takes you straight to the file on the publisher's official server. Verify the SHA-256 before running it: on Windows «Get-FileHash file», on macOS / Linux «shasum -a 256 file».

Install guide

The best way to install, update and remove this program on your system, from the official source.

RecommendedWinGet
Source: winget community repository (Microsoft)
Install
winget install --id Microsoft.Sysinternals.Sysmon --exact --source winget
Update
winget upgrade --id Microsoft.Sysinternals.Sysmon --exact --source winget
Remove
winget uninstall --id Microsoft.Sysinternals.Sysmon --exact
AlternativeChocolatey
Source: community.chocolatey.org
Install
choco install sysmon -y
Update
choco upgrade sysmon -y
Remove
choco uninstall sysmon -y

Chocolatey community packages are maintained by volunteers; WinGet is preferred when available.

Security & project health

Trust Network profile of Sysmon: verified levels 2 of 5

Security

57

How trustworthy the source and files are: verified publisher, checksums, HTTPS, official host, signature, scan, links and known vulnerabilities.

  • Verified publisher0/20
  • SHA-256 checksums15/15
  • HTTPS downloads10/10
  • Official download host0/10
  • Code signature5/10
  • File scan7/15
  • Working links5/5
  • No open vulnerabilities15/15

Health

77

Is the project alive? Release recency and cadence, community, maintenance status and data completeness.

  • Recent release35/35
  • Releases in the last 12 months10/20
  • Community10/20
  • Actively maintained15/15
  • Complete information7/10

Known vulnerabilities

Vulnerability tracking is not configured for this program yet.

Alternatives to ⁨Sysmon⁩

View all

User reviews

No reviews yet — be the first.

Sign in to write a review