Sysmon Getting DNS Query Logging with Querying Process Name

By GIXnews


To the delight of Windows system administrators everywhere, Microsoft has announced that a new version of Sysmon is coming out this week that will include the ability to log DNS queries performed on a monitored computer. Even better, Sysmon will also log the executable that performed the query. […]

Source:: BleepingComputer