Sysmon

package           : tis-sysmon
version           : 15.12-2
architecture      : x64
section           : base
priority          : optional
name              : Sysmon
categories        : Utilities,System and network
maintainer        : WAPT Team,Tranquil IT,Kenan KILICARSLAN,Gaëtan SEGAT
description       : System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.0
sources           : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
installed_size    : 2592768
impacted_process  : Sysmon64
description_fr    : System Monitor (Sysmon) est un service système Windows et un pilote de périphérique qui, une fois installé sur un système, reste lors des redémarrages du système pour surveiller et enregistrer l'activité du système dans le journal des événements Windows
description_pl    : Monitor systemu (Sysmon) jest usługą systemową Windows i sterownikiem urządzenia, który po zainstalowaniu w systemie pozostaje w nim po każdym ponownym uruchomieniu, aby monitorować i rejestrować aktywność systemu w dzienniku zdarzeń Windows
description_de    : System Monitor (Sysmon) ist ein Windows-Systemdienst und -Gerätetreiber, der, sobald er auf einem System installiert ist, bei jedem Neustart des Systems aktiv bleibt, um die Systemaktivitäten zu überwachen und im Windows-Ereignisprotokoll zu protokollieren
description_es    : System Monitor (Sysmon) es un servicio del sistema Windows y un controlador de dispositivo que, una vez instalado en un sistema, permanece residente a través de los reinicios del sistema para supervisar y registrar la actividad del sistema en el registro de eventos de Windows
description_pt    : System Monitor (Sysmon) é um serviço de sistema Windows e driver de dispositivo que, uma vez instalado num sistema, permanece residente através de reinicializações do sistema para monitorizar e registar a actividade do sistema no registo de eventos do Windows
description_it    : System Monitor (Sysmon) è un servizio di sistema e un driver di dispositivo di Windows che, una volta installato su un sistema, rimane residente durante i riavvii del sistema per monitorare e registrare l'attività del sistema nel registro eventi di Windows
description_nl    : System Monitor (Sysmon) is een Windows-systeemdienst en apparaatstuurprogramma dat, zodra het op een systeem is geïnstalleerd, tijdens het herstarten van het systeem in het systeem blijft om de systeemactiviteit te controleren en in het Windows-gebeurtenislogboek op te slaan
description_ru    : System Monitor (Sysmon) - это системная служба Windows и драйвер устройства, который, будучи установленным в системе, остается постоянным при всех перезагрузках системы для мониторинга и регистрации активности системы в журнале событий Windows
audit_schedule    : 
editor            : Microsoft Sysinternals
keywords          : device,driver,monitor,service,log
licence           : GPL-3.0
homepage          : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
package_uuid      : 9e34228c-d390-42a1-9b98-cc1655505888
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 10
max_os_version    : 
icon_sha256sum    : a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature         : YZxZ0mi90EWWzoYc7lTVmmRVd7f6rCaXXk3HYy2ygy+AyuT69KmppY3TNIptebYxkRzMwffe/o5Sf9CIFfOvqJVvb1chltmJR0MGEVyrUkejBoOb8AhAz2QvH1IzLDAh9hjXDidHJ0Tz5XNNbt9yHNruEV1fr0S6ceAZeLOXO1WuX5VpUSA8nlCvxddUAb7i8y58I30BCKFForD6Jq93gI2//nQK9RU+K9G6ieF2xZxYR8UZaynu3pYvhAoVs5Hg09MTyKi4zfNsY4xPj1LSt43Jk+ooMKMeARKZM+nJTK97YeML4PXvsuqDaMGeZuT1kYMKWWER+/o0sTxF2Uty1g==
signature_date    : 2024-01-14T20:00:29.529356
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes

# -*- coding: utf-8 -*-
from setuphelpers import *
import time


# Defining variables
bin_latest_zip = "Sysmon.zip"
silent_args = "-accepteula -i"
silent_args_update = "-c"
silent_args_remove = "-u force"
app_name = "Sysmon"
app_service = "Sysmon64"
app_bin = "Sysmon64.exe"
app_unzip = makepath(app_name, app_bin)
app_dir = makepath(systemdrive, "Windows")
app_bin_path = makepath(app_dir, app_bin)


def install():
    # Initializing variables
    package_version = control.version.split("-")[0]

    # Installing the package
    if not service_installed(app_service):
        print("Installing: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args, min_version=package_version)
        time.sleep(120)
        run('"%s" %s' % (app_unzip, silent_args_update))
        # Adding this package to the "list-registry"
        register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package
    else:
        print("Updating: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args_update, min_version=package_version)
        if not installed_softwares(app_name):
            # Adding this package to the "list-registry"
            register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package


def uninstall():
    killalltasks('Sysmon64.exe')
    if run(("%s %s") % (app_bin_path, silent_args_remove)):
        remove_file(app_bin_path)
        unregister_uninstall(app_name)


def audit():
    # Check Sysmon Services
    if service_installed(app_service):
        return "OK"
    else:
        return "ERROR"

# -*- coding: utf-8 -*-
from setuphelpers import *

# Defining variables
bin_latest_zip = "Sysmon.zip"
app_name = "Sysmon"
app_bin = "Sysmon64.exe"
app_unzip = makepath(app_name, app_bin)


def update_package():
    # Initializing variables
    proxies = get_proxies()
    if not proxies:
        proxies = get_proxies_from_wapt_console()
    url_dl = "https://download.sysinternals.com/files/Sysmon.zip"

    print("Download url is: %s" % url_dl)

    # Downloading latest binaries
    if not isfile(bin_latest_zip):
        print("Downloading: %s" % bin_latest_zip)
        wget(url_dl, bin_latest_zip, proxies=proxies)

        # Unzip
        unzip(bin_latest_zip)

        # Changing version of the package
        version = get_version_from_binary(app_unzip)
        control.version = "%s-%s" % (version, control.version.split("-", 1)[-1])
        control.save_control_to_wapt()
        print("Changing package version to: %s in WAPT\\control" % control.version)

eda3e686b55e2659ce3aadbbe2db64f457257c3c57e909059e8ac9dae975300c : setup.py
785b8369a304468ef5523039a4b92dcf482b15f8477efcad9b0d3d3e8b9d4055 : Sysmon/Sysmon64.exe
8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a : Sysmon/Eula.txt
0e899c7833d83d3ab085a24372600ab9f20da579f6caf4710db3712f06584570 : Sysmon/Sysmon64a.exe
c381f9a22aee3dcfdb5fb553b6b592d27bbbd8e920e5d042e30bd5700318130e : Sysmon/Sysmon.exe
cefaeeec5c77615c24669b9b336cde0d96d530ddb5a37a3a931a766eff75b63e : update_package.py
698c2119069e0f2fa16a572b9dfafabc69bf86ce5a8471628e6527d7e443bbbe : Sysmon.zip
a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d : WAPT/icon.png
a5a97261381e1d0ad46ee15916abec9c2631d0201f5cc50ceb0197a165a0bbbf : WAPT/certificate.crt
a8c626a5fcd47e409f4ffd1e1ab2d037661c9aeed778bf3b173c0a19a8b45406 : luti.json
a192eb341e0ab701eadf421a23c6fc852aff282d2fc741dd9381fec2cfc754c1 : WAPT/control