Sysmon

package           : tis-sysmon
version           : 15.15-2
architecture      : x86
section           : base
priority          : optional
name              : Sysmon
categories        : Utilities,System and network
maintainer        : WAPT Team,Tranquil IT,Kenan KILICARSLAN,Gaëtan SEGAT
description       : System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.0
sources           : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
installed_size    : 2592768
impacted_process  : Sysmon
description_fr    : System Monitor (Sysmon) est un service système Windows et un pilote de périphérique qui, une fois installé sur un système, reste lors des redémarrages du système pour surveiller et enregistrer l'activité du système dans le journal des événements Windows
description_pl    : Monitor systemu (Sysmon) jest usługą systemową Windows i sterownikiem urządzenia, który po zainstalowaniu w systemie pozostaje w nim po każdym ponownym uruchomieniu, aby monitorować i rejestrować aktywność systemu w dzienniku zdarzeń Windows
description_de    : System Monitor (Sysmon) ist ein Windows-Systemdienst und -Gerätetreiber, der, sobald er auf einem System installiert ist, bei jedem Neustart des Systems aktiv bleibt, um die Systemaktivitäten zu überwachen und im Windows-Ereignisprotokoll zu protokollieren
description_es    : System Monitor (Sysmon) es un servicio del sistema Windows y un controlador de dispositivo que, una vez instalado en un sistema, permanece residente a través de los reinicios del sistema para supervisar y registrar la actividad del sistema en el registro de eventos de Windows
description_pt    : System Monitor (Sysmon) é um serviço de sistema Windows e driver de dispositivo que, uma vez instalado num sistema, permanece residente através de reinicializações do sistema para monitorizar e registar a actividade do sistema no registo de eventos do Windows
description_it    : System Monitor (Sysmon) è un servizio di sistema e un driver di dispositivo di Windows che, una volta installato su un sistema, rimane residente durante i riavvii del sistema per monitorare e registrare l'attività del sistema nel registro eventi di Windows
description_nl    : System Monitor (Sysmon) is een Windows-systeemdienst en apparaatstuurprogramma dat, zodra het op een systeem is geïnstalleerd, tijdens het herstarten van het systeem in het systeem blijft om de systeemactiviteit te controleren en in het Windows-gebeurtenislogboek op te slaan
description_ru    : System Monitor (Sysmon) - это системная служба Windows и драйвер устройства, который, будучи установленным в системе, остается постоянным при всех перезагрузках системы для мониторинга и регистрации активности системы в журнале событий Windows
audit_schedule    : 
editor            : Microsoft Sysinternals
keywords          : device,driver,monitor,service,log
licence           : GPL-3.0
homepage          : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
package_uuid      : c2730c1b-71a9-4978-8e53-cc095317d4db
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 10
max_os_version    : 
icon_sha256sum    : a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature         : XISo288k8kvhh0oXSq+kpj4KE8BAG80SutYIasAWS3HM6HF8zFAjEKuPrF5Nm2MQ8HDILVy+aN2mEdL53KbDSdzKgZmEV2ORTWP/YuwdyWEcdQOZBE3QTsXdqRw2ugzYR+C/QZJzI2js/3FPe1CTjcEwUcA3paHuJBfUwt4Zr9/GrBFbYV3agMVtBAF7YyV+35frt/yEVxIDvthpijMHbwy4gEv03pU8L+fiZs0Jv0t9k96eYz9XOvdlGhXNLKYw8tq0N/4fJ5TTLaaR7R8svUQ5xGVifwH2cULGQ66yWnhXGrDO5O9NZBDhddPEqBh2QE6Wby8atv2n6rc8mZK2+A==
signature_date    : 2024-07-28T16:02:52.350880
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes

# -*- coding: utf-8 -*-
from setuphelpers import *
import time

# Defining variables
bin_latest_zip = "Sysmon.zip"
silent_args = "-accepteula -i"
silent_args_update = "-c"
silent_args_remove = "-u force"
app_name = "Sysmon"
app_service = "Sysmon"
app_bin = "Sysmon.exe"
app_unzip = makepath(app_name, app_bin)
app_dir = makepath(systemdrive, "Windows")
app_bin_path = makepath(app_dir, app_bin)


def install():
    # Initializing variables
    package_version = control.version.split("-")[0]

    # Installing the package
    if not service_installed(app_service):
        print("Installing: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args, min_version=package_version)
        time.sleep(120)
        run('"%s" %s' % (app_unzip, silent_args_update))
        # Adding this package to the "list-registry"
        register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package
    else:
        print("Updating: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args_update, min_version=package_version)
        if not installed_softwares(app_name):
            # Adding this package to the "list-registry"
            register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package


def uninstall():
    killalltasks('Sysmon.exe')
    if run(("%s %s") % (app_bin_path, silent_args_remove)):
        remove_file(app_bin_path)
        unregister_uninstall(app_name)


def audit():
    # Check Sysmon Services
    if service_installed(app_service):
        return "OK"
    else:
        return "ERROR"

# -*- coding: utf-8 -*-
from setuphelpers import *

# Defining variables
bin_latest_zip = "Sysmon.zip"
app_name = "Sysmon"
app_bin = "Sysmon.exe"
app_unzip = makepath(app_name, app_bin)


def update_package():
    # Initializing variables
    proxies = get_proxies()
    if not proxies:
        proxies = get_proxies_from_wapt_console()
    url_dl = "https://download.sysinternals.com/files/Sysmon.zip"

    print("Download url is: %s" % url_dl)

    # Downloading latest binaries
    if not isfile(bin_latest_zip):
        print("Downloading: %s" % bin_latest_zip)
        wget(url_dl, bin_latest_zip, proxies=proxies)

        # Unzip
        unzip(bin_latest_zip)

        # Changing version of the package
        version = get_version_from_binary(app_unzip)
        control.version = "%s-%s" % (version, control.version.split("-", 1)[-1])
        control.save_control_to_wapt()
        print("Changing package version to: %s in WAPT\\control" % control.version)

de37aa7b6b4698ad2d96d7da58dfa6bb0b8a9e35f79b4ef2329357ad82921980 : setup.py
d9c8fdfdce510fd9922da3a1084b6ac4476c1407d1d8bbb67fc0a61988552771 : Sysmon/Sysmon64.exe
8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a : Sysmon/Eula.txt
a8e55c8530236caabd5126d45bd8bd9ec6b266e387c5ccd436c23f4ecea386b3 : Sysmon/Sysmon64a.exe
16e4ed3ea1d4c67213799905d61a2722cf08a0b74a885e58b743b91d3cddfc87 : Sysmon/Sysmon.exe
87291e98f9babfc056592b337b06aff79d1ccc4316cde00129c066a98d5f626b : update_package.py
0edb284c2157562c15b2eb6f7fb0b3d1752c86dbce782fd4e5dfea89b10e4ba6 : Sysmon.zip
a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d : WAPT/icon.png
a5a97261381e1d0ad46ee15916abec9c2631d0201f5cc50ceb0197a165a0bbbf : WAPT/certificate.crt
ae921a0bcf7d1d3f950865b20a541e4ea39ec0b0934f2ae2f705d2d1c52b4cc4 : luti.json
c90bbf0905cf1bc3b5497ea9f7396b762da82810f68eb070202997d70fa762ac : WAPT/control