Sysmon

package           : tis-sysmon
version           : 15.20-2
architecture      : x64
section           : base
priority          : optional
name              : Sysmon
categories        : Utilities,System and network
maintainer        : WAPT Team,Tranquil IT,Kenan KILICARSLAN,Gaëtan SEGAT
description       : System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.0
sources           : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
installed_size    : 2592768
impacted_process  : Sysmon64
description_fr    : System Monitor (Sysmon) est un service système Windows et un pilote de périphérique qui, une fois installé sur un système, reste lors des redémarrages du système pour surveiller et enregistrer l'activité du système dans le journal des événements Windows
description_pl    : Monitor systemu (Sysmon) jest usługą systemową Windows i sterownikiem urządzenia, który po zainstalowaniu w systemie pozostaje w nim po każdym ponownym uruchomieniu, aby monitorować i rejestrować aktywność systemu w dzienniku zdarzeń Windows
description_de    : System Monitor (Sysmon) ist ein Windows-Systemdienst und -Gerätetreiber, der, sobald er auf einem System installiert ist, bei jedem Neustart des Systems aktiv bleibt, um die Systemaktivitäten zu überwachen und im Windows-Ereignisprotokoll zu protokollieren
description_es    : System Monitor (Sysmon) es un servicio del sistema Windows y un controlador de dispositivo que, una vez instalado en un sistema, permanece residente a través de los reinicios del sistema para supervisar y registrar la actividad del sistema en el registro de eventos de Windows
description_pt    : System Monitor (Sysmon) é um serviço de sistema Windows e driver de dispositivo que, uma vez instalado num sistema, permanece residente através de reinicializações do sistema para monitorizar e registar a actividade do sistema no registo de eventos do Windows
description_it    : System Monitor (Sysmon) è un servizio di sistema e un driver di dispositivo di Windows che, una volta installato su un sistema, rimane residente durante i riavvii del sistema per monitorare e registrare l'attività del sistema nel registro eventi di Windows
description_nl    : System Monitor (Sysmon) is een Windows-systeemdienst en apparaatstuurprogramma dat, zodra het op een systeem is geïnstalleerd, tijdens het herstarten van het systeem in het systeem blijft om de systeemactiviteit te controleren en in het Windows-gebeurtenislogboek op te slaan
description_ru    : System Monitor (Sysmon) - это системная служба Windows и драйвер устройства, который, будучи установленным в системе, остается постоянным при всех перезагрузках системы для мониторинга и регистрации активности системы в журнале событий Windows
audit_schedule    : 
editor            : Microsoft Sysinternals
keywords          : device,driver,monitor,service,log
licence           : GPL-3.0
homepage          : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
package_uuid      : b62652f2-46ee-4f10-aa26-a286c15d278e
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 10
max_os_version    : 
icon_sha256sum    : a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature_date    : 2026-04-01T00:08:27.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature         : Uq37P2gyvXPeI7uzI3PV8tcrP1bU5rAsyaKTP3uuvADkQrH0Wnvuuc0ZKvu49AHvfoXNqIBmmuUv+81ohq3vbpx5PUaRemc42LjjvScqwCHqd+UEqBNuOVFTQmYuAsVwjm5hkCy17OjmX+Egx5EEV9QrgZuzFbU/3ZUrjooe11m8SVk1mLGxnu9U5ezdOqErRlzPU26cer/ma3nRNRLHXouc3xU+s2PESrhK42Pvhutu2horY1a6TeGIepNyrQWPMDpik+CoqUZPNJOaTM4P9dovsKsFzdK8T1OtdJWg2BF0QUnsXO8cyqjiizbf8VrBwrGU9ZHalnTsMUsK9+V5Ww==

# -*- coding: utf-8 -*-
from setuphelpers import *
import time


# Defining variables
bin_latest_zip = "Sysmon.zip"
silent_args = "-accepteula -i"
silent_args_update = "-c"
silent_args_remove = "-u force"
app_name = "Sysmon"
app_service = "Sysmon64"
app_bin = "Sysmon64.exe"
app_unzip = makepath(app_name, app_bin)
app_dir = makepath(systemdrive, "Windows")
app_bin_path = makepath(app_dir, app_bin)


def install():
    # Initializing variables
    package_version = control.version.split("-")[0]

    # Installing the package
    if not service_installed(app_service):
        print("Installing: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args, min_version=package_version)
        time.sleep(120)
        run('"%s" %s' % (app_unzip, silent_args_update))
        # Adding this package to the "list-registry"
        register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package
    else:
        print("Updating: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args_update, min_version=package_version)
        if not installed_softwares(app_name):
            # Adding this package to the "list-registry"
            register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package


def uninstall():
    killalltasks('Sysmon64.exe')
    if run(("%s %s") % (app_bin_path, silent_args_remove)):
        remove_file(app_bin_path)
        unregister_uninstall(app_name)


def audit():
    # Check Sysmon Services
    if service_installed(app_service):
        return "OK"
    else:
        return "ERROR"

# -*- coding: utf-8 -*-
from setuphelpers import *

# Defining variables
bin_latest_zip = "Sysmon.zip"
app_name = "Sysmon"
app_bin = "Sysmon64.exe"
app_unzip = makepath(app_name, app_bin)


def update_package():
    # Initializing variables
    proxies = get_proxies()
    if not proxies:
        proxies = get_proxies_from_wapt_console()
    url_dl = "https://download.sysinternals.com/files/Sysmon.zip"

    print("Download url is: %s" % url_dl)

    # Downloading latest binaries
    if not isfile(bin_latest_zip):
        print("Downloading: %s" % bin_latest_zip)
        wget(url_dl, bin_latest_zip, proxies=proxies)

        # Unzip
        unzip(bin_latest_zip)

        # Changing version of the package
        version = get_version_from_binary(app_unzip)
        control.version = "%s-%s" % (version, control.version.split("-", 1)[-1])
        control.save_control_to_wapt()
        print("Changing package version to: %s in WAPT\\control" % control.version)

9c7bba9c88023abd33188cff4d3562278e0b7ddccb7935b6a6530887f9e054b1 : Sysmon.zip
8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a : Sysmon/Eula.txt
8e7367571937a274c90a0e338f09768dba83635f75a2f87e8425e192a1eb6a46 : Sysmon/Sysmon.exe
d8115212a7747010593de813404b02d05b915e4b1d0231502b856b9ace9274e8 : Sysmon/Sysmon64.exe
e0f3229d5a786cae59c7d5ec6e6052049e2103ed6fb8f12539d58b143986e0ab : Sysmon/Sysmon64a.exe
38d056ab130f7bf7c481c12636a4e9959de36561d3dfcbe54c6e3571bc0c1dc3 : WAPT/certificate.crt
4d275b0102e206e06f684c657a864c15189eec98c3b2344273230bdf557e8fee : WAPT/control
a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d : WAPT/icon.png
ee37d9801a1f8f78024d8fdeed95f4d7ca42003391be2901abc22ac273d37fc4 : luti.json
eda3e686b55e2659ce3aadbbe2db64f457257c3c57e909059e8ac9dae975300c : setup.py
cefaeeec5c77615c24669b9b336cde0d96d530ddb5a37a3a931a766eff75b63e : update_package.py