Sysmon

package           : tis-sysmon
version           : 15.21-2
architecture      : x86
section           : base
priority          : optional
name              : Sysmon
categories        : Utilities,System and network
maintainer        : WAPT Team,Tranquil IT,Kenan KILICARSLAN,Gaëtan SEGAT
description       : System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.0
sources           : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
installed_size    : 2592768
impacted_process  : Sysmon
description_fr    : System Monitor (Sysmon) est un service système Windows et un pilote de périphérique qui, une fois installé sur un système, reste lors des redémarrages du système pour surveiller et enregistrer l'activité du système dans le journal des événements Windows
description_pl    : Monitor systemu (Sysmon) jest usługą systemową Windows i sterownikiem urządzenia, który po zainstalowaniu w systemie pozostaje w nim po każdym ponownym uruchomieniu, aby monitorować i rejestrować aktywność systemu w dzienniku zdarzeń Windows
description_de    : System Monitor (Sysmon) ist ein Windows-Systemdienst und -Gerätetreiber, der, sobald er auf einem System installiert ist, bei jedem Neustart des Systems aktiv bleibt, um die Systemaktivitäten zu überwachen und im Windows-Ereignisprotokoll zu protokollieren
description_es    : System Monitor (Sysmon) es un servicio del sistema Windows y un controlador de dispositivo que, una vez instalado en un sistema, permanece residente a través de los reinicios del sistema para supervisar y registrar la actividad del sistema en el registro de eventos de Windows
description_pt    : System Monitor (Sysmon) é um serviço de sistema Windows e driver de dispositivo que, uma vez instalado num sistema, permanece residente através de reinicializações do sistema para monitorizar e registar a actividade do sistema no registo de eventos do Windows
description_it    : System Monitor (Sysmon) è un servizio di sistema e un driver di dispositivo di Windows che, una volta installato su un sistema, rimane residente durante i riavvii del sistema per monitorare e registrare l'attività del sistema nel registro eventi di Windows
description_nl    : System Monitor (Sysmon) is een Windows-systeemdienst en apparaatstuurprogramma dat, zodra het op een systeem is geïnstalleerd, tijdens het herstarten van het systeem in het systeem blijft om de systeemactiviteit te controleren en in het Windows-gebeurtenislogboek op te slaan
description_ru    : System Monitor (Sysmon) - это системная служба Windows и драйвер устройства, который, будучи установленным в системе, остается постоянным при всех перезагрузках системы для мониторинга и регистрации активности системы в журнале событий Windows
audit_schedule    : 
editor            : Microsoft Sysinternals
keywords          : device,driver,monitor,service,log
licence           : GPL-3.0
homepage          : https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
package_uuid      : 9c863e59-ba9b-4bf3-b165-53faa129de14
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 10
max_os_version    : 
icon_sha256sum    : a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature_date    : 2026-06-22T23:02:14.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature         : E1aWUGUB3EFuI4DIcQ6VTPkxx0ikXaSdCCwB8IG6jqOeTxHVvAI8saDwj1iOt5T+P0k/kNOKCuHagmcfp9nmEwUufEMlLbhp56OPmUO9XlZLRXUcN178TyCJ/wUK9MuKqPkPBtjJh6741qrBrnY9jlUggDxmd65YSMUSoCcF8S5dg/6uRFLKfyAr+SDsNBpq9HiDu6SgEAchl2aCtjiHZsZqDU6orR/tNOGcsfJJ5HlopdEM60B7rN36RfrFGJO3LKDSmlWRGqRifaJBCcXplKl0pAVbPpGY1rk1IoXMTyzkwuPFhWyrEDGe5GLFQ+qsRYA3g0x70iWjwd7R7rww2A==

# -*- coding: utf-8 -*-
from setuphelpers import *
import time

# Defining variables
bin_latest_zip = "Sysmon.zip"
silent_args = "-accepteula -i"
silent_args_update = "-c"
silent_args_remove = "-u force"
app_name = "Sysmon"
app_service = "Sysmon"
app_bin = "Sysmon.exe"
app_unzip = makepath(app_name, app_bin)
app_dir = makepath(systemdrive, "Windows")
app_bin_path = makepath(app_dir, app_bin)


def install():
    # Initializing variables
    package_version = control.version.split("-")[0]

    # Installing the package
    if not service_installed(app_service):
        print("Installing: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args, min_version=package_version)
        time.sleep(120)
        run('"%s" %s' % (app_unzip, silent_args_update))
        # Adding this package to the "list-registry"
        register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package
    else:
        print("Updating: %s" % app_name)
        install_exe_if_needed(app_unzip, silentflags=silent_args_update, min_version=package_version)
        if not installed_softwares(app_name):
            # Adding this package to the "list-registry"
            register_windows_uninstall(control)  # control is a PackageEntry object corresponding to this package


def uninstall():
    killalltasks('Sysmon.exe')
    if run(("%s %s") % (app_bin_path, silent_args_remove)):
        remove_file(app_bin_path)
        unregister_uninstall(app_name)


def audit():
    # Check Sysmon Services
    if service_installed(app_service):
        return "OK"
    else:
        return "ERROR"

# -*- coding: utf-8 -*-
from setuphelpers import *

# Defining variables
bin_latest_zip = "Sysmon.zip"
app_name = "Sysmon"
app_bin = "Sysmon.exe"
app_unzip = makepath(app_name, app_bin)


def update_package():
    # Initializing variables
    proxies = get_proxies()
    if not proxies:
        proxies = get_proxies_from_wapt_console()
    url_dl = "https://download.sysinternals.com/files/Sysmon.zip"

    print("Download url is: %s" % url_dl)

    # Downloading latest binaries
    if not isfile(bin_latest_zip):
        print("Downloading: %s" % bin_latest_zip)
        wget(url_dl, bin_latest_zip, proxies=proxies)

        # Unzip
        unzip(bin_latest_zip)

        # Changing version of the package
        version = get_version_from_binary(app_unzip)
        control.version = "%s-%s" % (version, control.version.split("-", 1)[-1])
        control.save_control_to_wapt()
        print("Changing package version to: %s in WAPT\\control" % control.version)

6d48089c7fae14944c82b06767b79ccba3cc26d13218a4227ed28c90f80d0f0e : Sysmon.zip
8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a : Sysmon/Eula.txt
e629aff050b07293ce66cb5f220280727daa33b7eeda961554b86e35e8a72c7a : Sysmon/Sysmon.exe
a60aa845457406383277afdead35bd90c7804572b99901d239cc974841df2528 : Sysmon/Sysmon64.exe
440fca4bf161603fded8077313cb0f2d67795f1c4011516686fcd7a63dfaca49 : Sysmon/Sysmon64a.exe
38d056ab130f7bf7c481c12636a4e9959de36561d3dfcbe54c6e3571bc0c1dc3 : WAPT/certificate.crt
78411d106a38e0be5c1d7443266974618dfc0b9b1c47805250de27b4524feeff : WAPT/control
a5196572c8f3680ec6166ef070c8d843ab8511ffdd2de859adb1f5eed7efb35d : WAPT/icon.png
a73948a665e0784cac9173ae612123a8ccb5fc6e7b4617252753c5046ead4186 : luti.json
de37aa7b6b4698ad2d96d7da58dfa6bb0b8a9e35f79b4ef2329357ad82921980 : setup.py
87291e98f9babfc056592b337b06aff79d1ccc4316cde00129c066a98d5f626b : update_package.py