Sysmon Config Builder

Start from

sysmonconfig.xml Comments Keep disabled

Paste Sysmon XML

Any Sysmon config works: SwiftOnSecurity, sysmon-modular, MSTIC, or your own. Older schemas are upgraded.

`Ctrl/⌘` `Z`	Undo
`Ctrl/⌘` `Shift` `Z` or `Ctrl` `Y`	Redo
`Ctrl/⌘` `S`	Download the config
`/`	Filter rules in the current event
`?`	This help
Drag ⋮⋮	Reorder rules within a list