microsoft/SysmonForLinux

View on GitHub

Sysmon for Linux

Stars: 2.2k
Forks: 220
Open beginner issues: 0
Indexed issues: 34
Avg merge: 11d 22h
Merged PRs (30d): 2

Dominant language: C
License: MIT
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

34 open issues indexed

ProcessTerminate events intermittently report an unrelated user's UID instead of the terminating process's UID Open

microsoft/SysmonForLinux#238 · 1 assignee · Opened Jul 22, 2026
Sysmon event 3 is not detecting TCP connections on Sysmon v1.5.1 on Rocky linux 9.7 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#233 · Opened Apr 24, 2026
fix: prevent division by zero in intHandler when no events received Open

microsoft/SysmonForLinux#230 · 1 assignee · Opened Apr 4, 2026
Config is lost after update to 1.5 Open

microsoft/SysmonForLinux#226 · 1 assignee · Opened Feb 20, 2026
Request: Official support for Debian 13 (Trixie) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/SysmonForLinux#220 · 2 reactions · Opened Jan 13, 2026
Libxml2 Compatibility Issue in Ubuntu 25.10 Open

microsoft/SysmonForLinux#219 · 1 comment · 1 assignee · Opened Dec 6, 2025
sysmon 1.4.0 missing TCP events on RHEL 9 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#218 · Opened Nov 26, 2025
High CPU usage seen for sysmon process Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/SysmonForLinux#217 · Opened Nov 24, 2025
INSTALL.md file provides wrong commands for Fedora Open

microsoft/SysmonForLinux#216 · 1 reaction · 1 assignee · Opened Jul 26, 2025
Memory leaks with sysmon 1.3.7 Open

investigate

microsoft/SysmonForLinux#211 · 3 comments · 1 assignee · Opened Jun 10, 2025
Event Type 3: Incorrect Port Reported Open

investigate

microsoft/SysmonForLinux#203 · 1 comment · 1 assignee · Opened Apr 20, 2025
Fedora-version of sysmonforlinux is failing (made for RHEL 8?) Open

investigate

microsoft/SysmonForLinux#201 · 1 comment · 1 assignee · Opened Apr 2, 2025
Event ID 11 Not Recorded. Open

investigate

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#190 · Opened Dec 25, 2024
EventID=3 Source and DestinationHostname not resolved? Open

investigate

microsoft/SysmonForLinux#186 · 1 reaction · 1 assignee · Opened Oct 7, 2024
Disable auto rewriting of files Open

investigate

microsoft/SysmonForLinux#184 · 4 comments · 1 assignee · Opened Aug 24, 2024
Request: Implement Event ID 22 (DNSEvent) Open

investigate

microsoft/SysmonForLinux#183 · 4 reactions · 1 assignee · Opened Aug 14, 2024
FileCreate event Open

microsoft/SysmonForLinux#182 · 1 reaction · 1 assignee · Opened Jun 28, 2024
Add BPF_MAP_FREEZE to perf_event output maps to prevent easily blinding of sysmon Open

investigate

microsoft/SysmonForLinux#180 · 1 assignee · Opened Jun 17, 2024
cross compilation support Open

enhancement

microsoft/SysmonForLinux#154 · 3 comments · 1 assignee · Opened Oct 26, 2023
Event ID 11 - Empty TargetFilename Open

bug

microsoft/SysmonForLinux#153 · 2 comments · 1 assignee · Opened Oct 23, 2023
Event 3 connections with UDP report Destination IP as 127.0.0.1 Open

bug

microsoft/SysmonForLinux#126 · 1 assignee · Opened May 16, 2023
Sysmon should remove the extraced binaries under /opt/sysmon when uninstalling using -u switch Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

microsoft/SysmonForLinux#106 · Opened Mar 16, 2023
sourcehostname always empty Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#89 · Opened Dec 21, 2022
ProcessGUIDs are not necessarily unique, especially for non-PIEs Open

investigate

Difficulty 5/5 Over a week Newbie friendliness 30/100

microsoft/SysmonForLinux#84 · Opened Sep 27, 2022
Lack of error checking on calls to UTF8toUTF16, rule filter bypass Open

investigate

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#83 · Opened Sep 27, 2022
Not log DnsQuery EventID 22 Open

bug

microsoft/SysmonForLinux#57 · 11 comments · 1 assignee · Opened Dec 26, 2021
Consider a unix domain socket for log forwarding Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/SysmonForLinux#49 · 11 comments · 1 reaction · Opened Dec 4, 2021
Network Accept tracker to handle empty address Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

microsoft/SysmonForLinux#48 · Opened Nov 29, 2021
SLES 12 packages are compiled with glibc2.26 requirement, while SLES 12 ships with 2.22 Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#28 · 1 comment · Opened Oct 18, 2021
Add config validation option Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#27 · 2 comments · Opened Oct 17, 2021
Hardened systemd config Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

microsoft/SysmonForLinux#26 · 2 comments · 4 reactions · Opened Oct 17, 2021
Support for running Sysmon from CLI/interactive inside a container or AKS cluster Open

enhancement

microsoft/SysmonForLinux#16 · 2 comments · 1 assignee · Opened Oct 15, 2021
Is there a possibility to change to OUTPUT file to a custom /var/log destination Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/SysmonForLinux#15 · 10 comments · 12 reactions · Opened Oct 15, 2021
Support for Alternative Log Format such as JSON Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/SysmonForLinux#4 · 13 comments · 17 reactions · Opened Oct 15, 2021

microsoft/SysmonForLinux

Get new issues in your inbox