microsoft / microsoft/SysmonForLinux

Request: Implement Event ID 22 (DNSEvent)

Open
#183 0 comments 4 reactions 1 assignee View on GitHub

@MarioHewardt is already working on this.

Since Aug 14, 2024.

investigate
Dominant language
C
Stars
2.2k
Forks
220
Avg merge
11d 22h
Merged PRs (30d)
2

Description

I’d like to request the implementation of Event ID 22 (DNSEvent) in Sysmon for Linux. This event logs DNS queries made by processes, and it’s available in Sysmon for Windows. Having this feature in the Linux version would greatly enhance DNS monitoring capabilities.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.