Bleeping Computer

Microsoft Sysmon now detects when executables files are created

Microsoft has released Sysmon 15, converting it into a protected process and adding the new ‘FileExecutableDetected’ option to log when executable files are created. For those not familiar with Sysmon ...
Bleeping Computer

Microsoft Sysmon can now block malicious EXEs from being created

Microsoft has released Sysmon 14 with a new 'FileBlockExecutable' option that lets you block the creation of malicious executables, such as EXE, DLL, and SYS files, for better protection against ...