System Monitor Archives

Winsage

February 14, 2026

Windows 11 is testing new 2026 features — and some of them are already changing how the OS feels

Microsoft is advancing the development of Windows 11 through the Windows Insider Program, releasing several preview builds that include enhancements such as revamped camera controls, a new design for account settings, expanded image format support for desktop backgrounds, AI-driven image descriptions in Narrator, and the introduction of the System Monitor tool. Version 26H1 will not be available for existing PCs and includes minor adjustments and fixes. The updated camera controls for adjusting pan and tilt are accessible via Settings > Bluetooth & devices > Cameras > Camera > Basic settings. Additionally, Sysmon has been transitioned into a native tool in recent builds, removing the need for separate installation.

Winsage

November 19, 2025

Sysmon – Go-to Tool for IT Admins, Security Pros, and Threat Hunters Coming to Windows

Microsoft will integrate native System Monitor (Sysmon) functionality into Windows 11 and Windows Server 2025, enhancing security operations for IT teams. This integration will provide instant threat visibility, automate compliance through Windows Update, and include features such as process monitoring, network connection tracking, credential access detection, file system monitoring, process tampering detection, WMI persistence tracking, and custom configuration support. It will also offer official customer service support and allow seamless access to events through Windows Event Logs or Security Information and Event Management (SIEM) systems. Administrators can enable Sysmon using the command "sysmon -i." Future plans include expanding Sysmon’s capabilities with enterprise-scale management and AI-powered detection.

Winsage

November 19, 2025

Microsoft Integrates System Monitor (Sysmon) into Windows 11

Microsoft will integrate its forensic tool, System Monitor (Sysmon), into the Windows kernel with the upcoming releases of Windows 11 and Server 2025. This integration will transform Sysmon from a standalone utility into a native “Optional Feature” that will be serviced automatically through Windows Update. Administrators will no longer need to manually distribute Sysmon; instead, it can be activated through the “Turn Windows features on or off” dialog or command-line instructions. The integration will ensure that updates flow through the standard Windows Update pipeline, providing official support and Service Level Agreements (SLAs) for Sysmon. Microsoft plans to utilize local computing capabilities for AI inferencing to enhance security measures, focusing on detecting credential theft and lateral movement patterns. Sysmon will maintain backward compatibility with existing workflows, allowing the use of custom configuration files and adhering to the XML schema while continuing to log events to the Windows event log. Community-driven configuration repositories will remain operational, preserving established community knowledge.

Winsage

November 18, 2025

Microsoft is bringing native Sysmon support to Windows 11, Server 2025

Microsoft is integrating Sysmon into Windows 11 and Windows Server 2025, eliminating the need for separate deployments of Sysinternals tools. This integration will allow users to utilize custom configuration files for filtering captured events, which will be logged in the Windows event log. Sysmon is a free tool that monitors and blocks suspicious activities while logging events such as process creation, DNS queries, and executable file creation. It will be easily installable via the "Optional features" settings in Windows 11, with updates delivered through Windows Update. Sysmon will retain its standard features, including support for custom configuration files and advanced event filtering. Key events logged by Sysmon include process creation, network connections, process access, file creation, process tampering, and WMI events. Comprehensive documentation and new enterprise management features will be released next year.

Winsage

November 18, 2025

Microsoft to integrate Sysmon directly into Windows 11, Server 2025

Microsoft will integrate Sysmon into Windows 11 and Windows Server 2025, eliminating the need for standalone deployment. Sysmon will allow users to utilize custom configuration files for event filtering, logging events in the Windows event log. It tracks events such as process creation, DNS queries, executable file creation, changes to the clipboard, and auto-backup of deleted files. Users can access Sysmon through "Optional features" in Windows 11 and receive updates via Windows Update. Key events logged by Sysmon include process creation, network connections, process access, file creation, process tampering, and WMI events. Comprehensive documentation and new enterprise management features will be released next year.

Tech Optimizer

March 29, 2024

How to Monitor Hardware Usage in Windows 11 for Better Performance

Windows 11 includes tools to monitor system resources like RAM, CPU, and GPU usage. The Task Manager can be used to view and manage running programs and processes. The Resource Monitor provides detailed metrics on CPU, network, disk, and memory usage. The Performance Monitor offers comprehensive data including system summaries, performance reports, and real-time graphs. Users can customize it with performance counters and data collector sets. There are also third-party monitoring tools available that can provide more information, such as temperature and fan speeds. Desktop widgets for monitoring can be added through 8GadgetPack. Properly monitoring and managing system resources can improve the performance of Windows 11 by allowing users to close resource-intensive applications.