Windows 11 KB5077241 update improves BitLocker, adds Sysmon tool

Microsoft has released the KB5077241 optional cumulative update for Windows 11, which comes with 29 changes, including improvements to BitLocker, a new network speed test tool, and native System Monitor (Sysmon) functionality.

BleepingComputer

Windows 11 maxi update hits Insiders: Sysmon security, taskbar speedtest, Emoji 16.0, webcam pan/tilt, WebP wallpapers. 🛡️

Native Sysmon threat logging to Event Log, Quick Machine Recovery, flexible taskbar—all boosting productivity and diagnostics. ⚙️

🔗 https://www.pcworld.com/article/3064685/windows-11-is-about-to-get-a-wealth-of-new-features-and-changes.html

#TechNews #Privacy #Cybersecurity #Windows #Windows11 #Sysmon #Microsoft #Security #Taskbar #Emojis #FOSS #Linux #Infosec #Productivity #Insider #Speedtest #Emoji #Update

Windows 11 is about to get a wealth of new features and changes

Look forward to a taskbar speed test, new emojis, webcam controls, Sysmon security, and more.

PCWorld
Native Sysmon-Integration in Windows rückt näher

Microsoft hat Windows-Insider-Vorschauen veröffentlicht, die das mächtige Sysmon-Protokollierungstool als Windows-Feature mitbringen.

heise online
Oh holy hell. This just shows that Microsoft need to clean up its act and get rid of such functionality to FIRMLY stand on the side of defenders. What the fuck were they thinking when they added support for custom registry hives? #registry #evasion #sysmon #edr
https://deceptiq.com/blog/ntuser-man-registry-persistence
Registry Writes Without Registry Callbacks

Explore NTUSER.MAN, an overlooked Windows profile mechanism that allows registry persistence without triggering CmRegisterCallback EDR monitoring.

DeceptIQ
Windows integriert Sysmon nativ

Mark Russinovich hat angekündigt, dass das Diagnosetool Sysmon im kommenden Jahr Windows-Bestandteil wird.

heise online

RE: https://infosec.exchange/@suricata/115583672707664579

Suricata events enriched with #sysmon process info = #Pikksilm. Based on experiences from the #LockedShields cyber battlefield. Definitely recommended to see that tool and presentation.

Also talk about #ICS , #modbus and datasets by @reverseics brings good ideas and examples of #suricata rules.

Microsoft is bringing Sysmon natively into Windows 11 & Windows Server 2025 - installable via Optional Features and updated through Windows Update.

Custom configs, advanced filtering, and the familiar event set (proc creation, file creation, tampering, WMI, network activity) all remain.

Docs + new enterprise management features are coming next year.

What’s your take on native Sysmon for enterprise visibility?

#Sysmon #infosec #windows11 #microsoftsecurity #blueteam #cybersecurity #threathunting #endpointsecurity

#Microsoft wird das #Admin-#Tool #Sysmon ab 2026 fest in #Windows11 integrieren. Der System-#Monitor soll dann offiziellen Support erhalten und einfach über die Windows-Funktionsverwaltung aktivierbar sein. https://winfuture.de/news,155054.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
Windows 11: Microsoft will Admin-Tool Sysmon bald immer mitliefern

Microsoft will ab dem kommenden Jahr beginnen, das bisher als Teil der Sysinternals Toolbox vertriebene Programm Sysmon als nativen Teil der Ausstattung von Windows 11 und Windows Server 2025 mitzuliefern. Dies kündigte Syinternals-Macher Mark Russinovich jetzt offiziell an.

WinFuture.de