Sysmon Driver Altitude Change

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•7

Detects changes in Sysmon driver altitude value. If the Sysmon driver is configured to load at an altitude of another registered service, it will fail to load at boot.