Sysmon: all versions and old releases

System activity monitor

Sysinternals System utilities #77 System utilities

1 versions of Sysmon are listed here, from September 10, 2026 to the current 15.22. Each one links to the publisher’s own installer files.

Version	Date	Size	Files
15.22Latest	September 10, 2026	2.9 MB	64-bit ZIP 2.9 MB ARM64 ZIP 2.9 MB 32-bit ZIP 2.9 MB

Most popular in System utilities

AutoHotkeyMacro-creation and automation-oriented scripting utility for Windows.
Bazela fast, scalable, multi-language and extensible build system
osquerySQL powered operating system instrumentation, monitoring, and analytics.
LocalSendShare files to nearby devices. Free, open source, cross-platform. An open source cross-platform alternative to AirDrop.
SimplenoteSimplenote is an easy way to keep notes, lists, ideas and more. Your notes stay in sync with all your devices for free.
Windows File ManagerOriginal Windows File Manager (winfile) with enhancements
DittoDitto is an extension to the Windows Clipboard. You copy something to the Clipboard and Ditto takes what you copied and stores it in a database to retrieve at a later time.
GaugeFree and open source test automation framework that takes the pain out of acceptance testing
Hydrus NetworkA personal booru-style media tagger that can import files and tags from your hard drive and popular websites. Content can be shared with other users via user-run servers.
CopyQClipboard manager with advanced features

Sysinternals SuiteSysinternals Suite is a bundle of the Sysinternals utilities including Process Explorer, Process Monitor, Sysmon, Autoruns, ProcDump, all of the PsTools, and many more.
AutorunsThis utility shows you what programs are configured to run during system bootup or login.
Process ExplorerProcess Explorer shows you information about which handles and DLLs processes have opened or loaded.
BGInfoAutomatically display relevant information about a Windows computer on the desktop's background.
Process MonitorProcess Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.
HandleHandle is a utility that displays information about open handles for any process in the system.