Install Sysmon

Please see the history of this file for instructions for older, unsupported versions.

Azure Linux 3

sudo dnf install sysmonforlinux

Ubuntu

1. Register Microsoft key and feed

wget -q https://packages.microsoft.com/config/ubuntu/$(lsb_release -rs)/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
sudo dpkg -i packages-microsoft-prod.deb

2. Install sysmonforlinux

sudo apt-get update
sudo apt-get install sysmonforlinux

Debian

1. Register Microsoft key and feed

wget -q https://packages.microsoft.com/config/debian/$(. /etc/os-release && echo ${VERSION_ID%%.*})/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
sudo dpkg -i packages-microsoft-prod.deb

2. Install sysmonforlinux

sudo apt-get update
sudo apt-get install sysmonforlinux

Fedora

1. Register Microsoft key and feed

sudo rpm -Uvh https://packages.microsoft.com/config/fedora/$(rpm -E %fedora)/packages-microsoft-prod.rpm

2. Install sysmonforlinux

sudo apt-get update
sudo apt-get install sysmonforlinux

RHEL

1. Register Microsoft key and feed

sudo rpm -Uvh https://packages.microsoft.com/config/rhel/$(. /etc/os-release && echo ${VERSION_ID%%.*})/packages-microsoft-prod.rpm

2. Install sysmonforlinux

sudo yum install sysmonforlinux

openSUSE 15

1. Register Microsoft key and feed

sudo zypper install libicu
sudo rpm --import https://packages.microsoft.com/keys/microsoft.asc
wget -q https://packages.microsoft.com/config/opensuse/15/prod.repo
sudo mv prod.repo /etc/zypp/repos.d/microsoft-prod.repo
sudo chown root:root /etc/zypp/repos.d/microsoft-prod.repo

2. Install SysmonForLinux

sudo zypper install sysmonforlinux

SLES 15

1. Register Microsoft key and feed

sudo rpm -Uvh https://packages.microsoft.com/config/sles/15/packages-microsoft-prod.rpm

2. Install SysmonForLinux

sudo zypper install sysmonforlinux