
Hi all, last Tuesday Microsoft released Windows 11 Insider Preview Build 26300.7733 (KB5074178) to the Dev Channel.
A quick update that rolled out smoothly adding sysmon to Windows as a feature
Changes and Improvements gradually being rolled out with toggle on*
[Built-in Sysmon]
Previously announced here, Windows now brings Sysmon functionality natively to Windows. Sysmon functionality allows you to capture system events that can help with threat detection, and you can use custom configuration files to filter the events you want to monitor. The captured events are written on the Windows event log, enabling them to be used with security applications and a wide range of use cases.
Built-in Sysmon is disabled by default and must be explicitly enabled.
- Go to Settings > System > Optional features > More Windows features > checking Sysmon or in PowerShell or command prompt:
- Dism /Online /Enable-Feature /FeatureName:Sysmon
- To complete the installation, from PowerShell or command prompt run:
- sysmon -i

Note: If you’ve already installed Sysmon from the website, it must be uninstalled before enabling the built-in Sysmon.
Documentation will be added to Windows soon. The functionality of Sysmon remains unchanged, learn more https://learn.microsoft.com/sysinternals/downloads/sysmon.
Share feedback at syssite@microsoft.com.
[Voice Access]
- Support for the Netherlands locale has been added.
Fixes gradually being rolled out with toggle on*
[File Explorer]
- We fixed a few issues in File Explorer, including accessibility improvements (keyboard navigation and access keys), folder renaming with custom names, and missing icons/tooltips for “Add to favorites”.
[Other]
- We fixed an issue that caused apps to freeze when working with files on OneDrive or Dropbox. Some Outlook setups with PSTs on OneDrive could also hang or reload email data.
source: Windows Blogs



