Sysmon-Operational SourceInitiated Forward Sysmon Operational events to ForwardedEvents (self-subscription locale) true http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog MinLatency 30000 * ]]> false HTTP Events ForwardedEvents O:NSG:NSD:(A;;GA;;;DC)(A;;GA;;;NS)(A;;GA;;;DD)