Deploy Sysmon to Microsoft Intune

Deployment details

Latest version

15.21

Installer type

zip

Install command

.\payload\Invoke-AppDeployToolkit.exe

Uninstall command

.\payload\Invoke-AppDeployToolkit.exe -DeploymentType Uninstall

Detection rule

The exact Intune detection rules generated for this PSADT package

App source

win32

Commands and arguments were captured during an automated QA install of version 15.21 in an isolated Windows VM.

Recent versions

1. 15.21
2. 15.20
3. 15.15

How deployment works

IntuneGet packages Sysmon as a Win32 app and uploads it directly to your Microsoft Intune tenant. You review the package settings, configure assignments, and start the deployment from one guided workflow.