Detection rules › By eventMicrosoft-Windows-Sysmon event 162 detection rules reference this event. View event page.Sigma (2)Sysmon Configuration Change severity mediumSysmon Configuration Modification severity high T1564