Sysmon Feature Request: Log Actual Destination of Proxied Network Traffic RRS feed

  • Question

  • I've been running into an issue for a while with Sysmon where it logs network traffic to our web proxy. It would be awesome if Sysmon could automatically identify network traffic that's being directed through a web proxy, and log the actual destination  host and/or IP address, rather than that of the proxy.



    Monday, July 9, 2018 12:36 PM