Learning Sysmon - Rule and Filter Order (Video 5)

In this video, Research Team Lead Carlos Perez addresses the order in which Sysmon processes Filters vs Rules. This is an important aspect when planning out a rule set where multiple filters and rules may collide. 00:00:00 Intro 00:01:09 How Sysmon Processes Filters 00:03:28 How Sysmon Processes Rules