Learning Sysmon - Rule and Filter Order (Video 5)
In this video, Research Team Lead Carlos Perez addresses the order in which Sysmon processes Filters vs Rules. This is an important aspect when planning out a rule set where multiple filters and rules may collide.
00:00:00 Intro
00:01:09 How Sysmon Processes Filters
00:03:28 How Sysmon Processes Rules