Windows 11 Canary Build 28020.1611: Sysmon Native Logging and OneDrive Share Improvements

Published by

Microsoft has released Windows 11 Canary Build 28020.1611, which introduces native Sysmon event logging integrated into the OS, eliminating the need for separate downloads. This update also features an overhaul of the OneDrive Share pane, adding icons to streamline the sharing process, although it is currently limited to users outside the EEA. Additionally, the build fixes a long-standing watermark bug that incorrectly displayed an older build number, now reflecting the actual version. Overall, the update provides functional enhancements and improved usability without significant changes to the operating system



Windows 11 Canary Build 28020.1611: Sysmon Native Logging and OneDrive Share Improvements

Microsoft has released the latest Windows 11 Canary Build, 28020.1611, to Windows Insiders, which brings several improvements and fixes, including native Sysmon event logging without the need for a separate download or configuration file. The built-in Sysmon feature allows security tools to pull rich process-creation data from the standard event log, streamlining security logging and eliminating the need to hunt down a third-party binary. Additionally, the build includes a minor overhaul of the Share pane for OneDrive links, which adds icons under the "Share using" label to represent apps registered for handling URLs, reducing the number of clicks required to share files. The build also fixes the infamous watermark bug that displayed an incorrect build number, now matching the system's actual report.

Windows 11 Canary Build 28020.1611: Sysmon Native Logging and OneDrive Share Improvements @ NT Compatible