I’d like to request the implementation of Event ID 22 (DNSEvent) in Sysmon for Linux. This event logs DNS queries made by processes, and it’s available in Sysmon for Windows. Having this feature in the Linux version would greatly enhance DNS monitoring capabilities.