Activity Monitoring Engine This section explains the uberAgent ESA Activity Monitoring engine. Pages in This Section Overview MS Office & Acrobat Reader Monitoring LOLBAS Monitoring Network Monitoring Process Tampering Monitoring Remote Thread Monitoring Root CA certificate monitoring Security Descriptor & ACL Monitoring Sigma Rules & Converter Sysmon Rule Converter Rule Editor: uAQL Studio Rule Syntax Event Types Event Properties Common Event Properties Process.DirectorySdSddl DNS Query Event Properties Image Load Event Properties Network Event Properties Registry Event Properties Remote Thread Event Properties