Enforcing a Sysmon Archive Quota This blog post will create a Sysmon archive quota through WMI event consumption to avoid storage exhaustion.