Windows 11 Insider Preview Build 26300.7733 is now available in the Dev Channel. This build, identified as KB5074178, runs on Windows 11 version 25H2 and introduces native Sysmon functionality alongside fixes for File Explorer and cloud storage integration issues.
Built-in Sysmon for threat detection
Windows now includes Sysmon as a native feature, eliminating the need to download and install it separately. Sysmon captures system events that help identify suspicious activity and security threats. You can use custom configuration files to filter which events you monitor, and all captured data writes directly to the Windows event log for use with security applications.
Step 1: Open Settings, navigate to System, then select Optional features.
Step 2: Choose More Windows features and check the box for Sysmon, or run Dism /Online /Enable-Feature /FeatureName:Sysmon in PowerShell or Command Prompt.
Step 3: Complete the installation by running sysmon -i from PowerShell or Command Prompt.
Sysmon is disabled by default and must be explicitly enabled. If you previously installed Sysmon from the standalone download, uninstall it before enabling the built-in version.
File Explorer improvements and cloud storage fixes
This build addresses several File Explorer issues, including keyboard navigation and access key improvements. Folder renaming with custom names now works correctly, and missing icons and tooltips for the "Add to favorites" feature have been restored.
A significant fix resolves app freezing when working with files on OneDrive or Dropbox. Some Outlook configurations with PST files stored on OneDrive were causing hangs or forcing email data to reload; this issue is now addressed.
Voice Access gains Netherlands support
Voice Access, the voice control feature in Windows 11, now supports the Netherlands locale, expanding accessibility options for Dutch-speaking users.
Gradual rollout and feature testing
Changes in this build roll out in two phases. Some features and fixes are gradually deployed to Insiders who enable the "Get the latest updates as soon as they are available" toggle in Settings > Windows Update. Other improvements reach all Dev Channel participants over time. This staged approach lets Microsoft gather feedback before wider distribution.
Features included in Dev Channel builds may never release publicly. Microsoft uses this channel to test experimental concepts, and features can change, be removed, or replaced entirely based on feedback. Some features may eventually appear in future Windows releases when they're ready for general availability.
The desktop watermark in the lower right corner is normal for pre-release builds and does not indicate a problem.
Localization and feedback
Some features in active development may not be fully localized yet. Localization improvements happen gradually as features are finalized. If you encounter localization issues in your language, report them through the Feedback Hub app.
Share Sysmon feedback at syssite@microsoft.com. For a complete overview of which build is available in each Insider channel, check Flight Hub.
