generalized sysmon to use commands from the config file