KB5077221 (build 28020.1611) for Windows 11 26H1 adds new system monitor tool (Canary)

Yet another Canary build lands with small changes, and here's what you need to know.

Windows 11 KB5077221
Windows 11 KB5077221 / Image: Mauro Huculak
  • Windows 11 build 28020.1611 (KB5077221) rolls out in the Canary Channel.
  • This update integrates a new system monitor tool and improves the sharing experience for OneDrive files.

Microsoft is rolling out Windows 11 build 28020.1546 (KB5077221) to the Canary Channel, delivering another incremental update with new features and visual changes.

According to the official changelog, “Windows 11 Insider Preview Quality Update (28020.1611)” ships with the Sysmon tool, and updates the Windows Share experience with a new option to copy links from OneDrive files.

What’s new on Windows 11 build 28020.1611 

Microsoft’s official changelog in the latest preview of Windows 11 confirms.

Sysmon native support

Sysmon (System Monitor) has long been the gold standard for security professionals, but it required manual installation. However, with the KB5077221 update, Microsoft is making Sysmon a native Windows 11 component rather than a standalone Sysinternals tool.

According to the company, Sysmon lets you capture detailed system activity useful for threat detection, and its customizable configuration files allow you to filter exactly which events you want to track.

You can enable the feature from Settings > System > Optional features > More Windows features, checking the “Sysmon” item.

Once you complete the steps, from PowerShell or Command Prompt, run the Sysmon -i command.

Microsoft notes that if you have the web version of Sysmon, you’ll need to uninstall it before installing the new native version.

Windows Share copy link option

When sharing a file stored in OneDrive, the Windows Share UI does not display a list of apps to share the link with.

Other fixes

As part of the fixes, build 28020.1611 now shows the correct build number in the desktop watermark.

Other details

It’s important to clarify that Windows 11 26H1 is not a feature update for existing devices. The software giant has explicitly confirmed that version 26H1 is not an upgrade path for computers running Windows 11 25H2 or any earlier release.

This release is designed exclusively for new ARM64 hardware and will ship only on next-generation computers, starting with devices powered by Snapdragon X2 Plus, Elite, and Extreme processors. Systems based on Intel or AMD platforms will never receive Windows 11 26H1 through Windows Update or any other supported upgrade channel.

Preview build download

To download and install this Windows 11 build, enroll your devices in the Canary Channel through the “Windows Insider Program” settings from the “Update & Security” section. Once you enroll the computer in the program, you can download the build from the “Windows Update” settings by turning on the “Get the latest updates as soon as they’re available” option and clicking the “Check for Updates” button.

About the author

Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech in 2010. With over 22 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS.

Certifications: Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+.

Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central.

You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at [email protected].