This documentation provides details about the data that can be faked for SysMon logs.
To retrieve generated/fake data for SysMon logs see the following capabilities:
from socfaker import SocFaker
sc = SocFaker()
print(sc.logs.windows.sysmon()).. automodule:: socfaker.sysmon
:members:
:undoc-members: