Skip to content

Sysmon Process Terminate (5) sometimes return empty ProcessGuid #17

@malkia

Description

@malkia

Rarely, but happened few times for us, Sysmon 15.15 would have that issue where ProcessGuid would be empty sometimes in the Process Terminate message.

I'll be adding extra logging information to see what the other fields are (I'm listening on a real-time session).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions