Sysmon 12.03 - High CPU usage

Arnaldo Sanchez 1 Reputation point
2021-01-22T17:00:54.537+00:00

Hello,

Shortly after rolling out Sysmon 12.03 to several different Windows Servers (2012, 2016, 2019), users started to report they were not able to login to some of the servers.

Upon further investigation, we realize there were high CPU usage on the devices and we could not access them until Sysmon services were remotely "Stopped/Disabled" (over the network command).

We were forced to revert to our previous working Sysmon version 10.42.

Has anyone else experienced anything like this with Sysmon v12.03?

Any feedback or input would be greatly appreciated.
Thank you in advance for your time and help.

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,087 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alex Mihaiuc 716 Reputation points
    2021-03-03T15:06:40.847+00:00

    Hi, haven't seen this behavior before. Did you have any better results with v13+?

    0 comments