Sysmon Network Connect Events - Missing Image Name ?

GKVA 1 Reputation point
2021-11-04T14:22:35.83+00:00

Hi – we find that in our production environment, several of our network connect events have no image name. We are also suspecting that in some cases where image name is reported, it is in fact incorrect. Is this a known issue? Perhaps a timing or load issue? We are using version 13.02

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
0 comments No comments
{count} votes

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.