Sysmon Network Connect Events - Missing Image Name ?

GKVA 1 Reputation point
2021-11-04T14:22:35.83+00:00

Hi – we find that in our production environment, several of our network connect events have no image name. We are also suspecting that in some cases where image name is reported, it is in fact incorrect. Is this a known issue? Perhaps a timing or load issue? We are using version 13.02

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,087 questions
0 comments No comments
{count} votes