Author: krikkit
Subject: Bugs in Sysmon (event manifest)
Posted: 20 August 2014 at 5:06pm
v1.01 fixed the issue I was having.
Subject: Bugs in Sysmon (event manifest)
Posted: 20 August 2014 at 5:06pm
v1.01 fixed the issue I was having.
I uninstalled v1.00, installed v1.01
sysmon -i -h md5 -n -accepteula
Events are collected and forwarded to our Windows Event Collector "Forwarded Events" log; Splunk Universal Forwarder picks them up from there and sends them to an Indexer. Searches in Splunk return the full event details.