Author: maialen
Subject: Procmon doesnt apply filters when exporting to PML
Posted: 17 December 2014 at 11:11am
I'd like to filter a PML file in order to save the information I search for in a new file from the command line.
Drop filtered events is set and so is the filter I need to use, however when using the following command:
Procmon.exe /openlog "Logfile.pml" /saveapplyfilter /loadconfig ProcmonConfiguration.pmc /saveas "Logfile2.pml"
The Logfile2.pml is identical to the original file. However, the command:
Procmon.exe /openlog "Logfile.pml" /saveapplyfilter /loadconfig ProcmonConfiguration.pmc /saveas "Logfile.xml"
Saves just the filtered events I need (as expected).
Is the export functionality different in both file types? The xml files output seems the correct one.
Subject: Procmon doesnt apply filters when exporting to PML
Posted: 17 December 2014 at 11:11am
I'd like to filter a PML file in order to save the information I search for in a new file from the command line.
Drop filtered events is set and so is the filter I need to use, however when using the following command:
Procmon.exe /openlog "Logfile.pml" /saveapplyfilter /loadconfig ProcmonConfiguration.pmc /saveas "Logfile2.pml"
The Logfile2.pml is identical to the original file. However, the command:
Procmon.exe /openlog "Logfile.pml" /saveapplyfilter /loadconfig ProcmonConfiguration.pmc /saveas "Logfile.xml"
Saves just the filtered events I need (as expected).
Is the export functionality different in both file types? The xml files output seems the correct one.