Procmon 3.92 missing Event Properties - Process tab data

MicrosoftDocs / sysinternals

Content for sysinternals.com

http://sysinternals.com

Creative Commons Attribution 4.0 International

472 stars 259 forks source link

Procmon 3.92 missing Event Properties - Process tab data #650

Open jeffstokes72 opened 1 year ago

jeffstokes72 commented 1 year ago

Specifically, not seeing any information in Path or Command Line. See below:

this reproduces pretty frequently on enterprise managed systems. Seeing this a lot in support of mutual customers. Would be happy to provide some PML data if needed.

Thanks, Jeff Stokes

foxmsft commented 1 year ago

This would be super helpful, please send me an email, the format is with a dot between the name and surname.

jeffstokes72 commented 1 year ago

@foxmsft This appears to be fixed (at least I'm seeing this data now in a freshly captured Procmon. Ok to close this out on your end? if so I can close it. Just didn't want to be premature.

Jeff

foxmsft commented 1 year ago

Hey Jeff, not yet - I'm not fully satisfied. I'll return with an update around the next release.