SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing
4.68k stars 1.69k forks source link

Event Id 10 not being generated #166

Open neverkknown opened 2 years ago

neverkknown commented 2 years ago

Event ID 10 is not been logged and I am unable to get any logs related to event id 10 in windows.

kofhearts commented 2 years ago

There are no rules for the Event id 10, which means nothing is logged.