search

SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing
4.68k stars 1.69k forks source link

Event 22 not generating #167

Closed cyberminded closed 2 years ago

cyberminded commented 2 years ago

Trying to track down processes that are triggering suspicious TLD connections, but Event 22 logs are not generating in Event Viewer. I can see other Sysmon logs. Running Windows 10 and have already tried disabling antivirus. Anyone encountered this before or know what the solution is?

cyberminded commented 2 years ago

Reinstalled Sysmon with a fresh copy of the sysmonconfig-export seemed to do the trick. Not sure what the problem was.