search

Sysinternals / SysmonForLinux

MIT License
1.71k stars 181 forks source link

Ubuntu 22.04 FileCreate events not logged #111

Closed MarioHewardt closed 1 year ago

MarioHewardt commented 1 year ago

Describe the bug File creation events are not logged on Ubuntu 22.04

To Reproduce Enable FileCreation events in the sysmon schema and run: sudo ./sysmon -i

Sysmon version Built from source

Distro/kernel version Ubuntu 22.04 5.19.0-35-generic

Sysmon configuration `

`

Logs Syslog does not show any FileCreation events

Expected behavior Syslog should show file creation events

Additional context

MarioHewardt commented 1 year ago

Moving to SysinternalsEBPF repo