Hi @bobmorning I'd recommend pulling the Sysmon evtx logs from the host
and verifying that's where the issue is. If the logs look fine, then
maybe Splunk is having a parsing issue.
GPU usage graph does not match what is shown in Task Manager - flat out
there, while PE shows very little if anything.The graphic engines
graphing shows next to nothing as well. GPU dedicated memory matches,
but System memory limit shown is nonsense: 2 TB! (vs. 64 GB) - the
machine only has 128 GB R...
Hello, Has anyone seen this behavior with Sysmon: getting non-English
characters in the ParentUser, and ParentCommandLine fields? Sometimes it
looks like another language character set, other times it is WingDings
or some other non-sensical characters. This screenshot is from our
enterprise Splunk (...
Latest Comments