Sysmon 11.11 upgrade: MS Teams randomly closing itself RRS feed

  • Question

  • I am currently running Sysmon on workstations and just began testing an upgrade to version We are using a slightly modified version of the SwiftOnSecurity configuration (based on config v64 for, v71 for 11.11).

    We have noticed after doing so that Microsoft Teams randomly closes on 100% of machines testing 11.11. This happens 5 - 10 times during a typical workday. All machines are Windows 10 Enterprise LTSC 2019.

    I don't believe Teams is crashing because you hear the end call sound when you are on an active call and it happens. It doesn't seem to be related at all with any sort of user interaction with Teams. It will close whether you are on an active video call or it's just an open program in the background.

    Uninstalling Sysmon and/or installing the old version returns the expected reliability to Teams; it stops closing itself.

    Friday, August 7, 2020 7:06 PM