none
Sysmon - extend process terminate entry to capture resource use RRS feed

  • Question

  • Is the source for Sysmon available. I'd like to extend the terminate log to capture at least CPU usage. If not, please take this as a suggestion.

      Thanks

    Saturday, November 3, 2018 8:56 PM

All replies

  • No the source is not available. Please direct any enhancement requests for Sysmon to sysmonsupport@microsoft.com

    MarkC(MSFT)

    Monday, November 5, 2018 4:46 PM