question

Alex-0243 avatar image
0 Votes"
Alex-0243 asked foxmsft answered

Sysmon 13.01 Crashing with 4.50 Schema

I am seeing a troubling behavior that Sysmon v13.01 is crashing and it’s only 4.50 configuration files. The crashing will happen immediately upon configuration load or after windows startup. Previous configuration versions have been OK and stable. I have disabled everything but process create (event 1) and am left scratching my head. Has anyone else seen this behavior?

windows-sysinternals-sysmon
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

foxmsft avatar image
0 Votes"
foxmsft answered

Could you please paste the specific config snippet? Also - how is it in yesterday's 13.02?

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.