AnsweredAssumed Answered

Monitoring "a new process has been created"

Question asked by RALPH CHAPMAN on Jun 10, 2014
Latest reply on Jun 10, 2014 by huan zhou

I just attended a seminar where they suggested to watch Windows event #592/4688 "A new process has been created". Is anyone monitoring this? Is there a way to watch for any new processes that have not been seen for x number of days? Some way to create a list of known processes?  Any ideas would be great.

Outcomes