Log sources tagged process

Log sources tagged process. Browse source profiles associated with process.

Matching source profiles

Windows · xml

A new process was created, with fields that depend on the event version and audit policy.

Sysmon · xml

Sysmon records process creation through its Windows Operational channel.

Sysmon · xml

Sysmon records network connection through its Windows Operational channel.

Sysmon · xml

Sysmon records image loaded through its Windows Operational channel.

Sysmon · xml

Sysmon records createremotethread through its Windows Operational channel.

Sysmon · xml

Sysmon records registry value set through its Windows Operational channel.

Sysmon · xml

Sysmon records dns query through its Windows Operational channel.

Sysmon · xml

Sysmon records file deletion archived through its Windows Operational channel.

osquery · json

Scheduled query differential results describe rows added or removed relative to the query’s prior state.