NEW_PROCESS Events and Parent Process

Have been seeing some NEW_PROCESS events all day today without parent process information listed in the event. I have seen this across different tenants and all Windows sensors impacted show the kernel as available.

Which version of the sensor is in use for this case?

Hello Steve,
I was running 4.33.10.5 on all tenants. I upgraded to the new stable version (4.33.10.7) today. Have not seen the issue today at all.
Thank you,
Chris

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.