2026-07-15 17:29 UTC
@FritzAdalis@infosec.exchange
It's occasionally with the same 2 users. never the same time when it happens. So letting procmon run that long, i might not be able to open that file.
i've checked the event viewer for that, not finding anything.
Replies (1)
-
@FritzAdalis@infosec.exchange 2026-07-15 17:38
@Fringedcrow@infosec.exchange I think you can set procmon to use a file with a max size instead of memory.