Skip to main content
MonXbebe
Explorer
Oct 8, 2024 11:04 AM UTC
Solved

Windows Agent, PowerShell Events

Hello,

 

while testing in our system I noticed that PowerShell and Sysmon events are not arriving in the SIEM system. Other events such as Windows Event ID 4624 arrive without any problems. The template is defined for the PowerShell events Microsoft-Windows-PowerShell/Operational and Windows PowerShell. The local security guidelines are also set. I'm using Windows Agent 7.2.2. What am I doing wrong?

 

Best Regards

MonXbebe
MonXbebeAnswer
Explorer
Oct 8, 2024 11:40 AM UTC

If anyone has a similar problem. The update to WindowsAgent 7.2.4 has helped...

1 reply

MonXbebe
MonXbebeAuthorAnswer
Explorer
Oct 8, 2024 11:40 AM UTC

If anyone has a similar problem. The update to WindowsAgent 7.2.4 has helped...

Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024