3 ms·
This is a limitation of the way ETW does structured logging, rather than a design decision in sysmon itself.
by windowsworkstoo 12y ago
This is a limitation of the way ETW does structured logging, rather than a design decision in sysmon itself.