Process Creation Articles

Page 1 of 1 (1 article)

9/24/2024 • EN

A technical guide on intercepting and monitoring the 'Run as Administrator' event on Windows using Event ID 4688 and XPath queries.

Azure Monitoring Event Monitoring Process Creation Token Elevation Windows Security

Select Language