Winlogbeat Sysmon Configuration Registry fields seems to map the wrong value of the registry

Third attempt to escalate this...

Can someone please verify and confirm this bug? Same issue in 7.13.1..


That looks like a bug to me. Please open a bug for it. The test data for the module looks wrong. IIUC the value should be 0x00000004.

1 Like

Thanks for confirming @andrewkroh

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.