New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

"Procmon.exe /Terminate" doesn't always terminate Process Monitor #9

Open

olegbck opened this issue Nov 28, 2024 · 0 comments

Collaborator

olegbck commented Nov 28, 2024

We run Procmon this way:
C:\Tools\Procmon.exe /AcceptEula /BackingFile C:\cvex\procmon.pml /LoadConfig C:\cvex\config.pmc /Quiet

Then we terminate it this way:
C:\Tools\Procmon.exe /AcceptEula /Terminate

Sometimes Procmon.exe keeps running and it keeps collecting the events. If it gets terminated via taskkill, then the log file gets corrupted:

It hangs on:
C:\Tools\Procmon.exe /AcceptEula /OpenLog C:\cvex\procmon.pml /SaveAs C:\cvex\procmon.xml

Please find out what is the issue with Process Monitor and why it is not always terminating properly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment