HelloI'm having problem collecting Sysmon Logs via WinRM. Sysmon service
is running and generating events in Eventviewer. When I added the
channel: Microsoft-Windows-Sysmon/Operational on the Log Collector, the
test connection displayed "Channel spec...
Hi all, i'm looking for help with this problem. After updating an ESA
rule in ESA primary correlation service and deploying, i keep getting
alerts (even alerts of rules i didn't update) with old events. It
doesn't happen when i update a rule in ESA s...
