Notifications
Clear all
Topic starter
Hello,
I am analyzing the output of Binalyze AIR from a system and I found in the SRUM date processes like:
svc.ownproc.s0.uc0.host2000000000000000_1.0.0.0_neutral__1234567890abc
... and usernames like:
LogonSessionId_8_336540230
Any idea where do they come from or what cause that kind of entries? I am not really sure what to lookup or google. I could find nothing in the ressources I know...
I hope you guys have some idea. Thanks in advance!
Posted : 03/12/2021 2:59 pm