To view existing log sessions and alert scans on %1, you must have read access to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentC ...

To view existing log sessions and alert scans on %1, you must have read access to the  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries  registry subkey and its subkeys on that system. Administrators can use Regedt32.exe  to grant the required permissions. See the Registry Editor Help file for details on how  to change the security on a subkey.    Only Administrators and Performance Log Users can create,  start, stop, or otherwise modify a log or alert.
English
English (United States)
日本語
Japanese