mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-07-01 10:13:39 +00:00
Fix typo
This commit is contained in:
@ -75,7 +75,7 @@ ProcessCreationEvents
|
|||||||
| where ProcessCommandLine == "net stop MpsSvc"
|
| where ProcessCommandLine == "net stop MpsSvc"
|
||||||
| limit 10
|
| limit 10
|
||||||
|
|
||||||
// Better query - filters on filename, does case-insnsitive matches
|
// Better query - filters on filename, does case-insensitive matches
|
||||||
ProcessCreationEvents
|
ProcessCreationEvents
|
||||||
| where FileName in~ ("net.exe", "net1.exe") and ProcessCommandLine contains "stop" and ProcessCommandLine contains "MpsSvc"
|
| where FileName in~ ("net.exe", "net1.exe") and ProcessCommandLine contains "stop" and ProcessCommandLine contains "MpsSvc"
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user