Event id 1 sysmon July 8, 2019 16 32 64 128 Sysmon event id 1 process creation Sysmon event id 1 vs 4688 Sysmon event id 1 fields Sysmon event id 1 example The sysmon event id 1 corresponds to Event id 161 Event id 12 sysmon Event code 13 sysmon