Event id 4688 vs sysmon July 8, 2019 16 32 64 128 Sysmon event id 1 vs 4688 Event id 4688 sysmon 4688 event id enable
