Skip to content

Unable to scan applocker events from evtx or from local event viewer #1041

@infosecfred

Description

@infosecfred

Product

AppControl Manager

Does Your System Meet The Requirements?

  • Yes, I acknowledge that I've read the requirements and my system meets them. 👍

Is your Windows Installation Genuine?

  • Yes, I acknowledge that the installation media (such as ISO file) of the Windows OS I used was downloaded from the official Microsoft website and I didn't tamper or modify it. 💯

Have you used any other 3rd party tools to modify your Windows installation?

  • If you used any other 3rd party tools to modify your Windows installation, they can be causing the problem you're experiencing.

Did You Read The Frequently Asked Questions?

  • Yes, I've referred to the FAQs and my issue is not covered/explained in there.

Please Explain The Bug

Applocker events 8029,8038 are not showing up in appcontrol manager when scanning local event viewer or when scanning from an evtx file that i exported.

Image Image

Error Details

No error messages

Metadata

Metadata

Assignees

Labels

AppControl Manager 🛡️Any item labeled with this is related to the AppControl Manager application.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions