We have some crummy vendor provided applications that instead of running as a service require an actual application to be logged in on a server. Thus there is no service available to monitor. How can I set up a sensor to monitor when an application is no longer active?


Article Comments

Hi there,

You can monitor processes on Windows machines using WMI Process sensor.


Kind regards

Felix Wiesneth - Team Tech Support


Nov, 2020 - Permalink