Features

• More telemetry for process creations and incidents

  • User SID

  • User down-level logon name

  • Whether or not the process is elevated (Run As Administrator)

• Incidents now report where iterative data access occurred

Fixes

• Reduced memory usage during periods of server connectivity issues and heavy telemetry occurring at once

• Reduced memory usage during incident reporting

MD5 Hashes