Module Quiz

10 questions · Pass at 80%

Question 1 of 10

A Windows 4688 event shows NewProcessName='C:\Windows\System32\cmd.exe' but the CommandLine field is empty. What is the root cause and the fix?