Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CMPIvot spawns multiple PowerShell scripts and high cpu usage. #2341

Open
cp07451 opened this issue Oct 7, 2022 · 0 comments
Open

CMPIvot spawns multiple PowerShell scripts and high cpu usage. #2341

cp07451 opened this issue Oct 7, 2022 · 0 comments

Comments

@cp07451
Copy link

cp07451 commented Oct 7, 2022

Not sure if its fluke but when running CMPivot with the following
WinEvent('Security',1d) | where ID == 6422 | project Device, Message | distinct Device

spawned two or three PowerShell scripts. In addition the query consumes a large of CPU. Has anyone tried this against the security log?
I can run the same item in PowerShell ISE and its considerably faster.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant