Guest Poupi the frog Posted October 16, 2019 Posted October 16, 2019 Hi, I am unable to find why in some cases the antimalware (MsMpEng.exe) is doing dns queries (event 22 in sysmon). This does not appear to be consistent. I entered a url in Chrome and Firefox, Sysmon event log showed that these processes were reaching out (through dns queries) for the related IPs. MsMpEng.exe was out of the loop. Why does MsMpEng.exe perform dns queries at times? Why is this inconsistent? More... Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.