Skip to content

Conversation

@brianrob
Copy link
Member

  • Address NullReferenceException when there is a missing process event.
  • Show all scans even when the filter driver events aren't present. This is especially useful when looking at traces generated by New-MpPerformanceRecording. These events will show up with an "Unknown" reason and won't have a stack, since these are both generated by the filter driver events.

Show all scans even when the filter driver events aren't present.  This
is especially useful when looking at traces generated by
New-MpPerformanceRecording.
@brianrob brianrob merged commit 2d397ca into microsoft:main Jun 19, 2025
5 checks passed
@brianrob brianrob deleted the dev/brianrob/defender branch June 19, 2025 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants