"Time of Day","Process Name","PID","Operation","Path","Result","Detail" "09:04:07.1427140","totalcmd.exe","1760","QueryOpen","C:\xyz$$$.exe","FAST IO DISALLOWED","" "09:04:07.1427801","totalcmd.exe","1760","CreateFile","C:\xyz$$$.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "09:04:07.1430277","totalcmd.exe","1760","QueryOpen","C:\xyz$$$.exe","FAST IO DISALLOWED","" "09:04:07.1430917","totalcmd.exe","1760","CreateFile","C:\xyz$$$.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" |