iCat{97b86ee0-259c-479f-bc46-6cea7ef4be4d}1.0.0.4524527/20/2001iCat{97b86ee0-259c-479f-bc46-6cea7ef4be4d}1.0.0.4524527/24/2001 ]]>Performance Logs and Alerts Service1.0Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert.2000 Microsoft Corp.Microsoft Corp.kathsekathse7/20/20017/24/2001%11%smlogsvc.exe0Performance Logs and Alerts serviceCollects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert.FileADVAPI32.dllFileKERNEL32.dllFileUSER32.dllFilentdll.dllFileNETAPI32.dllFileSHLWAPI.dllFilepdh.dllHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog\Log QueriesDefaults Installed0411HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\SysmonLogEventMessageFile%SystemRoot%\System32\smlogsvc.exe211HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\SysmonLogTypesSupported7411{00000000-0000-0000-0000-000000000000}1%SystemRoot%\system32\smlogsvc.exeCollects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.Performance Logs and AlertsSysmonLog163%SystemDrive%\PerflogsNT Authority\NetworkService