I am trying to eliminate the following events and just need a sanity check that I'm using the correct process
Object Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0
My reports are indicating
Solidcore: Top 10 Programs with Most Change
C:\WINDOWS\system32\igfxsrvc.exe (Program name) 5994 events
Solidcore: Top 10 Change Events in the Last 7
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0 (Object name) 7333 events
So to eliminate I go my Integrity Monitor policy and edit the advanced filters
I'm obviously doing something wrong as the events are still building - can any adviseMessage was edited by: jezzaf
INTEL GFX Driver igfxsrvc.exe
I would NOT eliminate that and SOLVE it from the source.
C:\WINDOWS\system32\igfxsrvc.exe is the INTEL GFX Driver.
We have a larger case now where the INTEL GFX card driver makes delays on ENS10.X when you
a) Right click on DESKTOP
b) Search on W7 in the Search field
The Binary igfxsrvc.exe does call over 300-400 Registry and Files when you do one of those functions.
You can exclude in SHELLEX (Right click menu)
A new driver does not solve it