cancel
Showing results for 
Search instead for 
Did you mean: 
jezzaf
Level 7

Eliminate events that are not useful

I am trying to eliminate the following events and just need a sanity check that I'm using the correct process

C:\WINDOWS\system32\igfxsrvc.exe

Object Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0

My reports are indicating

Solidcore: Top 10 Programs with Most Change

C:\WINDOWS\system32\igfxsrvc.exe (Program name)  5994 events

Solidcore: Top 10 Change Events in the Last 7

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0 (Object name) 7333 events

So to eliminate I go my Integrity Monitor policy and edit the advanced filters  

 

untitled.JPG

I'm obviously doing something wrong as the events are still building - can any advise

Message was edited by: jezzaf

Whilst clicking around I found the following, can one explain the following and how they are applied - also are there any manuals for solidcore all i have is monitor Evaluation Guide
which is a some brief on 21/03/11 10:25:56 CDT
3 Replies
jhaynes
Level 12

Re: Eliminate events that are not useful

It doesn't sound like the community can answer your question. I suggest creating a service request to expedite getting  this solved.

Jeff Haynes

0 Kudos
CIPHENT.com
Level 11

Re: Eliminate events that are not useful

Try the "OR" switch rather than "AND" - just a suggestion.

- AB

0 Kudos
bretzeli
Level 11

Re: Eliminate events that are not useful

INTEL GFX Driver igfxsrvc.exe

I would NOT eliminate that and SOLVE it from the source.

C:\WINDOWS\system32\igfxsrvc.exe is the INTEL GFX Driver.

We have a larger case now where the INTEL GFX card driver makes delays on ENS10.X when you

a) Right click on DESKTOP

b) Search on W7 in the Search field

The Binary igfxsrvc.exe does call over 300-400 Registry and Files when you do one of those functions.

You can exclude in SHELLEX (Right click menu)

A new driver does not solve it