Sysmon Event ID 10 (Process Access): Granted Access Converter
GrantedAccess to Access Rights
GrantedAccess (hex):
Convert
Access Rights to GrantedAccess
Access Rights:
PROCESS_TERMINATE
PROCESS_CREATE_THREAD
PROCESS_SET_SESSIONID
PROCESS_VM_OPERATION
PROCESS_VM_READ
PROCESS_VM_WRITE
PROCESS_DUP_HANDLE
PROCESS_CREATE_PROCESS
PROCESS_SET_QUOTA
PROCESS_SET_INFORMATION
PROCESS_QUERY_INFORMATION
PROCESS_SUSPEND_RESUME
PROCESS_QUERY_LIMITED_INFORMATION
PROCESS_SET_LIMITED_INFORMATION
PROCESS_ALL_ACCESS
Convert
GrantedAccess: