wmic.exe process created with eid 1 is not killed after creation. #10
Description
seems like sysmonsimulator should take care of killing child processes after verifying successful creation. not doing so makes use of sysmonsimular stdout as a component of automated performance/regression testing unnecessarily complicated. process creation summary data is not accessible to processes which call sysmon simulator until the wmic process created by sysmonsimulator is killed.