We run this query every Monday and usually see activity up to the current date, however yesterday when we ran we only saw up to the 24th(10/24). We know that we have a service account that runs over the weekend that usually creates events but they were not found. Were their any updates that would cause this issue? We have checked the sensors and they seem to be reporting, is there a way to confirm all activity is being recorded by the sensors in AD?
Thanks,
Serge
