Exiting with error code: 8: Error creating PML

[oasec1]

Here's an added twist. This only happens occasionally. Thoughts?

[] Termination of Procmon commencing... please wait
[] Running cmdline: "c:\tools\procmon.exe" /Terminate
[] Procmon terminated
[] Checking for existence of file: C:\capture\Noriben_23_Feb_23__07_18_668505.pml
[!] Error creating PML file!
[*] Exiting with error code: 8: Error creating PML
Terminate batch job (Y/N)? y

[Rurik]

Does the PML file actually exist? This comes up only if Procmon ran and terminated without creating the output file.

If this happens you could try running Procmon manually in the same session, then checking to see if the files are being created while it's running.

[oasec1]

I'll validate that for you and get back to you. Thanks for the quick response!

[n3x77]

I have the same issue, the pml file is created, it seems that is has something to do with the procmon version. As a workaround you can just start Noriben with the following command Norben.py -p <Point to the PML-File this will use the existing pml file and generate Noriben output.