Views:
  1. Edit TmOsprey.ini located in <Agent installation folder> as follows:

    [InteractiveSession]

    Enable=1

    LogFolder=C:\temp

    [ServiceSession]

    Enable=1

    LogFolder=C:\temp

  2. Reload the Security Agent.
  3. Check the yyyy-mm-dd_hh-mm-ss_EE_TmOsprey1.etl in C:\temp.