Process Tracking is not enabled in the active audit policy. The EventSentry process tracking feature will not work.

The "Process Tracking" feature of EventSentry relies on the Operating System logging security events to the security event log, indicating when processes are started and stopped.

These security events are generated when "Audit Process Tracking" is enabled in the active security policy. Please see the additional links below for information on how to enable this auditing feature.