Hi Splunk team, I suspect that a wildcard is missing in the second process filter for [Windows Set Account Password Policy To Unlimited Via Net](https://research.splunk.com/endpoint/11f93009-8083-43fd-82a7-821fcbdc8342/) (Processes.process="* /maxpwage:unlimited" OR Processes.process="**\*** /maxpwage:49710")
Hi Splunk team,
I suspect that a wildcard is missing in the second process filter for
Windows Set Account Password Policy To Unlimited Via Net
(Processes.process="* /maxpwage:unlimited" OR Processes.process="* /maxpwage:49710")