Thank you for filling out a Git bug report! Please answer the following questions to help us understand your issue. What did you do before the bug happened? Initiated the cp.exe command to copy file(s) from one location to another. What did you expect to happen? I expected to see in the Windows Sysmon Event 1 the entire command string. What happened instead? The log captured is only that cp.exe was used. What's different between what you expected and what actually happened? The difference is that the entire command string is not being captured. Anything else you want to add: Please review the rest of the bug report below. You can delete any lines you don't wish to share. [System Info] git version: git version 2.27.0.windows.1 cpu: x86_64 built from commit: 907ab1011dce9112700498e034b974ba60f8b407 sizeof-long: 4 sizeof-size_t: 8 uname: Windows 10.0 18363 compiler info: gnuc: 10.1 libc info: no libc information available [Enabled Hooks] not run from a git repository - no hooks to show Thanks, Michael Garza,