i did setup a few filters.....nope, nothing there

i am capturing all the connections that i am interested in...

however,

not much info you can get trough sql profiler on internal\hidden\background processes

assuming that this is Not internal sql collection, does this means that one of the 3rd party monitoring tool

that is a member of local admin group (windows admin) using NT AUTHORITY\SYSTEM login to connect to sql?

any other thoughts, ideas 🙂 please... i am all open to suggestions 🙂