diff --git a/pkg/security/probe/probe_kernel_file_windows.go b/pkg/security/probe/probe_kernel_file_windows.go
index 0f7d0f8055c2f..366d62bb68691 100644
--- a/pkg/security/probe/probe_kernel_file_windows.go
+++ b/pkg/security/probe/probe_kernel_file_windows.go
@@ -413,9 +413,6 @@ type cleanupArgs struct {
 // nolint: unused
 type closeArgs cleanupArgs
 
-// nolint: unused
-type flushArgs cleanupArgs
-
 func (wp *WindowsProbe) parseCleanupArgs(e *etw.DDEventRecord) (*cleanupArgs, error) {
 	ca := &cleanupArgs{
 		DDEventHeader: e.EventHeader,
@@ -457,15 +454,6 @@ func (wp *WindowsProbe) parseCloseArgs(e *etw.DDEventRecord) (*closeArgs, error)
 	return (*closeArgs)(ca), nil
 }
 
-// nolint: unused
-func (wp *WindowsProbe) parseFlushArgs(e *etw.DDEventRecord) (*flushArgs, error) {
-	ca, err := wp.parseCleanupArgs(e)
-	if err != nil {
-		return nil, err
-	}
-	return (*flushArgs)(ca), nil
-}
-
 // nolint: unused
 func (ca *cleanupArgs) string(t string) string {
 	var output strings.Builder
@@ -488,11 +476,6 @@ func (ca *closeArgs) String() string {
 	return (*cleanupArgs)(ca).string("CLOSE")
 }
 
-// nolint: unused
-func (fa *flushArgs) String() string {
-	return (*cleanupArgs)(fa).string("FLUSH")
-}
-
 type readArgs struct {
 	etw.DDEventHeader
 	ByteOffset   uint64
diff --git a/pkg/security/probe/probe_windows.go b/pkg/security/probe/probe_windows.go
index e08624206c56b..cfe16dea465e2 100644
--- a/pkg/security/probe/probe_windows.go
+++ b/pkg/security/probe/probe_windows.go
@@ -472,16 +472,6 @@ func (p *WindowsProbe) setupEtw(ecb etwCallback) error {
 					p.stats.fileProcessedNotifications[e.EventHeader.EventDescriptor.ID]++
 					p.stats.fpnLock.Unlock()
 
-					ecb(ca, e.EventHeader.ProcessID)
-				}
-			case idCleanup:
-				if ca, err := p.parseCleanupArgs(e); err == nil {
-					log.Tracef("Received cleanup event %d %s\n", e.EventHeader.EventDescriptor.ID, ca)
-
-					p.stats.fpnLock.Lock()
-					p.stats.fileProcessedNotifications[e.EventHeader.EventDescriptor.ID]++
-					p.stats.fpnLock.Unlock()
-
 					ecb(ca, e.EventHeader.ProcessID)
 				}
 			case idClose:
@@ -497,15 +487,6 @@ func (p *WindowsProbe) setupEtw(ecb etwCallback) error {
 					p.discardedFileHandles.Remove(ca.fileObject)
 					p.filePathResolver.Remove(ca.fileObject)
 				}
-			case idFlush:
-				if fa, err := p.parseFlushArgs(e); err == nil {
-
-					p.stats.fpnLock.Lock()
-					p.stats.fileProcessedNotifications[e.EventHeader.EventDescriptor.ID]++
-					p.stats.fpnLock.Unlock()
-
-					ecb(fa, e.EventHeader.ProcessID)
-				}
 
 			case idWrite:
 				if p.isWriteEnabled {