UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 515 - A trusted logon process has registered with the Local Security Authority / 515 as noise? / Latest PostsInstantForum.NET v4.1.4UltimateWindowsSecurity.com Forumhttp://forum.ultimatewindowssecurity.com/noreply@ultimatewindowssecurity.comThu, 17 May 2012 08:38:32 GMT20RE: 515 as noise?http://forum.ultimatewindowssecurity.com/Topic420-16-1.aspxThe only way this would be valuable to monitor is if you baselined all of the trusted logon processes reported by this event on a clean computer over a few days time. Then alert when a new logon process shows up. Very unlikely you will get such an alert but would indicate a significant new piece of software had been installed or you were victim of a extremely sophisticated attackSat, 28 Aug 2010 16:44:21 GMTRandyFranklinSmith515 as noise?http://forum.ultimatewindowssecurity.com/Topic420-16-1.aspxRandy,<br><br>Can the 515 event be considered noise and ignored, or can something be had out of collecting and processing these events?<br><br>Thx,<br>JeffFri, 30 Jul 2010 10:28:30 GMTjwalzer