Missing fields like "Object Type" Expand / Collapse
Author
Message
Posted 1/27/2016 12:10:37 AM
Expert from Quest Software

Expert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest Software

Group: Forum Members
Last Login: 2/11/2012 12:15:37 AM
Posts: 18, Visits: 8
Randy - I was just working with this event tonight and found your example description is missing key fields - maybe Microsoft upgraded this event and we never caught it?

I show this in the description:
------------------------------------------------------------------------
A network share object was accessed.

Subject:
Security ID: PANEM\sCrane
Account Name: sCrane
Account Domain: PANEM
Logon ID: 0xe56a444

Network Information:
Object Type: File
Source Address: 10.1.146.193
Source Port: 56547

Share Information:
Share Name: \\*\LaunchCodes
Share Path: \??\D:uclear\LaunchCodes

Access Request Information:
Access Mask: 0x1
Accesses: ReadData (or ListDirectory)
------------------------------------------------------------------------
Want to update your sample?
Post #5158
Posted 2/12/2016 12:52:14 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
Hi Braino, what Win version is logging this?
Post #5167
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:00pm