Forum

Ultimate Windows Security Forum » Security Log » 4609 - Windows is shutting down » Map of Task IDs to Windows Event IDs

Map of Task IDs to Windows Event IDs Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
cmarshall18
Posted 7/21/2020 8:08:59 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 7/21/2020 10:43:25 AM
Posts: 1, Visits: 1
I am trying to populate a spreadsheet for Windows Event IDs with the following information:

• Log Name (e.g. Security)
• Task Category (e.g. Security State Change)
• Keywords (e.g. Audit Success)
• Task ID (e.g. 12288) - should be a 5-digit number (the most important information for this task)

For the Windows Event IDs listed below:

4609
4612
4649
4675
4698
4699
4727
4728
4729
4730
4737
4754
4755
4756
4757
4758

For example:

Windows Event ID: 4608
Log Name: Security
Task Category: Security State Change
Keywords: Audit Success
Task ID: 12288

Can anyone help please?
Post #8648
bjvista
Posted 8/5/2020 12:17:45 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Administrators
Last Login: 4/13/2009 5:07:47 PM
Posts: 22, Visits: 0
Hi,

We have event samples in our Security Log Encyclopedia where you can collect that data. Otherwise you will have to search your security log for the events and collect the data and build the spreadsheet.
Post #8649
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:37am