none
EVENTDATA ist das normal ?? RRS feed

  • Frage

  • + System

    - Provider
      [ Name] Microsoft-Windows-Security-Auditing
      [ Guid] {54849625-5478-4994-A5BA-3E3B0328C30D}  

    EventID 4624

    Version 1

    Level 0

    Task 12544

    Opcode 0

    Keywords 0x8020000000000000

    - TimeCreated
      [ SystemTime] 2015-02-04T16:27:53.023935600Z

    EventRecordID 825

    Correlation

    - Execution
      [ ProcessID] 628
      [ ThreadID] 92  

    Channel Security

    Computer web

    Security

    - EventData

    SubjectUserSid S-1-5-18

    SubjectUserName WEB$

    SubjectDomainName WORKGROUP

    SubjectLogonId 0x3e7

    TargetUserSid S-1-5-21-855010896-1834798504-2655946011-1001

    TargetUserName j

    TargetDomainName web

    TargetLogonId 0x199eb5

    LogonType 2

    LogonProcessName User32 

    AuthenticationPackageName Negotiate

    WorkstationName WEB

    LogonGuid {00000000-0000-0000-0000-000000000000}

    TransmittedServices -

    LmPackageName -

    KeyLength 0

    ProcessId 0xfe4

    ProcessName C:\Windows\System32\winlogon.exe

    IpAddress 127.0.0.1

    IpPort 0

    ImpersonationLevel %%1833

    Mittwoch, 4. Februar 2015 18:50