Elastic Windows Event Explorer


Publisher - Microsoft-Windows-AAD

Event ID 1120

Message:

Enterprise STS Refresh token is expired. Correlation ID: %{value}

Event Data:

# Name In Type
Out Type
1 value win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: ASDN3P5BPQYYY