Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Bits-Client

Event ID 16384 v1

Message:

The administrator %{User} canceled job "%{Title}" on behalf of %{Owner}.  The job ID was %{Id}.

Event Data:

# Name In Type
Out Type
1 Id win:GUID xs:GUID
2 Title win:UnicodeString xs:string
3 Owner win:UnicodeString xs:string
4 User win:UnicodeString xs:string
5 processId win:UInt32 xs:unsignedInt
6 ClientProcessStartKey win:UInt64 xs:unsignedLong

Observed Windows Versions:

Version: 1

Fingerprint: 2ZT6GFD2FVLE6