Elastic Windows Event Explorer

Publisher - Microsoft-Windows-Bits-Client

Event ID 3 v3

Message:

The BITS service created a new job.
Transfer job: %{jobTitle}
Job ID: %{jobId}
Owner: %{jobOwner}
Process Path: %{processPath}
Process ID: %{processId}

Event Data:

#	Name	In Type	Out Type
1	jobTitle	win:UnicodeString	xs:string
2	jobId	win:GUID	xs:GUID
3	jobOwner	win:UnicodeString	xs:string
4	processPath	win:UnicodeString	xs:string
5	processId	win:UInt32	xs:unsignedInt
6	ClientProcessStartKey	win:UInt64	xs:unsignedLong

Observed Windows Versions:

Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 3

Fingerprint: IX235VJIGQWGC