Elastic Windows Event Explorer


Publisher - Microsoft-Windows-CodeIntegrity

Event ID 3061

Message:

Code Integrity found a file hash for the file %{FileNameBuffer} in a catalog %{CatalogNameBuffer}.

Event Data:

# Name In Type
Out Type
1 FileNameLength win:UInt16 xs:unsignedShort
2 FileNameBuffer win:UnicodeString xs:string
3 CatalogNameLength win:UInt16 xs:unsignedShort
4 CatalogNameBuffer win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: QHGOK6DW6ZR74