Elastic Windows Event Explorer
Publisher -
Microsoft-Windows-Crypto-DPAPI
Event ID 4098
Message:
DPAPI BackUp service stopped
Event Data:
No parameters.
Observed Windows Versions:
Windows Server 2019 Datacenter Evaluation (17763.1935)
Version: 0
Fingerprint: ZZTN7YJW2CYZK