Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Crypto-RSAEnh

Event ID 12

Message:

%{Status}

 Process: 	%{ProcessName}
 Provider Type: 	%{ProviderType}
 Container Name: 	%{ContainerName}
 Machine Keyset: 	%{MachineKeyset}
 Error code: 	%{AppContainer}

Event Data:

# Name In Type
Out Type
1 ProcessName win:UnicodeString xs:string
2 ProviderType win:UInt32 xs:unsignedInt
3 ContainerName win:AnsiString xs:string
4 MachineKeyset win:Boolean xs:boolean
5 AppContainer win:Boolean xs:boolean
6 Status win:UInt32 xs:unsignedInt
7 ErrorDescription win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: JEZVCSMHBZCDQ