Elastic Windows Event Explorer

Publisher - Microsoft-Windows-Crypto-RSAEnh

Event ID 15

Message:

Attempting to delete key container info.

 Process: 	%{ProcessName}
 Provider Type: 	%{ProviderType}
 Container Name: 	%{ContainerName}
 Machine Keyset: 	%{MachineKeyset}

Event Data:

#	Name	In Type	Out Type
1	ProcessName	win:UnicodeString	xs:string
2	ProviderType	win:UInt32	xs:unsignedInt
3	ContainerName	win:AnsiString	xs:string
4	MachineKeyset	win:Boolean	xs:boolean
5	AppContainer	win:Boolean	xs:boolean

Observed Windows Versions:

Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 0

Fingerprint: VB2QGMPXSB244