Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Crypto-RSAEnh

Event ID 4

Message:

%{ErrorDescription}

 Process: 	%{ProcessName}
 User Storage Area: 	%{UserStoragePath}
 New file name: 	%{FileName}
 Error code: 	%{Status}%

Event Data:

# Name In Type
Out Type
1 ProcessName win:UnicodeString xs:string
2 UserStoragePath win:UnicodeString xs:string
3 FileName win:UnicodeString xs:string
4 Status win:UInt32 xs:unsignedInt
5 ErrorDescription win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: WNFUYABPAOV6U