Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DVD

Event ID 17

Message:

Nav CreateFileStart filename=%{Object}

Event Data:

# Name In Type
Out Type
1 Object win:Pointer win:HexInt64
2 Filename win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: X2HXOBDVXKSWW