Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider

Event ID 211

Message:

MDM Session: Timebomb triggered, Last successful server sync time (%{Message1}), LocalTime (%{Message2}), Timebomb (%{HexInt1}) days.

Event Data:

# Name In Type
Out Type
1 Message1 win:UnicodeString xs:string
2 Message2 win:UnicodeString xs:string
3 HexInt1 win:HexInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: LREFH62SCCGM4