Elastic Windows Event Explorer


Publisher - Microsoft-Windows-HttpService

Event ID 93

Message:

Inbound connection for IP: %{IpAddress}, SNI: %{SniHostname}. SSL endpoint found: %{MatchingEndpointName}

Event Data:

# Name In Type
Out Type
1 EndpointConfigObj win:Pointer win:HexInt64
2 IpAddrLength win:UInt32 xs:unsignedInt
3 IpAddress win:Binary win:SocketAddress
4 SniHostname win:UnicodeString xs:string
5 MatchingEndpointName win:UnicodeString xs:string
6 AutoGeneratedEndpoint win:Boolean xs:boolean

Observed Windows Versions:

Version: 0

Fingerprint: 3TIWPMF5PFLB4