Elastic Windows Event Explorer


Publisher - Microsoft-Windows-NCSI

Event ID 4029

Message:

Entered suspect state on interface %{IfLuid} (Family: %{Family} Reason: %{SuspectStateReason})

Event Data:

# Name In Type
Out Type
1 InterfaceGuid win:GUID xs:GUID
2 IfLuid win:UInt64 win:HexInt64
3 Family win:UInt32 xs:unsignedInt
4 SuspectStateReason win:UInt8 xs:unsignedByte

Observed Windows Versions:

Version: 0

Fingerprint: OEM3XOGAJJZDM