Elastic Windows Event Explorer


Publisher - Microsoft-Windows-NCSI

Event ID 4030

Message:

Suspect state cancelled on interface %{IfLuid} (Family: %{Family})

Event Data:

# Name In Type
Out Type
1 InterfaceGuid win:GUID xs:GUID
2 IfLuid win:UInt64 win:HexInt64
3 Family win:UInt32 xs:unsignedInt

Observed Windows Versions:

Version: 0

Fingerprint: E3YSPCRFKF5UE