Elastic Windows Event Explorer


Publisher - Microsoft-Windows-NlaSvc

Event ID 4402

Message:

Inserting identified signature for interface %{InterfaceGuid} 
Source=%{SignatureSource} Signature=%{Signature}

Event Data:

# Name In Type
Out Type
1 InterfaceGuid win:GUID xs:GUID
2 SignatureLength win:UInt16 xs:unsignedShort
3 Signature win:Binary xs:hexBinary
4 SignatureSource win:UInt32 xs:unsignedInt

Observed Windows Versions:

Version: 0

Fingerprint: CVJLDBJIZ6EBU