Elastic Windows Event Explorer


Publisher - Microsoft-Windows-PDC

Event ID 4

Message:

Notification client %{Client} (PDC Identifier:%{PdcId}) deregistered with status: %{Status}

Event Data:

# Name In Type
Out Type
1 Client win:Pointer win:HexInt64
2 PdcId win:UInt32 win:HexInt32
3 Status win:UInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: 5BCAR4SNP2BLK