Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Remotefs-Rdbss

Event ID 30302

Message:

Delay close: Fcb %{Fcb} SrvOpen %{SrvOpen} Fobx %{Fobx}

Event Data:

# Name In Type
Out Type
1 Fcb win:Pointer win:HexInt64
2 SrvOpen win:Pointer win:HexInt64
3 Fobx win:Pointer win:HexInt64

Observed Windows Versions:

Version: 0

Fingerprint: XW7F4VD33AST4