Elastic Windows Event Explorer


Publisher - Microsoft-Windows-RestartManager

Event ID 10004

Message:

Registering %{nFiles} file(s), %{nRegProcs} process(es), %{nRegServices} service(s).

Event Data:

# Name In Type
Out Type
1 RmSessionId win:UInt32 xs:unsignedInt
2 nFiles win:UInt32 xs:unsignedInt
3 nRegProcs win:UInt32 xs:unsignedInt
4 nRegServices win:UInt32 xs:unsignedInt
5 Files win:UnicodeString xs:string
6 RegProcs win:UnicodeString xs:string
7 RegServices win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: FC6ETYSMQVQRU