Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Search-ProfileNotify

Event ID 1

Message:

Windows Search Service indexed data for user '%{User}' successfully removed in response to user profile deletion.

Event Data:

# Name In Type
Out Type
1 User win:UnicodeString xs:string
2 __binLength win:UInt32 xs:unsignedInt
3 binary win:Binary xs:hexBinary

Observed Windows Versions:

Version: 0

Fingerprint: EIZOOBB24RF2G