Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Search-ProfileNotify

Event ID 5

Message:

Windows Search Service has created default configuration for new user '%{User}' .

Event Data:

# Name In Type
Out Type
1 User win:UnicodeString xs:string
2 __binLength win:UInt32 xs:unsignedInt
3 binary win:Binary xs:hexBinary

Observed Windows Versions:

Version: 0

Fingerprint: 2EFWTPJ7ILYTU