Elastic Windows Event Explorer


Publisher - Microsoft-Windows-TimeBroker

Event ID 2 v1

Message:

Event ID %{BrokeredEventId} is set to fire between %{StartTime} and %{EndTime}

Event Data:

# Name In Type
Out Type
1 BrokeredEventId win:GUID xs:GUID
2 StartTime win:FILETIME xs:dateTime
3 EndTime win:FILETIME xs:dateTime

Observed Windows Versions:

Version: 1

Fingerprint: I3CJOL5HCLCKK