Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 300

Message:

The Microsoft Passport key was successfully registered with Azure AD. 
Key ID: %{KeyId} 
UPN: %{UPN} 
Attestation: %{Attestation} 
Client request ID: %{ClientRequestId} 
Server request ID: %{ServerRequestId} 
Server response: %{ServerResponse}

Event Data:

# Name In Type
Out Type
1 KeyId win:GUID xs:GUID
2 UPN win:UnicodeString xs:string
3 Attestation win:UnicodeString xs:string
4 ClientRequestId win:UnicodeString xs:string
5 ServerRequestId win:UnicodeString xs:string
6 ServerResponse win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: PBVV54MZ2TCBO