Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 329

Message:

Preparing to send a request to the Web Account Manager silently (no UI mode). 
Account provider ID: %{AccountProvider} 
Scope: %{Scope} 
Client ID: %{Client} 
Authority: %{Authority} 
Resource: %{Resource} 
CorrelationId: %{CorrelationId}

Event Data:

# Name In Type
Out Type
1 AccountProvider win:UnicodeString xs:string
2 Scope win:UnicodeString xs:string
3 Client win:UnicodeString xs:string
4 Authority win:UnicodeString xs:string
5 Resource win:UnicodeString xs:string
6 CorrelationId win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 3GPXECLYNZFWI