Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 348

Message:

The Microsoft Passport delete key registration request was successfully sent. User email: %{Email}. Tenant ID: %{TenantId}. Auth token: %{AuthToken}.

Event Data:

# Name In Type
Out Type
1 Email win:UnicodeString xs:string
2 TenantId win:UnicodeString xs:string
3 AuthToken win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 6IOO5BYMHLREW