Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 386

Message:

Successfully got attestation statement for Microsoft Passport key. Key name: %{KeyName}, KeyStatus: %{KeyStatus} (%{KeyStatusSymbolicName}). 

Event Data:

# Name In Type
Out Type
1 KeyName win:UnicodeString xs:string
2 KeyStatus win:Int32 xs:int
3 KeyStatusSymbolicName win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: LF7DVBRSHZGRW