Elastic Windows Event Explorer


Publisher - Microsoft-Windows-WinRM

Event ID 2048

Message:

[Filename:- %{param1}; Line:- %{param2}; Function:- %{param3};] %{param4}

Event Data:

# Name In Type
Out Type
1 param1 win:UnicodeString xs:string
2 param2 win:UInt32 xs:unsignedInt
3 param3 win:UnicodeString xs:string
4 param4 win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: QWS2FP67XGUC6