Elastic Windows Event Explorer


Publisher - Microsoft-Windows-propsys

Event ID 1005

Message:

Omitted invalid property from schema '%{SchemaId}': '%{PropertyCanonicalName}' (fmtid='%{PropertyFmtid}' pid='%{PropertyPid}')  Publisher: '%{PropertyPublisher}'  Product: '%{PropertyProduct}'  URL: '%{PropertySourceUrl}'

Event Data:

# Name In Type
Out Type
1 SchemaId win:UnicodeString xs:string
2 PropertyCanonicalName win:UnicodeString xs:string
3 PropertyFmtid win:UnicodeString xs:string
4 PropertyPid win:UnicodeString xs:string
5 PropertyPublisher win:UnicodeString xs:string
6 PropertyProduct win:UnicodeString xs:string
7 PropertySourceUrl win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: O2PIX6UDSWZZW