Elastic Windows Event Explorer

Publisher - Schannel

Event ID 36888


A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal alert code is %{AlertDesc}.

   Target name: %{TargetName}

The TLS alert registry can be found at http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-6

Event Data:

# Name In Type
Out Type
1 AlertDesc win:UInt32 xs:unsignedInt
2 ErrorState win:UInt32 xs:unsignedInt
3 TargetName win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 7S67RVF3PO7LW