nsacyber/Event-Forwarding-Guidance

Event with ID = 7045 from System log has incorrect source

vburov opened this issue · 0 comments

Event with ID = 7045 from System log has incorrect source in section "Software and Service Installation" of "Recommended Events to Collect" document.
Correct source for this event is "Service Control Manager":

  • Provider
    [ Name] Service Control Manager
    [ Guid] {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName] Service Control Manager
  • EventID 7045
    Also, I create pull request #12 to modify "RecommendedEvents.json" file