HIDS 59203
From Atomicorp Wiki
{Infobox |header1 = Rule 59203 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit success event }}
Contents |
Description
Windows has successfully audited an event. This is a generic event from Microsoft, and just means that an event was logged by the auditing system.
Troubleshooting
False Positives
There are no false positives with this rule.
Tuning Guidance
There is no guidance for tuning this rule, this is a generic Windows error and the rule should not be disabled.
Additional Information
Similar Rules
None.
Knowledge Base Articles
None.
Outside References
None.
Notes
None.
