Difference between revisions of "HIDS 59203"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "{Infobox |header1 = Rule 59203 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit success event }} = Description = Windows has successfully aud...")

Revision as of 17:22, 20 October 2020

{Infobox |header1 = Rule 59203 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit success event }}

Contents

Description

Windows has successfully audited an event. This is a generic event from Microsoft, and just means that an event was logged by the auditing system.


Troubleshooting

False Positives

There are no false positives with this rule.

Tuning Guidance

There is no guidance for tuning this rule, this is a generic Windows error and the rule should not be disabled.

Additional Information

Similar Rules

None.

Knowledge Base Articles

None.

Outside References

None.

Notes

None.

Personal tools