HIDS 60608
From Atomicorp Wiki
| Rule 1 | |
|---|---|
| Status | Active |
| Alert Message | Windows error event |
Contents |
Description
This is a summary event from the windows error logs for some other windows application. It frequently collects fault data on windows updates, or other applications into a single event. It is highly useful for identifying problems quickly
What you should do
Inspect this event, as it contains a rollup of multiple related errors from the windows event logging system. For example, failure to complete an update successfully will be captured here.
Troubleshooting
False Positives
There are no false positives with this rule.
Tuning Guidance
There is no guidance for tuning this rule, this is a generic Windows error and the rule should not be disabled.
Additional Information
Support
If you are unsure about how to respond to this alert, please contact Atomicorp support. We're here to help you!
Similar Rules
None.
Knowledge Base Articles
None.
Outside References
None.
