You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
4 lines
1.7 KiB
4 lines
1.7 KiB
<Events><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Security-Auditing' Guid='{54849625-5478-4994-A5BA-3E3B0328C30D}'/><EventID>4720</EventID><Version>0</Version><Level>0</Level><Task>13824</Task><Opcode>0</Opcode><Keywords>0x8020000000000000</Keywords><TimeCreated SystemTime='2014-08-13T00:42:24.599269400Z'/><EventRecordID>1850</EventRecordID><Correlation/><Execution ProcessID='508' ThreadID='3228'/><Channel>Security</Channel><Computer>WIN-9DV9ENFEJEG</Computer><Security/></System><EventData><Data Name='TargetUserName'>aramani</Data><Data Name='TargetDomainName'>WIN-9DV9ENFEJEG</Data><Data Name='TargetSid'>S-1-5-21-3971707290-3287975982-528657165-1001</Data><Data Name='SubjectUserSid'>S-1-5-21-3971707290-3287975982-528657165-500</Data><Data Name='SubjectUserName'>Administrator</Data><Data Name='SubjectDomainName'>WIN-9DV9ENFEJEG</Data><Data Name='SubjectLogonId'>0x9caebb</Data><Data Name='PrivilegeList'>-</Data><Data Name='SamAccountName'>aramani</Data><Data Name='DisplayName'>%%1793</Data><Data Name='UserPrincipalName'>-</Data><Data Name='HomeDirectory'>%%1793</Data><Data Name='HomePath'>%%1793</Data><Data Name='ScriptPath'>%%1793</Data><Data Name='ProfilePath'>%%1793</Data><Data Name='UserWorkstations'>%%1793</Data><Data Name='PasswordLastSet'>%%1794</Data><Data Name='AccountExpires'>%%1794</Data><Data Name='PrimaryGroupId'>513</Data><Data Name='AllowedToDelegateTo'>-</Data><Data Name='OldUacValue'>0x0</Data><Data Name='NewUacValue'>0x15</Data><Data Name='UserAccountControl'>
|
|
%%2080
|
|
%%2082
|
|
%%2084</Data><Data Name='UserParameters'>%%1793</Data><Data Name='SidHistory'>-</Data><Data Name='LogonHours'>%%1797</Data></EventData></Event></Events> |