2010-12-30
11:54 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Windows Event IDs
Does anyone know of a good site that explains Windows event IDs as defined by RSA Envision? I'm trying to correlate some "cissesrv" messages to some known message IDs and not having much success. I've tried EventID.net and UltimateWindowsSecurity.com, but they don't correlate all that well to the Envision format.
Thanks-
4 Replies
2011-01-06
01:39 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx
In Content 2.0 the EventID is called ReferenceID...but they correlate to Ultimate Windows Security...ReferenceID/EventID 528 will be the 528 on the website.
2011-01-17
02:41 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Thanks, but they don't seem to list them all there.
2011-02-22
12:02 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Can you post an example of the messages?
2011-03-07
02:40 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
