## Atmarpc

Seen on:
* Windows 2000

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Atmarpc</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\netevent.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows 2003
* Windows XP 64-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Atmarpc</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\netevent.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\ws03res.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows XP 32-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Atmarpc</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\netevent.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\xpsp2res.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;