Microsoft-Windows-Kernel-Registry
Seen on:
Windows 2008
Windows 7
Windows 8.0
Windows Vista
Log source(s): | Microsoft-Windows-Kernel-Registry |
Identifier: | {70eb4f03-c1de-4f73-a051-33d13d5413bd} |
Event message file(s): | %systemroot%\system32\advapi32.dll |
Seen on:
Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)
Windows 11 (21H2)
Windows 2012
Windows 8.1
Log source(s): | Microsoft-Windows-Kernel-Registry |
Identifier: | {70eb4f03-c1de-4f73-a051-33d13d5413bd} |
Event message file(s): | %systemroot%\system32\microsoft-windows-system-events.dll |