Application Popup

1 events across 1 channel

Event IDTitleChannel
26Application popup: %1 : %2.System

Event ID 26 — Application popup: %1 : %2.

Provider
Application Popup
Channel
System
Level
4
Samples
1

Message

Application popup: %1 : %2

Fields

NameDescription
CaptionApplication popup.
Message

Example Event

system:
  provider: Application Popup
  guid: 47BFA2B7-BD54-4FAC-B70B-29021084CA8F
  event_source_name: ''
  event_id: 26
  version: 0
  level: 4
  task: 0
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-11-05T22:30:59.302635+00:00'
  event_record_id: 1847
  correlation: {}
  execution:
    process_id: 656
    thread_id: 1476
  channel: System
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  Caption: VMware Tools Setup
  Message: Setup needs to reboot the system in order to complete the install. Do you
    want to reboot now? The system will be rebooted shortly unless you cancel the
    reboot by answering 'No'.
message: ''

Sigma Rules

References