detection.wiki
Blog

DbxSvc

3 events across 1 channel

Event IDTitleChannel
258Application
320Application
336Application

Event ID 258 —

Provider
DbxSvc
Channel
Application
Level
4
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: DbxSvc
  guid: ''
  event_source_name: ''
  event_id: 258
  version: 0
  level: 4
  task: 2
  opcode: 0
  keywords: 36028797018963968
  time_created: '2023-11-05T23:48:54.288356+00:00'
  event_record_id: 1804
  correlation: {}
  execution:
    process_id: 5232
    thread_id: 0
  channel: Application
  computer: WinDev2310Eval
  security:
    user_id: ''
event_data:
  Data_0: ''
  Binary: ''
message: ''

References

Event ID 320 —

Provider
DbxSvc
Channel
Application
Level
4
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: DbxSvc
  guid: ''
  event_source_name: ''
  event_id: 320
  version: 0
  level: 4
  task: 3
  opcode: 0
  keywords: 36028797018963968
  time_created: '2023-11-05T23:49:24.798935+00:00'
  event_record_id: 1805
  correlation: {}
  execution:
    process_id: 5232
    thread_id: 0
  channel: Application
  computer: WinDev2310Eval
  security:
    user_id: ''
event_data:
  Data_0: '(-2147024894) The system cannot find the file specified. '
  Binary: ''
message: ''

References

Event ID 336 —

Provider
DbxSvc
Channel
Application
Level
4
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: DbxSvc
  guid: ''
  event_source_name: ''
  event_id: 336
  version: 0
  level: 4
  task: 1
  opcode: 0
  keywords: 36028797018963968
  time_created: '2023-11-05T23:48:54.274194+00:00'
  event_record_id: 1802
  correlation: {}
  execution:
    process_id: 5232
    thread_id: 0
  channel: Application
  computer: WinDev2310Eval
  security:
    user_id: ''
event_data:
  Data_0: 1.0.24.0
  Binary: ''
message: ''

References