Microsoft-Windows-Audit

6 events across 1 channel

Event ID	Title	Channel
1001	Audit.	Analytic
1002	Audit.	Analytic
2001	Executing unattend settings pass "Pass".	Analytic
2002	Finished executing unattend pass with status ErrorCode.	Analytic
2003	Failed to execute unattend pass with status ErrorCode.	Analytic
2004	Using unattend file "FilePath" for pass "Pass".	Analytic

Event ID 1001 — Audit.

Audit.exe launched with command line "CommandLine".

Audit.exe launched with command line "%1".

Name	Description
`CommandLine` UnicodeString	—

Audit.exe exiting with status ErrorCode.

Audit.exe exiting with status %1.

Name	Description
`ErrorCode` UInt32	—

Executing unattend settings pass "Pass".

Executing unattend settings pass "%1".

Name	Description
`Pass` UnicodeString	—

Finished executing unattend pass with status ErrorCode.

Finished executing unattend pass with status %1.

Name	Description
`ErrorCode` UInt32	—

Failed to execute unattend pass with status ErrorCode.

Failed to execute unattend pass with status %1.

Name	Description
`ErrorCode` UInt32	—

Using unattend file "FilePath" for pass "Pass".

Using unattend file "%2" for pass "%1".

Name	Description
`Pass` UnicodeString	—
`FilePath` UnicodeString	—