Microsoft-Windows-EDP-Audit-TCB

1 events across 1 channel

Event ID	Title	Channel
101	Enterprise PreviousEnterpriseId tag has been removed (Policy) from the file: …	Admin

Event ID 101 — Enterprise PreviousEnterpriseId tag has been removed (Policy) from the file: FilePath.

Enterprise PreviousEnterpriseId tag has been removed (Policy) from the file: FilePath.

Enterprise %4 tag has been removed (%2) from the file: %5

Name	Description
`UserId` SID	—
`Policy` UnicodeString	—
`Justification` UnicodeString	—
`PreviousEnterpriseId` UnicodeString	—
`FilePath` UnicodeString	—