Event ID 1211 — WNP Transport Layer initial server connection initiated to server HostName on port Port for the ConnectionType.
Description
WNP Transport Layer initial server connection initiated to server HostName on port Port for the ConnectionType.
Message #
Fields #
| Name | Description |
|---|---|
ConnectionType UInt32 | — |
HostName AnsiString | — |
Port UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-PushNotifications-Platform",
"guid": "88CD9180-4491-4640-B571-E3BEE2527943",
"event_source_name": "",
"event_id": 1211,
"version": 0,
"level": 4,
"task": 9,
"opcode": 1,
"keywords": 9223372036859068416,
"time_created": "2023-11-05T22:36:06.672509+00:00",
"event_record_id": 2544,
"correlation": {},
"execution": {
"process_id": 3380,
"thread_id": 4140
},
"channel": "Microsoft-Windows-PushNotification-Platform/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ConnectionType": 1,
"HostName": "client.wns.windows.com",
"Port": 443
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline