detection.wiki

Microsoft-Windows-Security-ExchangeActiveSyncProvisioning

4 events across 2 channels

Event IDTitleChannel
1Registered EAS supporting Windows Encryption Provider - (DllPath).Operational
2UnRegistered EAS supporting Windows Encryption Provider - (DllPath).Operational
100CheckCompliance beginPerformance
101CheckCompliance end.Performance

Event ID 1 — Registered EAS supporting Windows Encryption Provider - (DllPath).

Provider
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
Channel
Operational
Task
EAS_REGPROV

Description

Registered EAS supporting Windows Encryption Provider - (DllPath).

Message #

Registered EAS supporting Windows Encryption Provider - (%1)

Fields #

NameDescription
DllPath UnicodeString—

Event ID 2 — UnRegistered EAS supporting Windows Encryption Provider - (DllPath).

Provider
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
Channel
Operational
Task
EAS_REGPROV

Description

UnRegistered EAS supporting Windows Encryption Provider - (DllPath).

Message #

UnRegistered EAS supporting Windows Encryption Provider - (%1)

Fields #

NameDescription
DllPath UnicodeString—

Event ID 100 — CheckCompliance begin

Provider
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
Channel
Performance
Task
ExchangeActiveSyncProvisioningPerformance
Opcode
Start

Description

CheckCompliance begin.

Message #

CheckCompliance begin

Event ID 101 — CheckCompliance end.

Provider
Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
Channel
Performance
Task
ExchangeActiveSyncProvisioningPerformance
Opcode
Stop

Description

CheckCompliance end.

Message #

CheckCompliance end:

    elapse: %1 milliseconds

Fields #

NameDescription
elapse UInt32[CheckCompliance end] elapse.
TimeSpent UInt32—