Microsoft-Windows-SmartScreen
4 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 1000 | Application SmartScreen Event | Debug |
| 1001 | Uri SmartScreen Event | Debug |
| 1002 | User Decision SmartScreen Event | Debug |
| 1003 | Telemetry SmartScreen Event | Debug |
Event ID 1000 — Application SmartScreen Event
Message
Fields
| Name | Description |
|---|---|
FilePath | — |
FullFileHash | — |
AuthenticodeHash | — |
AuthenticodeAlgorithm | — |
MarkOfTheWeb | — |
CallingProcessId | — |
CallingProcessCreationTime | — |
Sid | — |
ActivityId | — |
Enforcement | — |
Experience | — |
Event ID 1001 — Uri SmartScreen Event
Message
Fields
| Name | Description |
|---|---|
Uri | — |
IP | — |
ReferrerUri | — |
ReferrerIP | — |
Recommendation | — |
HitType | — |
NavigationType | — |
ProductType | — |
CallingProcessId | — |
CallingProcessCreationTime | — |
Sid | — |
ActivityId | — |
Enforcement | — |
Experience | — |
Event ID 1002 — User Decision SmartScreen Event
Message
Fields
| Name | Description |
|---|---|
Action | — |
ActivitiyId | — |
Event ID 1003 — Telemetry SmartScreen Event
Message
Fields
| Name | Description |
|---|---|
Data | — |