Microsoft-Windows-Sudo

2 events across 1 channel

Event ID	Title	Channel
1		Admin
2		Admin

Event ID 1 —

Provider: Microsoft-Windows-Sudo
Channel: Admin

Message

%8

Fields

Name	Description
`Application`	—
`ArgsCount`	—
`Argument`	—
`CurrentWorkingDirectory`	—
`Mode`	—
`InheritEnvironment`	—
`Redirected`	—
`FullCommandline`	—
`RequestID`	—

Event ID 2 —

Provider: Microsoft-Windows-Sudo
Channel: Admin

Message

%8

Fields

Name	Description
`Application`	—
`ArgsCount`	—
`Argument`	—
`CurrentWorkingDirectory`	—
`Mode`	—
`InheritEnvironment`	—
`Redirected`	—
`FullCommandline`	—
`RequestID`	—