Detection rules › By eventMicrosoft-Windows-IIS-Configuration event 294 detection rules reference this event. View event page.Sigma (4)ETW Logging/Processing Option Disabled On IIS Server severity medium T1505.004, T1562.002 HTTP Logging Disabled On IIS Server severity high T1505.004, T1562.002 New Module Module Added To IIS Server severity medium T1505.004, T1562.002 Previously Installed IIS Module Was Removed severity low T1505.004, T1562.002