detection.wiki
Blog

smtpsvc

2 events across 1 channel

Event IDTitleChannel
2001System
4005System

Event ID 2001 —

Provider
smtpsvc
Channel
System
Level
4
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: smtpsvc
  guid: ''
  event_source_name: ''
  event_id: 2001
  version: 0
  level: 4
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2022-04-04T11:13:26.139485+00:00'
  event_record_id: 1282
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: System
  computer: WIN-TKC15D7KHUR
  security:
    user_id: ''
event_data:
  Data_0: '1'
  Binary: ''
message: ''

References

Event ID 4005 —

Provider
smtpsvc
Channel
System
Level
4
Samples
1

Fields

NameDescription
Data_0—
Data_1—
Data_2—
Binary—

Example Event

system:
  provider: smtpsvc
  guid: ''
  event_source_name: ''
  event_id: 4005
  version: 0
  level: 4
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2022-04-04T11:13:26.155145+00:00'
  event_record_id: 1283
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: System
  computer: WIN-TKC15D7KHUR
  security:
    user_id: ''
event_data:
  Data_0: '0'
  Data_1: '0'
  Data_2: '0'
  Binary: ''
message: ''

References