detection.wiki
Blog

SNMP

2 events across 1 channel

Event IDTitleChannel
1001System
1500System

Event ID 1001 —

Provider
SNMP
Channel
System
Level
4
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: SNMP
  guid: ''
  event_source_name: ''
  event_id: 1001
  version: 0
  level: 4
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2022-04-04T13:11:30.489218+00:00'
  event_record_id: 1625
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: System
  computer: WIN-TKC15D7KHUR
  security:
    user_id: ''
event_data:
  Data_0: ''
  Binary: ''
message: ''

References

Event ID 1500 —

Provider
SNMP
Channel
System
Level
2
Samples
1

Fields

NameDescription
Data_0—
Binary—

Example Event

system:
  provider: SNMP
  guid: ''
  event_source_name: ''
  event_id: 1500
  version: 0
  level: 2
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2022-04-04T13:11:19.159401+00:00'
  event_record_id: 1603
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: System
  computer: WIN-TKC15D7KHUR
  security:
    user_id: ''
event_data:
  Data_0: SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration
  Binary: '02000000'
message: ''

References