提醒:Mapping pre-Vista Security Event IDs to Security Event IDs in Vista+ 2011年04月11日

订阅:yuier
演示:以MSN订阅提醒为例 订阅到哪吒,有更新提醒我
哪吒机器人提醒:
提醒:Windows Security Logging and Other Esoterica
【标题】Mapping pre-Vista Security Event IDs to Security Event IDs in Vista+
【摘要】i've written twice (here and here) about the relationship between the "old" event ids (5xx-6xx) in ws03 and earlier versions of windows, and between the "new" security event ids (4xxx-5xxx) in vista and beyond.in short, eventid(ws03) + 4096 = eventid(ws08) for almost all security events in ws03.the exceptions are the logon events. the logon success events (540, 528) were collapsed into a single event 4624 (=528 + 4096). the logon failure events (529-537, 539) were collapsed into a single event... (04-11 21:09)
收藏 |  评论 |  推荐给好友  | 
本文共有 0 次分享
评论
共有 - 条评论


我要反馈