Status

Component

System Audit

Windows event ID

235

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

236

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

213

Kaspersky Security Center event ID

000000d5

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

217

Kaspersky Security Center event ID

000000d9

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

220

Kaspersky Security Center event ID

000000dc

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

218

Kaspersky Security Center event ID

000000da

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

221

Kaspersky Security Center event ID

000000dd

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

223

Kaspersky Security Center event ID

000000df

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

227

Kaspersky Security Center event ID

000000e3

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

238

Kaspersky Security Center event ID

000000ee

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

239

Kaspersky Security Center event ID

000000ef

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

335

Kaspersky Security Center event ID

0000014f

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

2000

Kaspersky Security Center event ID

000007d0

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

System Audit

Windows event ID

2020

Kaspersky Security Center event ID

000007e4

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

2022

Kaspersky Security Center event ID

000007e6

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

2024

Kaspersky Security Center event ID

000007e8

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

345

Kaspersky Security Center event ID

00000159

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

347

Kaspersky Security Center event ID

0000015b

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

File Threat Protection

Mail Threat Protection

Behavior Detection

Host Intrusion Prevention

Sandbox

Malware Scan

Windows event ID

308

Kaspersky Security Center event ID

00000134

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

File Threat Protection

Host Intrusion Prevention

Malware Scan

Windows event ID

327

Kaspersky Security Center event ID

00000147

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

File Threat Protection

Web Threat Protection

Mail Threat Protection

AMSI Protection

Host Intrusion Prevention

Malware Scan

Windows event ID

322

Kaspersky Security Center event ID

GNRL_EV_PASSWD_ARCHIVE_FOUND

Event parameters

• GNRL_EA_PARAM_2 is the name of the object.
• GNRL_EA_PARAM_3 is the creation date of the object (optional).
• GNRL_EA_PARAM_7 is the name of the session user.
• GNRL_EA_PARAM_9 is additional information about the detected object:

  Application component (engine).

  1 – File Threat Protection.

  2 – Mail Threat Protection.

  3 – Web Threat Protection.

  6 – Host Intrusion Prevention.

  7 – Firewall.

  8 – Behavior Detection.

  9 – Exploit Prevention.

  10 – Virus Scan task.

  11 – AMSI Protection.

  Threat detection technology (method).

  1 – Machine learning.

  2 – Kaspersky Security Network.

  3 – Expert analysis.

  4 – Behavior analysis.

  5 – Automatic analysis.

  6 – Kaspersky Sandbox.

  Threat detected by Private KSN (denylist): true or false.

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

File Threat Protection

Web Threat Protection

Mail Threat Protection

AMSI Protection

Host Intrusion Prevention

Malware Scan

Windows event ID

332

Kaspersky Security Center event ID

0000014c

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

File Threat Protection

Web Threat Protection

Mail Threat Protection

AMSI Protection

Host Intrusion Prevention

Malware Scan

Windows event ID

340

Kaspersky Security Center event ID

00000154

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Mail Threat Protection

Exploit Prevention

Behavior Detection

Malware Scan

Windows event ID

329

Kaspersky Security Center event ID

00000149

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Host Intrusion Prevention

File Threat Protection

Web Threat Protection

Mail Threat Protection

Malware Scan

Windows event ID

301

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Host Intrusion Prevention

File Threat Protection

AMSI Protection

Malware Scan

Windows event ID

315

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Host Intrusion Prevention

File Threat Protection

Web Threat Protection

Mail Threat Protection

AMSI Protection

Malware Scan

Windows event ID

318

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Host Intrusion Prevention

File Threat Protection

Web Threat Protection

Mail Threat Protection

AMSI Protection

Malware Scan

Windows event ID

319

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Web Threat Protection

Windows event ID

361

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Application Control

Windows event ID

701

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1001

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1002

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Web Threat Protection

Windows event ID

370

Kaspersky Security Center event ID

00000172

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Host Intrusion Prevention

Windows event ID

401

Kaspersky Security Center event ID

00000191

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Host Intrusion Prevention

Windows event ID

402

Kaspersky Security Center event ID

00000192

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Host Intrusion Prevention

Windows event ID

403

Kaspersky Security Center event ID

00000193

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Behavior Detection

Exploit Prevention

Host Intrusion Prevention

Windows event ID

457

Kaspersky Security Center event ID

000001c9

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Behavior Detection

Exploit Prevention

Windows event ID

458

Kaspersky Security Center event ID

000001ca

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Behavior Detection

Exploit Prevention

Windows event ID

459

Kaspersky Security Center event ID

000001cb

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Adaptive Anomaly Control

Windows event ID

2201

Kaspersky Security Center event ID

GNRL_EV_ADSEC_DETECT

Event parameters

• GNRL_EA_PARAM_1 is the name of the Adaptive Anomaly Control rule.
• GNRL_EA_PARAM_2 is the ID of the heuristic rule.
• GNRL_EA_PARAM_3 is the name of the session user.
• GNRL_EA_PARAM_4 is the source process.
• GNRL_EA_PARAM_5 is the source object.
• GNRL_EA_PARAM_6 is the target process.
• GNRL_EA_PARAM_7 is the target object.
• GNRL_EA_PARAM_8 is additional information about the detected object:

  Hashes of source process / object and target process / object.

  Process blocked (verdict_type): true or false.

  User security ID (SID).

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

BadUSB Attack Prevention

Windows event ID

2050

Kaspersky Security Center event ID

00000802

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Firewall

Windows event ID

601

Kaspersky Security Center event ID

00000259

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Application Control

Windows event ID

703

Kaspersky Security Center event ID

GNRL_EV_APP_LAUNCH_TESTED_DENIED

Event parameters

• GNRL_EA_PARAM_2 is the name of the session user.
• GNRL_EA_PARAM_3 is the manually created category identifier.
• GNRL_EA_PARAM_4 is the account security identifier (SID).
• GNRL_EA_PARAM_5 is information about the digital signature of the application.
• GNRL_EA_PARAM_6 is the name of the executable file of the application (for example, chrome.exe).
• GNRL_EA_PARAM_7 is the path to the executable file.
• GNRL_EA_PARAM_8 is the hash of the object (SHA256).
• GNRL_EA_PARAM_9 is the version of the application that the user is trying to run.

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Application Control

Windows event ID

704

Kaspersky Security Center event ID

GNRL_EV_APP_LAUNCH_TESTED_ALLOW

Event parameters

• GNRL_EA_PARAM_2 is the name of the session user.
• GNRL_EA_PARAM_3 is the manually created category identifier.
• GNRL_EA_PARAM_4 is the account security identifier (SID).
• GNRL_EA_PARAM_5 is information about the digital signature of the application.

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Web Control

Windows event ID

751

Kaspersky Security Center event ID

000002f4

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Device Control

Windows event ID

801

Kaspersky Security Center event ID

00000321

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Device Control

Windows event ID

808

Kaspersky Security Center event ID

GNRL_EV_USB_FILE_OPERATION

Event parameters

• GNRL_EA_PARAM_1 is the file operation (write or delete).
• GNRL_EA_PARAM_2 is the path to the file.
• GNRL_EA_PARAM_3 is the name of the device.
• GNRL_EA_PARAM_4 is the name of the session user.
• GNRL_EA_PARAM_5 is the Hardware ID (HWID).

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1020

Kaspersky Security Center event ID

000003fc

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1022

Kaspersky Security Center event ID

000003fe

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1003

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1004

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1005

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1006

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1007

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1008

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1009

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1010

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

1013

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

2150

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

2151

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

2152

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

2154

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Update

Windows event ID

2155

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

901

Kaspersky Security Center event ID

00000385

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

902

Kaspersky Security Center event ID

00000386

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

905

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

910

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

911

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

913

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

950

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

952

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1301

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1302

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1304

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1307

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1308

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1309

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1310

Kaspersky Security Center event ID

0000051e

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1330

Kaspersky Security Center event ID

00000532

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1331

Kaspersky Security Center event ID

00000533

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1332

Kaspersky Security Center event ID

00000534

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1333

Kaspersky Security Center event ID

00000535

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1334

Kaspersky Security Center event ID

00000536

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1335

Kaspersky Security Center event ID

00000537

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1336

Kaspersky Security Center event ID

00000538

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1337

Kaspersky Security Center event ID

00000539

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1338

Kaspersky Security Center event ID

0000053a

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1339

Kaspersky Security Center event ID

0000053b

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Data Encryption

Windows event ID

1341

Kaspersky Security Center event ID

0000053d

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

1343

Kaspersky Security Center event ID

0000053f

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

1346

Kaspersky Security Center event ID

00000542

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

1370

Kaspersky Security Center event ID

0000055a

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

1371

Kaspersky Security Center event ID

0000055b

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Data Encryption

Windows event ID

1372

Kaspersky Security Center event ID

0000055c

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Endpoint Sensor

Windows event ID

2103

Kaspersky Security Center event ID

00000837

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Endpoint Sensor

Windows event ID

2101

Kaspersky Security Center event ID

00000835

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Endpoint Sensor

Windows event ID

2102

Kaspersky Security Center event ID

00000836

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Endpoint Sensor

Windows event ID

2104

Kaspersky Security Center event ID

00000838

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Wipe Data

Windows event ID

2251

Kaspersky Security Center event ID

000008cb

Windows event log (default)

–

Kaspersky Security Center event log (default)

–

Status

Component

Endpoint Detection and Response (KATA)

Windows event ID

2853

Kaspersky Security Center event ID

00000b25

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Wipe Data

Windows event ID

2253

Kaspersky Security Center event ID

000008cd

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Sandbox

Windows event ID

2602

Kaspersky Security Center event ID

00000a2a

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Sandbox

Windows event ID

2604

Kaspersky Security Center event ID

00000a2c

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Endpoint Detection and Response

Windows event ID

2652

Kaspersky Security Center event ID

00000a5c

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Endpoint Detection and Response

Windows event ID

2653

Kaspersky Security Center event ID

00000a5d

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Endpoint Detection and Response

Windows event ID

2555

Kaspersky Security Center event ID

000009fb

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Endpoint Detection and Response

Windows event ID

2557

Kaspersky Security Center event ID

000009fd

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

1402

Kaspersky Security Center event ID

0000057a

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Sandbox

Windows event ID

2606

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Sandbox

Windows event ID

2609

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Sandbox

Windows event ID

2610

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Sandbox

Windows event ID

2616

Kaspersky Security Center event ID

–

Windows event log (default)

Kaspersky Security Center event log (default)

–

Status

Component

Administration Server connection protection

Windows event ID

3300

Kaspersky Security Center event ID

00000ce4

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Administration Server connection protection

Windows event ID

3302

Kaspersky Security Center event ID

00000ce6

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Administration Server connection protection

Windows event ID

3303

Kaspersky Security Center event ID

00000ce7

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Sandbox

Windows event ID

2619

Kaspersky Security Center event ID

GNRL_EV_APP_INCIDENT_OCCURED

Event parameters

• GNRL_EA_PARAM_1 are the parameters of the Sandbox components.
• GNRL_EA_PARAM_2 is the path to the object.
• GNRL_EA_PARAM_3 is the incident ID.
• GNRL_EA_PARAM_4 is the hash of the object (SHA256).

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Sandbox

Windows event ID

2622

Kaspersky Security Center event ID

00000a3e

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Device Control

Windows event ID

805

Kaspersky Security Center event ID

GNRL_EV_DEVCTRL_DEV_PLUGGED

Event parameters

• GNRL_EA_PARAM_1 is the Hardware ID (HWID).
• GNRL_EA_PARAM_2 is the name of the session user.

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Device Control

Windows event ID

806

Kaspersky Security Center event ID

GNRL_EV_DEVCTRL_DEV_UNPLUGGED

Event parameters

• GNRL_EA_PARAM_1 is the Hardware ID (HWID).
• GNRL_EA_PARAM_2 is the name of the session user.

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

246

Kaspersky Security Center event ID

000000f6

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Endpoint Detection and Response (KATA)

Windows event ID

2853

Kaspersky Security Center event ID

00000b25

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Cloud Discovery

Windows event ID

2210

Kaspersky Security Center event ID

000008a2

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Audit

Windows event ID

2211

Kaspersky Security Center event ID

000008a3

Windows event log (default)

Kaspersky Security Center event log (default)

Status

Component

Cloud Discovery

Windows event ID

2211

Kaspersky Security Center event ID

000008a3

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

/ /

Component

System Integrity Monitoring

Windows event ID

2950

Kaspersky Security Center event ID

00000b86

Windows event log (default)

–

Kaspersky Security Center event log (default)

To configure the retention period for this event, go to the Event configuration section of the policy and set the retention period for the general System Integrity Monitoring event – File or folder change was detected.

Status

/ /

Component

System Integrity Monitoring

Windows event ID

2955

Kaspersky Security Center event ID

00000b8b

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

/ /

Component

System Integrity Monitoring

Windows event ID

2956

Kaspersky Security Center event ID

00000b8c

Windows event log (default)

–

Kaspersky Security Center event log (default)

To configure the retention period for this event, go to the Event configuration section of the policy and set the retention period for the general System Integrity Monitoring event – File or folder change was detected.

Status

/ /

Component

System Integrity Monitoring

Windows event ID

2951

Kaspersky Security Center event ID

00000b87

Windows event log (default)

–

Kaspersky Security Center event log (default)

To configure the retention period for this event, go to the Event configuration section of the policy and set the retention period for the general System Integrity Monitoring event – File or folder change was detected.

Status

/ /

Component

System Integrity Monitoring

Windows event ID

2952

Kaspersky Security Center event ID

00000b88

Windows event log (default)

–

Kaspersky Security Center event log (default)

To configure the retention period for this event, go to the Event configuration section of the policy and set the retention period for the general System Integrity Monitoring event – File or folder change was detected.

Status

Component

System Integrity Monitoring

Windows event ID

2957

Kaspersky Security Center event ID

00000b8d

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Integrity Monitoring

Windows event ID

2958

Kaspersky Security Center event ID

00000b8e

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

System Integrity Monitoring

Windows event ID

2962

Kaspersky Security Center event ID

00000b92

Windows event log (default)

–

Kaspersky Security Center event log (default)

To configure the retention period for this event, go to the Event configuration section of the policy and set the retention period for the general System Integrity Monitoring event – File or folder change was detected.

Status

Component

Light Agent

Windows event ID

3152

Kaspersky Security Center event ID

00000c50

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Light Agent

Windows event ID

3105

Kaspersky Security Center event ID

00000c21

Windows event log (default)

–

Kaspersky Security Center event log (default)

Status

Component

Light Agent

Windows event ID

3104

Kaspersky Security Center event ID

00000c20

Windows event log (default)

–

Kaspersky Security Center event log (default)