C
CLAIR10
I have multiple Microsoft Windows Server 2022 servers that are having some log discrepancy. There are instances where the eventIDs are wrong, an example is 4768 which should be "A Kerberos authentication ticket (TGT) was requested" is coming in as many different events including "An account was logged off" which should be 4634. There have been a total of 33 different message descriptions like those above, coming in under 4678. The actual 4678 events that are correct are coming in as "Failure Audit" or "FAILED" even though the error code is 0x0 which should indicat
Continue reading...
Continue reading...