Seen on:
- Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)
- Windows 11 (21H2)
- Windows 2008
- Windows 2012
- Windows 7
- Windows 8.0
- Windows 8.1
| Log source(s): | Microsoft-Windows-EFS |
| Log type: | Application |
| Identifier: | {3663a992-84be-40ea-bba9-90c7ed544222} |
| Event message file(s): | %systemroot%\system32\efscore.dll |
Seen on:
- Windows Vista
| Log source(s): | Microsoft-Windows-EFS |
| Identifier: | {3663a992-84be-40ea-bba9-90c7ed544222} |
| Event message file(s): | %systemroot%\system32\feclient.dll |