Event ID: 12600

EventSentry detected changes in a protected area of a hard drive, the new contents are embedded as binary data. If this change is unexpected, then the original data (MBR) can be downloaded from the EventSentry Web Reports (Inventory -> Host) and subsequently restored with boot media.

 Drive: \\.\PhysicalDrive%1
 Sectors Monitored: %2 - %3 (MBR)
 Bytes Changed: %4