System32
Sysmon
Events
Compliance
Validator
TLS/SSL
GeoIP
Tools
EventSentry Events
Source
EventSentry
(4)
Category
Scheduled Tasks
(4)
Tags
AppLocker
All AppLocker events
EventSentry
All EventSentry events
Security
All Windows Security events
Sysmon
All Sysmon events
ID
Event Message
12400
The Scheduled Tasks monitoring engine has been initialized. %1 cached tasks have been found, %2 tasks are currently configured on this system.
12410
A new scheduled task has been added: Name: %1 Enabled: %2 User: %3 State: %4 Triggers: %5 Actions: %6 How do I configure this feature? https://www.eventsentry.com/kb/361
12411
A scheduled task has been removed: Name: %1 Enabled: %2 User: %3 State: %4 Triggers: %5 Actions: %6 How do I configure this feature? https://www.eventsentry.com/kb/361
12412
A scheduled task has been changed: Name: %1 Field Changed: %2 New Value: %3 Old Value: %4 How do I configure this feature? https://www.eventsentry.com/kb/361