Event ID: 1102The audit log was cleared
The audit log was cleared. Subject: Security ID: %1 Account Name: %2 Domain Name: %3 Logon ID: %4
This event generates every time Windows Security audit log was cleared.
Typically you should not see this event, there is no need to manually clear the Security event log in most cases.
ISO 27001:2013 A.12.4.2
PCI 3.2.1: 10.2.3
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Other System Events"
LEFT/RIGHT arrow keys for navigationBack to List