Event ID 602
Scheduled Task createdScheduled Task created:
File Name: %1
Command: %2
Triggers: %3
Time: %4 %5
Flags: %6
Target User: %7
By:
User: %8
Domain: %9
Logon ID: %10Ok
Hello
Goodbye
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Detailed Tracking"
Audit Category:
Detailed TrackingLEFT/RIGHT arrow keys for navigation
Back to List