detection.wiki

Microsoft-Windows-Bits-CompactServer

EventTitleChannelSampleRule
10BITS Compact Server successfully created the following URL group: {name}.OperationalNN
11BITS Compact Server encountered error {hr} when it tried to create the following …OperationalNN
20BITS Compact Server successfully deleted the following URL group: {name}.OperationalNN
21BITS Compact Server encountered error {hr} when it tried to delete the following …OperationalNN
30BITS Compact Server successfully added the {suffix} URL; which points to the …OperationalNN
31BITS Compact Server encountered error {hr} when it tried to add the {suffix} URL …OperationalNN
32BITS Compact Server successfully deleted the following URL from the {urlgroup} …OperationalNN
33BITS Compact Server encountered error {hr} when it tried to delete the {suffix} …OperationalNN
50BITS Compact Server cannot process the request for the following URL in the …AnalyticNN
51BITS Compact Server cannot process the request for the following URL: {url}.AnalyticNN
60Authentication is not enabled for the following URL group: {name}.OperationalNN
61NTLM authentication is enabled for the following URL group: {name}.OperationalNN
62Authentication is enabled for the following URL group: {name}.OperationalNN
63BITS Compact Server encountered the error {hr} when it tried to enable …OperationalNN
300The BITSCompactServer service shut down successfully; but it was delayed for …OperationalNN
301The BITSCompactServer service has detected an exception.OperationalNN

Event ID 10: BITS Compact Server successfully created the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
name

Event ID 11: BITS Compact Server encountered error {hr} when it tried to create the following URL group:{name}.

#
Channel
Operational

Fields #

NameDescription
hr
name

Event ID 20: BITS Compact Server successfully deleted the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
name

Event ID 21: BITS Compact Server encountered error {hr} when it tried to delete the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
hr
name

Event ID 30: BITS Compact Server successfully added the {suffix} URL; which points to the {filepath} file.

#
Channel
Operational

Description

BITS Compact Server successfully added the {suffix} URL; which points to the {filepath} file.This URL is in the following URL group: {urlgroup}.The permissions on the URL are set to {sddl}.

Message #

BITS Compact Server successfully added the {suffix} URL; which points to the {filepath} file.This URL is in the following URL group: {urlgroup}.The permissions on the URL are set to {sddl}.

Fields #

NameDescription
suffix
filepath
urlgroup
sddl

Event ID 31: BITS Compact Server encountered error {hr} when it tried to add the {suffix} URL to the following URL group: {urlgroup}.

#
Channel
Operational

Fields #

NameDescription
hr
suffix
urlgroup

Event ID 32: BITS Compact Server successfully deleted the following URL from the {urlgroup} URL group: {suffix}.

#
Channel
Operational

Fields #

NameDescription
urlgroup
suffix

Event ID 33: BITS Compact Server encountered error {hr} when it tried to delete the {suffix} URL from the following URL group: {urlgroup}.

#
Channel
Operational

Fields #

NameDescription
hr
suffix
urlgroup

Event ID 50: BITS Compact Server cannot process the request for the following URL in the {urlgroup} URL group: {urlsuffix}.

#
Channel
Analytic

Description

BITS Compact Server cannot process the request for the following URL in the {urlgroup} URL group: {urlsuffix}. The request failed in step {ErrorCause} with the following error: {hr}.

Message #

BITS Compact Server cannot process the request for the following URL in the {urlgroup} URL group: {urlsuffix}. The request failed in step {ErrorCause} with the following error: {hr}.

Fields #

NameDescription
urlgroup
urlsuffix
ErrorCause
hr

Event ID 51: BITS Compact Server cannot process the request for the following URL: {url}.

#
Channel
Analytic

Description

BITS Compact Server cannot process the request for the following URL: {url}. The request failed with a status of {hr}.

Message #

BITS Compact Server cannot process the request for the following URL: {url}. The request failed with a status of {hr}.

Fields #

NameDescription
url
hr

Event ID 60: Authentication is not enabled for the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
name

Event ID 61: NTLM authentication is enabled for the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
name

Event ID 62: Authentication is enabled for the following URL group: {name}.

#
Channel
Operational

Message #

Authentication is enabled for the following URL group: {name}.Negotiate authentication is set to {NegotiateAuthSchemeEnabled}. NTLM authentication is set to {NtlmAuthSchemeEnabled}. The certificate authentication flag is set to {CertificateAuthSchemeEnabled}.

Fields #

NameDescription
name
NegotiateAuthSchemeEnabled
NtlmAuthSchemeEnabled
CertificateAuthSchemeEnabled

Event ID 63: BITS Compact Server encountered the error {hr} when it tried to enable authentication for the following URL group: {name}.

#
Channel
Operational

Fields #

NameDescription
hr
name

Event ID 300: The BITSCompactServer service shut down successfully; but it was delayed for {number} seconds.

#
Channel
Operational

Description

The BITSCompactServer service shut down successfully; but it was delayed for {number} seconds. This might cause delays when you turn off your computer.

Message #

The BITSCompactServer service shut down successfully; but it was delayed for {number} seconds.  This might cause delays when you turn off your computer.

Fields #

NameDescription
number

Event ID 301: The BITSCompactServer service has detected an exception.

#
Channel
Operational

Description

The BITSCompactServer service has detected an exception. Error code: {hr}.

Message #

The BITSCompactServer service has detected an exception. Error code: {hr}.

Fields #

NameDescription
hr