detection.wiki

Microsoft-Windows-IIS-IISManager

1 events across 1 channel

EventTitleChannelSample
13Event ID 13ApplicationY

Event ID 13

#
Provider
Microsoft-Windows-IIS-IISManager
Channel
Application
Level
2

Fields #

NameDescription
Data_0
Binary

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-IIS-IISManager",
    "guid": "",
    "event_source_name": "",
    "event_id": 13,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2026-05-09 09:49:32.372137+00:00",
    "event_record_id": 7746,
    "correlation": {
      "ActivityID": "",
      "RelatedActivityID": ""
    },
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "tel2-DC01-2022.ludus.domain",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Data_0": "<string>IISMANAGER_CRASH\n\nIIS Manager terminated unexpectedly.\n\nException:System.ArgumentOutOfRangeException: Value '0' is not a valid value for Interval. Interval must be greater than 0.\nParameter name: Interval\n   at System.Windows.Forms.Timer.set_Interval(Int32 value)\n   at Microsoft.Web.Management.Host.UserInterface.HierarchyPanel.HierarchyTreeView..ctor()\n   at Microsoft.Web.Management.Host.UserInterface.HierarchyPanel.InitializeComponent()\n   at Microsoft.Web.Management.Host.UserInterface.ManagementFrame..ctor(IServiceProvider serviceProvider, IManagementFrameHost owner)\n   at Microsoft.Web.Management.Host.Shell.ShellMainForm..ctor(IServiceProvider serviceProvider, ShellComponents shellComponents)\n   at Microsoft.Web.Management.Host.Shell.ShellApplication.Initialize(Boolean localDevelopmentMode, Boolean resetPreferences)\n   at Microsoft.Web.Management.Host.Shell.ShellApplication.Execute(Boolean localDevelopmentMode, Boolean resetPreferences, Boolean resetPreferencesNoLaunch)\n\nProcess:InetMgr</string>\n",
    "Binary": ""
  },
  "message": ""
}