Microsoft-Windows-Security-Configuration-Wizard

Event	Title	Channel	Sample	Rule
100	Preprocessing started service scan.	Diagnostic	N	N
300	Configuration succeeded.	Operational	N	N
301	Configuration failed.	Operational	N	N
302	Rollback succeeded.	Operational	N	N
303	Rollback failed.	Operational	N	N
304	Rollback generation succeeded.	Operational	N	N
305	Rollback generation failed.	Operational	N	N
310	The machine is not in compliance with the analyzed SCW policy.	Operational	N	N
311	An SCW analysis operation was performed; but a specific SCW analysis extension …	Operational	N	N

Event ID 100: Preprocessing started service scan.

Channel: Diagnostic

Event ID 300: Configuration succeeded.

Channel: Operational

Description

Configuration succeeded.For further information see {LogFilePath}.

Message #

Configuration succeeded.For further information see {LogFilePath}.

Fields #

Name	Description
`LogFilePath`

Event ID 301: Configuration failed.

Channel: Operational

Description

Configuration failed.For further information see {LogFilePath}.

Message #

Configuration failed.For further information see {LogFilePath}.

Fields #

Name	Description
`LogFilePath`

Event ID 302: Rollback succeeded.

Channel: Operational

Description

Rollback succeeded.For further information see {LogFilePath}.

Message #

Rollback succeeded.For further information see {LogFilePath}.

Fields #

Name	Description
`LogFilePath`

Event ID 303: Rollback failed.

Channel: Operational

Description

Rollback failed.For further information see {LogFilePath}.

Message #

Rollback failed.For further information see {LogFilePath}.

Fields #

Name	Description
`LogFilePath`

Event ID 304: Rollback generation succeeded.

Channel: Operational

Description

Rollback generation succeeded.The generated rollback file is {RollbackFilePath}. For further information see {LogFilePath}.

Message #

Rollback generation succeeded.The generated rollback file is {RollbackFilePath}. For further information see {LogFilePath}.

Fields #

Name	Description
`RollbackFilePath`
`LogFilePath`

Event ID 305: Rollback generation failed.

Channel: Operational

Description

Rollback generation failed.For further information see {LogFilePath}.

Message #

Rollback generation failed.For further information see {LogFilePath}.

Fields #

Name	Description
`LogFilePath`

Event ID 310: The machine is not in compliance with the analyzed SCW policy.

Channel: Operational

Description

The machine is not in compliance with the analyzed SCW policy. Machine Name: {MachineName} Analysis Extension: {AnalysisExtension}.

Message #

The machine is not in compliance with the analyzed SCW policy. Machine Name: {MachineName} Analysis Extension: {AnalysisExtension}

Fields #

Name	Description
`MachineName`
`AnalysisExtension`

Event ID 311: An SCW analysis operation was performed; but a specific SCW analysis extension failed to complete successfully.

Channel: Operational

Description

An SCW analysis operation was performed; but a specific SCW analysis extension failed to complete successfully. Machine Name: {MachineName} Analysis Extension: {AnalysisExtension}.

Message #

An SCW analysis operation was performed; but a specific SCW analysis extension failed to complete successfully. Machine Name: {MachineName} Analysis Extension: {AnalysisExtension}

Fields #

Name	Description
`MachineName`
`AnalysisExtension`