Microsoft-Windows-SUA-Psxrun

Event	Title	Channel	Sample	Rule
1073743854	It required {param1} tries to connect to subsystem.	Operational	N	N
2147485686	posix: unknown flag {param1}.	Operational	N	N
2147485689	Could not create unique shared resource name; too many collisions {param1}.	Operational	N	N
3221227474	psxrun: unknown flag {param1}.	Operational	N	N
3221227481	Unable to start process {param1}.	Operational	N	N
3221227483	Cannot connect to the tty session.	Operational	N	N
3221227485	There was an error connecting to the subsystem.	Operational	N	N
3221227486	WclCall: lpc failure: {param1}.	Operational	N	N
3221227487	WclCall: unexpected MSG_TYPE {param1}.	Operational	N	N
3221227488	GetUid failed: error {param1}.	Operational	N	N
3221227489	GetPwUid({param1}) failed: error {param2}.	Operational	N	N
3221227491	Unusable {param1} path name '{param2}'.	Operational	N	N
3221227494	Unable to find the current working directory for Subsystem for UNIX-based …	Operational	N	N
3221227497	GetFullPathName failed for '{param1}': {param2}.	Operational	N	N
3221227498	Program name {param1} is not an absolute UNIX path name.	Operational	N	N
3221227500	A fatal error occurred in psxrun: {param1}.	Operational	N	N

Event ID 1073743854: It required {param1} tries to connect to subsystem.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 2147485686: posix: unknown flag {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 2147485689: Could not create unique shared resource name; too many collisions {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227474: psxrun: unknown flag {param1}.

Channel: Operational

Description

psxrun: unknown flag {param1}. use -h for full help message.

Message #

psxrun: unknown flag {param1}. use -h for full help message.

Fields #

Name	Description
`param1`

Event ID 3221227481: Unable to start process {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227483: Cannot connect to the tty session.

Channel: Operational

Description

Cannot connect to the tty session. The error status code was {param1}.

Message #

Cannot connect to the tty session.  The error status code was {param1}.

Fields #

Name	Description
`param1`

Event ID 3221227485: There was an error connecting to the subsystem.

Channel: Operational

Description

There was an error connecting to the subsystem. The error status code was {param1} while trying to launch program {param2}.

Message #

There was an error connecting to the subsystem. The error status code was {param1}  while trying to launch program {param2}.

Fields #

Name	Description
`param1`
`param2`

Event ID 3221227486: WclCall: lpc failure: {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227487: WclCall: unexpected MSG_TYPE {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227488: GetUid failed: error {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227489: GetPwUid({param1}) failed: error {param2}.

Channel: Operational

Fields #

Name	Description
`param1`
`param2`

Event ID 3221227491: Unusable {param1} path name '{param2}'.

Channel: Operational

Message #

Unusable  {param1} path name '{param2}'

Fields #

Name	Description
`param1`
`param2`

Event ID 3221227494: Unable to find the current working directory for Subsystem for UNIX-based Applications {param1}.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227497: GetFullPathName failed for '{param1}': {param2}.

Channel: Operational

Fields #

Name	Description
`param1`
`param2`

Event ID 3221227498: Program name {param1} is not an absolute UNIX path name.

Channel: Operational

Fields #

Name	Description
`param1`

Event ID 3221227500: A fatal error occurred in psxrun: {param1}.

Channel: Operational

Fields #

Name	Description
`param1`