TransparentInstaller
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Event ID 1 | Unknown | N | N |
| 2 | Event ID 2 | Unknown | N | N |
| 3 | Event ID 3 | Unknown | N | N |
| 4 | Event ID 4 | Unknown | N | N |
| 5 | Event ID 5 | Unknown | N | N |
| 6 | Event ID 6 | Unknown | N | N |
Event ID 1
#Fields #
| Name | Description |
|---|---|
Timestamp100ns Int64 | |
EventPid Int32 | |
EventTid Int32 | |
Payload UnicodeString |
Event ID 2
#Fields #
| Name | Description |
|---|---|
Timestamp100ns Int64 | |
EventPid Int32 | |
EventTid Int32 | |
Payload UnicodeString |
Event ID 3
#Fields #
| Name | Description |
|---|---|
Timestamp100ns Int64 | |
EventPid Int32 | |
EventTid Int32 | |
Payload UnicodeString |
Event ID 4
#Fields #
| Name | Description |
|---|---|
Timestamp100ns Int64 | |
EventPid Int32 | |
EventTid Int32 | |
Payload UnicodeString |