Also in the Windows Application log I see this ```Log Name A osquery #general

Also in the Windows Application log I see this: `...

Mystery Incorporated

10/30/2020, 5:21 AM

Also in the Windows Application log I see this:

Copy code

Log Name:      Application
Source:        Application Error
Date:          10/30/2020 4:12:00 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      <http://Management-PC.marvinaad.onmicrosoft.com|Management-PC.marvinaad.onmicrosoft.com>
Description:
Faulting application name: osqueryd.exe, version: 4.5.1.0, time stamp: 0x5f7bef01
Faulting module name: osqueryd.exe, version: 4.5.1.0, time stamp: 0x5f7bef01
Exception code: 0xc0000409
Fault offset: 0x0000000000916d81
Faulting process id: 0x23a0
Faulting application start time: 0x01d6ae7b2f362581
Faulting application path: C:\Program Files\osquery\osqueryd\osqueryd.exe
Faulting module path: C:\Program Files\osquery\osqueryd\osqueryd.exe
Report Id: 46f7b45a-d21b-4091-b534-312a950ce777
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="<http://schemas.microsoft.com/win/2004/08/events/event>">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2020-10-30T05:12:00.3439656Z" />
    <EventRecordID>10029</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer><http://Management-PC.marvinaad.onmicrosoft.com|Management-PC.marvinaad.onmicrosoft.com></Computer>
    <Security />
  </System>
  <EventData>
    <Data>osqueryd.exe</Data>
    <Data>4.5.1.0</Data>
    <Data>5f7bef01</Data>
    <Data>osqueryd.exe</Data>
    <Data>4.5.1.0</Data>
    <Data>5f7bef01</Data>
    <Data>c0000409</Data>
    <Data>0000000000916d81</Data>
    <Data>23a0</Data>
    <Data>01d6ae7b2f362581</Data>
    <Data>C:\Program Files\osquery\osqueryd\osqueryd.exe</Data>
    <Data>C:\Program Files\osquery\osqueryd\osqueryd.exe</Data>
    <Data>46f7b45a-d21b-4091-b534-312a950ce777</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

2 Views

Open in Slack

Previous Next