Sat 01 Nov 06:16:35 2025 - System logs ok
No entries in eventlog_Application
No entries in eventlog_System
No entries in eventlog_Security
No entries in EventlogSummary
Full log eventlog_Application
Full log eventlog_System
Full log eventlog_Security
Information - 11/01/2025 06:16:17 - [5156] - Microsoft-Windows-Security-Auditing - The Windows Filtering Platform has permitted a connection.
Application Information:
Process ID: 7020
Application Name: \device\harddiskvolume4\program files\microsoft\exchange server\v15\bin\msexchangefrontendtransport.exe
Network Information:
Direction: Inbound
Source Address: 10.124.129.17
Source Port: 34980
Destination Address: 10.124.129.7
Destination Port: 25
Protocol: 6
Interface Index: 11
Filter Information:
Filter Origin: Unknown
Filter Run-Time ID: 183928
Layer Name: Receive/Accept
Layer Run-Time ID: 44
Remote User ID: S-1-0-0
Remote Machine ID: S-1-0-0
Information - 11/01/2025 06:16:17 - [5156] - Microsoft-Windows-Security-Auditing - The Windows Filtering Platform has permitted a connection.
Application Information:
Process ID: 6956
Application Name: \device\harddiskvolume4\program files\microsoft\exchange server\v15\frontend\popimap\microsoft.exchange.pop3service.exe
Network Information:
Direction: Inbound
Source Address: 10.124.129.17
Source Port: 34614
Destination Address: 10.124.129.7
Destination Port: 995
Protocol: 6
Interface Index: 11
Filter Information:
Filter Origin: Unknown
Filter Run-Time ID: 183928
Layer Name: Receive/Accept
Layer Run-Time ID: 44
Remote User ID: S-1-0-0
Remote Machine ID: S-1-0-0
Full log EventlogSummary
LogMode MaximumSizeInBytes RecordCount LogName
------- ------------------ ----------- -------
Circular 163840000 207863 Security
Circular 133103616 454923 System
Circular 133103616 319572 Application
|