PAStore Engine Applied Locally Cached Copy Of Active Directory Storage IPsec Policy On The Computer

PAStore Engine applied locally cached copy of Active Directory storage IPsec policy on the computer.

Configuration

query

EventID:5458

config

Key | Value — | — type | aggregation-v1 query | EventID:5458 streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000

SIEM Microsoft Events to Monitor

https://docs.

notes

Last modified October 12, 2020