From 228379457f489af03b3fa80fd97f44a437a2b231 Mon Sep 17 00:00:00 2001 From: dutch2005 Date: Fri, 4 Jun 2021 15:15:57 +0200 Subject: [PATCH] Update audit-other-privilege-use-events.md Added additional information about event 4985 (S) + link on an other document providing additional information about the subject. --- .../auditing/audit-other-privilege-use-events.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md b/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md index 87c74a4998..9883e2ee86 100644 --- a/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md +++ b/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md @@ -23,6 +23,7 @@ ms.technology: mde This auditing subcategory should not have any events in it, but for some reason Success auditing will enable generation of event 4985(S): The state of a transaction has changed. +This refers to : https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4985 - (4985(S): The state of a transaction has changed. used by the file system transaction manager. | Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments | |-------------------|-----------------|-----------------|------------------|------------------|-----------------------------------------------------------------------|