Update audit-other-privilege-use-events.md

Added additional information about event 4985 (S) + link on an other document providing additional information about the subject.
This commit is contained in:
dutch2005
2021-06-04 15:15:57 +02:00
committed by GitHub
parent 2f714a60b3
commit 228379457f

View File

@ -23,6 +23,7 @@ ms.technology: mde
This auditing subcategory should not have any events in it, but for some reason Success auditing will enable generation of event 4985(S): The state of a transaction has changed.
This refers to : https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4985 - (4985(S): The state of a transaction has changed. used by the file system transaction manager.
| Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments |
|-------------------|-----------------|-----------------|------------------|------------------|-----------------------------------------------------------------------|