Updated metadata

.vscode/settings.json

@@ -0,0 +1,8 @@
+{
+    "markdownlint.config": {
+        "MD028": false,
+        "MD025": {
+            "front_matter_title": ""
+        }
+    }
+}

windows/security/threat-protection/auditing/advanced-security-audit-policy-settings.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Advanced security audit policy settings

windows/security/threat-protection/auditing/advanced-security-auditing-faq.yml

@@ -16,7 +16,7 @@ metadata:
   ms.collection: M365-security-compliance
   ms.topic: conceptual
   ms.date: 09/06/2021
-  ms.technology: mde
+  ms.technology: windows-sec
     
 title: Advanced security auditing FAQ
 

windows/security/threat-protection/auditing/advanced-security-auditing.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/6/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Advanced security audit policies

windows/security/threat-protection/auditing/appendix-a-security-monitoring-recommendations-for-many-audit-events.md

@@ -11,7 +11,7 @@ ms.date: 09/06/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Appendix A: Security monitoring recommendations for many audit events

windows/security/threat-protection/auditing/apply-a-basic-audit-policy-on-a-file-or-folder.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Apply a basic audit policy on a file or folder

windows/security/threat-protection/auditing/audit-account-lockout.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Account Lockout

windows/security/threat-protection/auditing/audit-application-generated.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Application Generated

windows/security/threat-protection/auditing/audit-application-group-management.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Application Group Management

windows/security/threat-protection/auditing/audit-audit-policy-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Audit Policy Change

windows/security/threat-protection/auditing/audit-authentication-policy-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Authentication Policy Change

windows/security/threat-protection/auditing/audit-authorization-policy-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Authorization Policy Change

windows/security/threat-protection/auditing/audit-central-access-policy-staging.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Central Access Policy Staging

windows/security/threat-protection/auditing/audit-certification-services.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Certification Services

windows/security/threat-protection/auditing/audit-computer-account-management.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Computer Account Management

windows/security/threat-protection/auditing/audit-credential-validation.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Credential Validation

windows/security/threat-protection/auditing/audit-detailed-directory-service-replication.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Detailed Directory Service Replication

windows/security/threat-protection/auditing/audit-detailed-file-share.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Detailed File Share

windows/security/threat-protection/auditing/audit-directory-service-access.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Directory Service Access

windows/security/threat-protection/auditing/audit-directory-service-changes.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Directory Service Changes

windows/security/threat-protection/auditing/audit-directory-service-replication.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Directory Service Replication

windows/security/threat-protection/auditing/audit-distribution-group-management.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Distribution Group Management

windows/security/threat-protection/auditing/audit-dpapi-activity.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit DPAPI Activity

windows/security/threat-protection/auditing/audit-file-share.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit File Share

windows/security/threat-protection/auditing/audit-file-system.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit File System

windows/security/threat-protection/auditing/audit-filtering-platform-connection.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Filtering Platform Connection

windows/security/threat-protection/auditing/audit-filtering-platform-packet-drop.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Filtering Platform Packet Drop

windows/security/threat-protection/auditing/audit-filtering-platform-policy-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Filtering Platform Policy Change

windows/security/threat-protection/auditing/audit-group-membership.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Group Membership

windows/security/threat-protection/auditing/audit-handle-manipulation.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Handle Manipulation

windows/security/threat-protection/auditing/audit-ipsec-driver.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit IPsec Driver

windows/security/threat-protection/auditing/audit-ipsec-extended-mode.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit IPsec Extended Mode

windows/security/threat-protection/auditing/audit-ipsec-main-mode.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit IPsec Main Mode

windows/security/threat-protection/auditing/audit-ipsec-quick-mode.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit IPsec Quick Mode

windows/security/threat-protection/auditing/audit-kerberos-authentication-service.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Kerberos Authentication Service

windows/security/threat-protection/auditing/audit-kerberos-service-ticket-operations.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Kerberos Service Ticket Operations

windows/security/threat-protection/auditing/audit-kernel-object.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Kernel Object

windows/security/threat-protection/auditing/audit-logoff.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Logoff

windows/security/threat-protection/auditing/audit-logon.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Logon

windows/security/threat-protection/auditing/audit-mpssvc-rule-level-policy-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit MPSSVC Rule-Level Policy Change

windows/security/threat-protection/auditing/audit-network-policy-server.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Network Policy Server

windows/security/threat-protection/auditing/audit-non-sensitive-privilege-use.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Non-Sensitive Privilege Use

windows/security/threat-protection/auditing/audit-other-account-logon-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Account Logon Events

windows/security/threat-protection/auditing/audit-other-account-management-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Account Management Events

windows/security/threat-protection/auditing/audit-other-logonlogoff-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Logon/Logoff Events

windows/security/threat-protection/auditing/audit-other-object-access-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Object Access Events

windows/security/threat-protection/auditing/audit-other-policy-change-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Policy Change Events

windows/security/threat-protection/auditing/audit-other-privilege-use-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other Privilege Use Events

windows/security/threat-protection/auditing/audit-other-system-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Other System Events

windows/security/threat-protection/auditing/audit-pnp-activity.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit PNP Activity

windows/security/threat-protection/auditing/audit-process-creation.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Process Creation

windows/security/threat-protection/auditing/audit-process-termination.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Process Termination

windows/security/threat-protection/auditing/audit-registry.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Registry

windows/security/threat-protection/auditing/audit-removable-storage.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Removable Storage

windows/security/threat-protection/auditing/audit-rpc-events.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit RPC Events

windows/security/threat-protection/auditing/audit-sam.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit SAM

windows/security/threat-protection/auditing/audit-security-group-management.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Security Group Management

windows/security/threat-protection/auditing/audit-security-state-change.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Security State Change

windows/security/threat-protection/auditing/audit-security-system-extension.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Security System Extension

windows/security/threat-protection/auditing/audit-sensitive-privilege-use.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Sensitive Privilege Use

windows/security/threat-protection/auditing/audit-special-logon.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Special Logon

windows/security/threat-protection/auditing/audit-system-integrity.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit System Integrity

windows/security/threat-protection/auditing/audit-token-right-adjusted.md

@@ -6,7 +6,7 @@ author: dansimp
 ms.author: dansimp
 ms.pagetype: security
 ms.prod: m365-security
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit Token Right Adjusted

windows/security/threat-protection/auditing/audit-user-account-management.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit User Account Management

windows/security/threat-protection/auditing/audit-user-device-claims.md

@@ -12,7 +12,7 @@ ms.sitesec: library
 ms.localizationpriority: none
 author: dansimp
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit User/Device Claims

windows/security/threat-protection/auditing/basic-audit-account-logon-events.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit account logon events

windows/security/threat-protection/auditing/basic-audit-account-management.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit account management

windows/security/threat-protection/auditing/basic-audit-directory-service-access.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit directory service access

windows/security/threat-protection/auditing/basic-audit-logon-events.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit logon events

windows/security/threat-protection/auditing/basic-audit-object-access.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit object access

windows/security/threat-protection/auditing/basic-audit-policy-change.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit policy change

windows/security/threat-protection/auditing/basic-audit-privilege-use.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit privilege use

windows/security/threat-protection/auditing/basic-audit-process-tracking.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit process tracking

windows/security/threat-protection/auditing/basic-audit-system-events.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Audit system events

windows/security/threat-protection/auditing/basic-security-audit-policies.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Basic security audit policies

windows/security/threat-protection/auditing/basic-security-audit-policy-settings.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/06/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Basic security audit policy settings

windows/security/threat-protection/auditing/create-a-basic-audit-policy-settings-for-an-event-category.md

@@ -15,7 +15,7 @@ audience: ITPro
 ms.collection: M365-security-compliance
 ms.topic: conceptual
 ms.date: 09/07/2021
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # Create a basic audit policy for an event category

windows/security/threat-protection/auditing/event-1100.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 1100(S): The event logging service has shut down.

windows/security/threat-protection/auditing/event-1102.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 1102(S): The audit log was cleared.

windows/security/threat-protection/auditing/event-1104.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 1104(S): The security log is now full.

windows/security/threat-protection/auditing/event-1105.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 1105(S): Event log automatic backup

windows/security/threat-protection/auditing/event-1108.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 1108(S): The event logging service encountered an error while processing an incoming event published from %1.

windows/security/threat-protection/auditing/event-4608.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4608(S): Windows is starting up.

windows/security/threat-protection/auditing/event-4610.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4610(S): An authentication package has been loaded by the Local Security Authority.

windows/security/threat-protection/auditing/event-4611.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4611(S): A trusted logon process has been registered with the Local Security Authority.

windows/security/threat-protection/auditing/event-4612.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4612(S): Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits.

windows/security/threat-protection/auditing/event-4614.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4614(S): A notification package has been loaded by the Security Account Manager.

windows/security/threat-protection/auditing/event-4615.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4615(S): Invalid use of LPC port.

windows/security/threat-protection/auditing/event-4616.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4616(S): The system time was changed.

windows/security/threat-protection/auditing/event-4618.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4618(S): A monitored security event pattern has occurred.

windows/security/threat-protection/auditing/event-4621.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4621(S): Administrator recovered system from CrashOnAuditFail.

windows/security/threat-protection/auditing/event-4622.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4622(S): A security package has been loaded by the Local Security Authority.

windows/security/threat-protection/auditing/event-4624.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4624(S): An account was successfully logged on.

windows/security/threat-protection/auditing/event-4625.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4625(F): An account failed to log on.

windows/security/threat-protection/auditing/event-4626.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4626(S): User/Device claims information.

windows/security/threat-protection/auditing/event-4627.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4627(S): Group membership information.

windows/security/threat-protection/auditing/event-4634.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4634(S): An account was logged off.

windows/security/threat-protection/auditing/event-4647.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4647(S): User initiated logoff.

windows/security/threat-protection/auditing/event-4648.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4648(S): A logon was attempted using explicit credentials.

windows/security/threat-protection/auditing/event-4649.md

@@ -11,7 +11,7 @@ ms.date: 09/07/2021
 ms.reviewer: 
 manager: dansimp
 ms.author: dansimp
-ms.technology: mde
+ms.technology: windows-sec
 ---
 
 # 4649(S): A replay attack was detected.