Files
windows-itpro-docs/windows/security/threat-protection/auditing/event-5149.md
get-itips 90972e598f Several metadata changes
added ms.reviewer and manager using ms.date
2019-05-30 10:01:13 -03:00

1.3 KiB

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, ms.localizationpriority, author, ms.date, ms.reviewer, manager, ms.author
title description ms.pagetype ms.prod ms.mktglfcycl ms.sitesec ms.localizationpriority author ms.date ms.reviewer manager ms.author
5149(F) The DoS attack has subsided and normal processing is being resumed. (Windows 10) Describes security event 5149(F) The DoS attack has subsided and normal processing is being resumed. security w10 deploy library none dansimp 05/29/2017 dansimp dansimp

5149(F): The DoS attack has subsided and normal processing is being resumed.

Applies to

  • Windows 10
  • Windows Server 2016

In most circumstances, this event occurs very rarely. It is designed to be generated when an ICMP DoS attack ended.

There is no example of this event in this document.

Subcategory: Audit Other Object Access Events

Event Schema:

The DoS attack has subsided and normal processing is being resumed.

Network Information:

Type:%1

Packets Discarded:%2

Required Server Roles: None.

Minimum OS Version: Windows Server 2008 R2, Windows 7.

Event Versions: 0.

Security Monitoring Recommendations

  • This event can be a sign of ICMP DoS attack or, among other things, hardware or network device related problems. In both cases, we recommend triggering an alert and investigating the reason the event was generated.