Windows Security Log Event ID 6281

6281: Code Integrity determined that the page hashes of an image file are not valid...

On this page

• Description of this event
• Field level details
• Examples

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

This event is new to Windows 2008 Release 2 and Windows 7. It does not appear in earlier versions of Windows.

Free Security Log Resources by Randy

• Free Security Log Quick Reference Chart
• Windows Event Collection: Supercharger Free Edtion
• Free Active Directory Change Auditing Solution
• Free Course: Security Log Secrets

Description Fields in 6281

File Name: %1

Supercharger Free Edition

 

 

Upcoming Webinars Identifying the Tier 0 Assets in Your Active Directory Environment is Step #1 in ITDR

Additional Resources

•	Event IDs
•	All Event IDs
•	Audit Policy