WinSecWiki > Security Settings > Local Policies > Audit Policy > System Events > System Integrity

System Integrity

This category logs at least 3 events that could impact the over all integrity of the system. As will all subcategories you must use auditpol to enable or disable it.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
5038	Code integrity determined that the image hash of a file is not valid.
5056	A cryptographic self test was performed.
5061	Cryptographic operation.

Back to top

 

Upcoming Webinars File Security in Microsoft 365: Under Teams, OneDrive for Business, Microsoft 365 Groups it’s SharePoint Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps

Additional Resources