WinSecWiki > Security Settings > Local Policies > Audit Policy > System Events > System Integrity

System Integrity

This category logs at least 3 events that could impact the over all integrity of the system. As will all subcategories you must use auditpol to enable or disable it.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event IDTitle
5038 Code integrity determined that the image hash of a file is not valid.
5056 A cryptographic self test was performed.
5061 Cryptographic operation.

Back to top

 

Upcoming Webinars
Additional Resources