mirror of
https://github.com/Yamato-Security/WELA.git
synced 2026-10-04 13:34:46 +02:00
16 lines
926 B
XML
16 lines
926 B
XML
<Subscription xmlns="http://schemas.microsoft.com/2006/03/windows/events/subscription">
|
|
<SubscriptionId>WELA Native Security Example</SubscriptionId>
|
|
<SubscriptionType>SourceInitiated</SubscriptionType>
|
|
<Description>Operator-selected native account-lockout example; audit policy and event generation are separate prerequisites.</Description>
|
|
<Enabled>true</Enabled>
|
|
<Uri>http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog</Uri>
|
|
<ConfigurationMode>MinLatency</ConfigurationMode>
|
|
<Query><![CDATA[<QueryList><Query Id="0" Path="Security"><Select Path="Security">*[System[(EventID=4740)]]</Select></Query></QueryList>]]></Query>
|
|
<ReadExistingEvents>false</ReadExistingEvents>
|
|
<TransportName>HTTP</TransportName>
|
|
<ContentFormat>RenderedText</ContentFormat>
|
|
<Locale Language="en-US"/>
|
|
<LogFile>ForwardedEvents</LogFile>
|
|
<AllowedSourceDomainComputers></AllowedSourceDomainComputers>
|
|
</Subscription>
|