| Event Id | 1352 |
| Source | Active Directory |
| Description | DirRemove called by %1 to delete object %2. |
| Event Information | The specified caller type called the DirRemove function to delete the object. This information is usually used for information tracing. No user action is required. |
| Reference Links | Monitoring AD Changes: Article |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.