Event ID - 3401

Event Id3401
SourceEventTracker
DescriptionFile Modified: <file modified>
Curr Snapshot Time: <Snapshot Time>
Curr Size: <size>
Curr Creation Time: <Creation Time>
Curr Last Write Time: <Last Write Time>
Curr Version: <Version>
Curr Checksum: <Checksum>
Prev Snapshot Time: <Snapshot Time>
Prev Size: <size>
Prev Creation Time: <Creation Time>
Prev Last Write Time: <Last Write Time>
Prev Version:<Version>
Prev Checksum: <Checksum>
Change Type: <change type>
Event InformationCause :

After taking the system snapshot if Change Audit detects that any file is modified then this event is generated.

Resolution :

Check if the changes made to file are intentional and then take appropriate action for the detected change.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.