| Event Id | 1002 |
| Source | FCSAM |
| Description | A Microsoft Forefront Client Security scan has been stopped before being completed. |
| Event Information | Cause : This event is logged when a Microsoft Forefront Client Security scan has been stopped before being completed. This is likely due to a user canceling an in-progress scan. This audit record includes the scan ID, type of scan (Antivirus, Antispyware, Antimalware), scan parameters, user that started the scan, and the amount of time the scan took to complete. This event occurs when a user-initiated or scheduled scan is terminated before it completes. Resolution : Restart the scan when possible. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.