Event ID - 1172

Event Id1172
SourceActive Directory
DescriptionA client process connected to the directory with remote procedure call (RPC) string binding %1.
Event InformationA client process used the specified RPC binding to connect to Active Directory. No user action is required.
Reference LinksMonitoring AD Changes: Article

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.