| Event Id | 3000 |
| Source | FCSAM |
| Description | Microsoft Forefront Client Security Real-Time Protection agents have started. |
| Event Information | Cause : This event is logged when Microsoft Forefront Client Security Real-Time Protection agents have started. This audit record includes the user that caused the agents to start. This event commonly occurs when Real-Time Protection starts; if Real-Time Protection is configured to automatically start, this is when the computer starts. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.