| Event Id | 3400 |
| Source | EventTracker |
| Description | File Added: < File Name > Curr Snapshot Time: < Latest snapshot time > Curr Size: < File size > Curr Creation Time: < File Creation Time > Curr Version: < File version > Curr Checksum: - < File checksum > Prev Snapshot Time: < Previous snapshot time > Change Type: < Change Type > Example: File Added: C:\WINDOWS\SoftwareDistribution\Download\7bd4006d940ee5f6671dbea016001f74\update\updspapi.dll Curr Snapshot Time: 4/30/2010 2:00:19 AM Curr Size: 379184 (Bytes) Curr Creation Time: 4/29/2010 6:16:25 PM Curr Version: 6.3.4.1 Curr Checksum: - Prev Snapshot Time: 4/29/2010 2:02:23 AM Change Type: Unauthorized |
| Event Information | Cause : After taking the system snapshot if Change Audit detects that any new file is added then this event is generated. Resolution : Take appropriate action for the detected change. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.