Event ID - 3408

Event Id3408
SourceEventTracker
DescriptionScheduled Policy Comparison Result for Policy=Sample Critical File Policy.
File Modified : <file>
File details stored in POLICY:-
Size : <size>
Version : <version>
Created : <created time>
CheckSum : <checksum>
ACTUAL File details:-
Actual Size : <actual size>
Actual Version : <actual version>
Actual Created : <actual created time>
Actual CheckSum : <actual checksum>
Event InformationCause :

If Change Audit detects any file changes (Addition, modification and deletion) after comparing a configuration policy with the system it generates this event for each file change detected.

Resolution :

Take appropriate action for the detected change.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.