| Event Id | 4685 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The state of a transaction has changed. Subject: Security ID: <Security ID> Account Name:<Account Name> Account Domain:<Domain name> Logon ID: <Logon ID> Transaction Information: RM Transaction ID: <RM Transaction ID> New State:<New State> Resource Manager: <New State> Process Information: Process ID:<Process ID> Process Name:<Process Name> |
| Event Information | - |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.