| Event Id | 4905 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | An attempt was made to unregister a security event source. Subject : Security ID: <Security ID> Account Name: <Account Name> |
| Event Information | Cause : Windows logs this event, when an application calls AuthzUnregisterSecurityEventSource and thus provides an audit trail of applications that report custom security events. It is normal to see this event logged for several built-in components of Windows including IIS and DFS-R. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.