| Event Id | 4906 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The CrashOnAuditFail value has changed. New Value of CrashOnAuditFail: 1 |
| Event Information | Cause : This event is logged when you change the value of the security option "Audit: Shut down system immediately if unable to log security audits" which can be used to make the system crash with blue screen if the security log fills and configured to not overwrite or autobackup. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.