Event ID - 4

Event Id4
SourceIISCTLS
DescriptionIIS kill command received from user <domain\username>. The logged data is the status code.
Event InformationThe specified user terminated IIS. The status code may give additional information.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.