| Event Id | 5005 |
| Source | FCSAM |
| Description | The Microsoft Forefront Client Security Real-Time Protection checkpoint configuration has changed. |
| Event Information | Cause : This event is logged when the Microsoft Forefront Client Security Real-Time Protection checkpoint configuration has changed. This audit log includes the checkpoint and configuration element that have changed. This event commonly occurs after an administrator makes configuration changes. Resolution : Verify that the configuration change was applied intentionally. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.