| Event Id | 8196 |
| Source | System Restore |
| Description | System Restore has been enabled (Process = Restore Operation; Volume = [C:\]). |
| Event Information | Cause: This event is generated when the system restore operation has been enabled . Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.