| Event Id | 3001 |
| Source | FCSAM |
| Description | Microsoft Forefront Client Security Real-Time Protection agents have stopped. |
| Event Information | Cause : This event is logged when Microsoft Forefront Client Security Real-Time Protection agents have stopped. This audit record includes the user that caused the agents to stop. This event occurs when someone stops the Real-Time Protection agents. Resolution : Verify that the Real-Time Protection agents have been intentionally stopped. Restart Microsoft Forefront Client Security Real-Time Protection to turn the agents on again. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.