Event ID - 5000

Event Id5000
Sourcedatascrn
DescriptionFile Screening - configuration errors (manual intervention is needed)
Event InformationExplanation:
This alert is generated when the minifilter driver detects and automatically deletes an invalid screening configuration record. As a result, the screening configuration might be different than what you expect.

Cause:
This can happen if one or more records in the screening metadata file have been corrupted.

RESOLUTION:
Examine the screening configuration and manually add missing entries or restore screening configuration from backup.
Reference LinksMicrosoft product: Windows Operating System Version: 5.2.3790.1830 Event Source: datascrn Event ID: 5000

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.