Windows event logEvent ID 100
6 event logs use this ID, and it means a different thing in each one. Pick the log you have.
Logs with event ID 100
6 channels
- ApplicationSession connectedApplication.evtx
- Microsoft-Windows-DeviceSetupManager/AdminMicrosoft-Windows-DeviceSetupManager service startingMicrosoft-Windows-DeviceSetupManager%4Admin.evtx
- Microsoft-Windows-Diagnostics-Performance/OperationalWindows System was startedMicrosoft-Windows-Diagnostics-Performance%4Operational.evtx
- Microsoft-Windows-TaskScheduler/OperationalScheduled Task startedMicrosoft-Windows-TaskScheduler%4Operational.evtx
- CiscoSecureEndpoint/EventsCisco Secure Endpoint DetectionCiscoSecureEndpoint%4Events.evtx
- Symantec Endpoint Protection ClientSymantec Endpoint Protection client is online and able to access the management serverSymantec Endpoint Protection Client.evtx