Windows event logEvent ID 1000
3 event logs use this ID, and it means a different thing in each one. Pick the log you have.
Logs with event ID 1000
3 channels
- ApplicationApplication ErrorApplication.evtx
- Splashtop-Splashtop Streamer-Remote Session/OperationalSplashtop session connectedSplashtop-Splashtop Streamer-Remote Session%4Operational.evtx
- Microsoft-Windows-Windows Defender/OperationalAn antimalware scan startedMicrosoft-Windows-Windows Defender%4Operational.evtx