Windows event logEvent ID 3
6 event logs use this ID, and it means a different thing in each one. Pick the log you have.
Logs with event ID 3
6 channels
- Microsoft-Windows-Sysmon/OperationalNetwork connectionMicrosoft-Windows-Sysmon%4Operational.evtx
- ApplicationMcAfee Endpoint Detection / Trellix Endpoint DetectionApplication.evtx
- Microsoft-Windows-Bits-Client/OperationalBITS service created a new jobMicrosoft-Windows-Bits-Client%4Operational.evtx
- COMODO Client - Security CEFCOMODO Security CEF ClientCOMODO Client - Security CEF.evtx
- CrowdStrike-Falcon Sensor-CSFalconService/OperationalCrowdStrike AlertCrowdStrike-Falcon Sensor-CSFalconService%4Operational.evtx
- Symantec Endpoint Protection ClientScan startedSymantec Endpoint Protection Client.evtx