DFIRHub

Windows event log ยท Kaspersky Security3203 Threat detected / Threat detected (Real-time file protection)

  • Third party
  • 2 fields
  • Kaspersky Security.evtx
  • OnDemandScanReal-Time File Protection

Threat detected

Provider OnDemandScan

  • PayloadData1%DetectionInformation%
    • %DetectionInformation% = /Event/EventData/Data

Threat detected (Real-time file protection)

Provider Real-Time File Protection

  • PayloadData1%DetectionInformation%
    • %DetectionInformation% = /Event/EventData/Data

Source: evtx/Maps/Kaspersky-Security_OnDemandScan_3023.map(opens in new tab), evtx/Maps/Kaspersky-Security_Real-Time_File_Protection_3023.map(opens in new tab) by Phill Moore and contributors(opens in new tab), MIT License(opens in new tab)