Lucene search

K
nessusTenable710046.PRM
HistoryAug 20, 2004 - 12:00 a.m.

Windows Software Detection Application Removal (via Splunk): code 1034

2004-08-2000:00:00
Tenable
www.tenable.com
6

SIEM Pull Service has detected via Splunk query that, on this Windows system, a software package was removed. The query used was ((sourcetype=“WinEventLog:System” OR sourcetype=“WinEventLog:Application”) AND remove*)

Binary data 710046.prm