History tab:
- The History tab logs information about CryptoPrevent activity either since:
- the Previous Startup
- for as far back as the Windows event logs happen to record.
- Events will be created whenever either a software restriction policy is enforced or when either our program filter module or FolderWatch protection detects malicious software or activity.
- The contents of each event may be useful for troubleshooting purposes and for getting the path information necessary to create a whitelist policy entry.
- Event IDs
- 866
- Software Restriction Policy Protection
- 10177
- v7 Filter Module Protection
- 10188
- v8 Beta FolderWatch
- 10189
- v8 Beta FolderWatch HoneyPot Detection
- 36650
- v8.0.0.0 + denotes protection via the source for the event
- CryptoPrevent Program Filter
- CryptoPreventFW
- CryptoPreventHP
- v8.0.0.0 + denotes protection via the source for the event
- 36651
- v8.0.0.0 + denotes protection via the source for the event
- CryptoPrevent Program Filter
- CryptoPreventFW
- CryptoPreventHP
- v8.0.0.0 + denotes protection via the source for the event
- 36652
- v8.0.0.0 + denotes protection via the source for the event
- CryptoPrevent Program Filter
- CryptoPreventFW
- CryptoPreventHP
- v8.0.0.0 + denotes protection via the source for the event
- 36659
- v8.0.0.0 + denotes protection via the source for the event
- CryptoPrevent Program Filter
- CryptoPreventFW
- CryptoPreventHP
- v8.0.0.0 + denotes protection via the source for the event
- 866