Mail notification Windows Defender Event id 1116

[MB1]

how i can monitor Event ID at application and service event logs? I try to catch Windows Defender malware event 1116 (Warning) in %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx

at the moment Lansweeper 7.1.100.16 is used.

[MB1]

---Cut---
From: Lansweeper Support <support@lansweeper.com>
Send: Freitag, 18. Oktober 2019 11:31

Hello MB@CC-IT,

Thank your for providing us the screenshots.

This confirms the the Event you are trying to scan is part of the "Application and Service logs" section in the Event viewer. As mentioned in the provided KB articles, Lansweeper only scans the "Windows logs" section of the computer's Event Viewer.

Scanning also events from the Application and Service logs is also on our customer wish list. We also hope to foresee this also in a future release next to the specific event scanning.
---Cut---

[MB1]

And yes, of course I did
https://www.lansweeper.com/knowledgebase/scanning-non-error-events/
https://www.lansweeper.com/knowledgebase/scanning-with-scheduled-eventlog-scanning/
already read!