Sigma informational stable sigma

Windows Update Error

Detects Windows update errors including installation failures and connection issues. Defenders should observe this in case critical update KBs aren't installed.

View Source

Detection Logic

{
  "selection": {
    "Provider_Name": "Microsoft-Windows-WindowsUpdateClient",
    "EventID": [
      16,
      20,
      24,
      213,
      217
    ]
  },
  "condition": "selection"
}

False Positives

  • ⚠ Unknown

Field Validations

Loading…

Comments (0)

Loading comments...