search

magicsword-io / LOLRMM

LotL RMM
https://lolrmm.io
Apache License 2.0
40 stars 12 forks source link

[RMM Update]: Action1: mismatch between Security's log "Service installation event" and event ID #27

Closed Koifman closed 1 week ago

Koifman commented 1 week ago

RMM Tool Name

Action1

Type of Update

Forensic Artifact

Update Details

Hi team, In the following link: https://lolrmm.io/tools/action1#event-log-artifacts

The first line mentions: "Service installation event as result of Action1 installation."

However, the associated event ID is 4688, but it should be 4697. Additionally, the service name for Action1 would be: "A1Agent": image

Thanks in advance, Daniel

References

Image attached in ticket

nasbench commented 1 week ago

Hey @Koifman thanks for opening this issue. I will get fixed asap