WitFoo-WinLogBeat ::: {"@metadata":{"beat":"winlogbeat","type":"_doc","version":"8.2.2"},"@timestamp":"2024-07-27T00:36:27.073Z","agent":{"ephemeral_id":"964d0404-9b18-4f2b-a3fe-7db4be557fbf","id":"8809f950-580f-4473-8f56-fd5ca481b748","name":"Proteus","type":"winlogbeat","version":"8.2.2"},"ecs":{"version":"8.0.0"},"event":{"action":"None","code":"36887","created":"2024-07-27T00:36:28.138Z","kind":"event","provider":"Schannel"},"host":{"name":"Proteus.acme.com"},"log":{"level":"error"},"message":"A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 70.","organization":"acme","senderHost":"Proteus.acme.com","sensitivity":"normal","winlog":{"api":"wineventlog","channel":"System","computer_name":"Proteus.acme.com","event_data":{"AlertDesc":"70"},"event_id":"36887","opcode":"Info","process":{"pid":1532,"thread":{"id":3312}},"provider_guid":"{1F678132-5938-4686-9FDC-C8FF68F15C85}","provider_name":"Schannel","record_id":7318427,"task":"None","user":{"domain":"NT AUTHORITY","identifier":"S-1-5-18","name":"SYSTEM","type":"User"}}}
Product: schannel
Vendor: schannel