WitFoo-WinLogBeat ::: {"@metadata":{"beat":"winlogbeat","type":"_doc","version":"8.2.2"},"@timestamp":"2024-07-26T13:20:08.985Z","agent":{"ephemeral_id":"9e8b3684-f98e-4660-a5f0-b9055e0435e9","id":"60a0a7eb-8adf-44b2-8571-636680a0f5cd","name":"NORDC-APP-FS01","type":"winlogbeat","version":"8.2.2"},"ecs":{"version":"8.0.0"},"event":{"action":"None","code":"64","created":"2024-07-26T13:20:09.148Z","kind":"event","provider":"Microsoft-Windows-CertificateServicesClient-AutoEnrollment"},"host":{"name":"NORDC-APP-FS01.umbrella.com"},"log":{"level":"warning"},"message":"Certificate for local system with Thumbprint a7 ba 24 0c 93 f0 da 73 14 4a 2d 48 75 19 75 22 63 49 7d e3 is about to expire or already expired.","organization":"umbrella","senderHost":"nordc-app-fs01.umbrella.com","sensitivity":"normal","winlog":{"api":"wineventlog","channel":"Application","computer_name":"NORDC-APP-FS01.umbrella.com","event_data":{"Context":"local system","ObjId":"a7 ba 24 0c 93 f0 da 73 14 4a 2d 48 75 19 75 22 63 49 7d e3"},"event_id":"64","keywords":["Classic"],"opcode":"Info","provider_guid":"{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}","provider_name":"Microsoft-Windows-CertificateServicesClient-AutoEnrollment","record_id":1284641,"task":"None"}}
Product: microsoft-windows-certificateservicesclient-autoenrollment
Vendor: microsoft-windows-certificateservicesclient-autoenrollment