Level	Date and Time	Source	Event ID	Task Category
Information	16/09/2021 16:49:05	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:49:05	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.S1bc92e04#\63a9333b18a8e0e6429611a62a1c1094\Microsoft.SecureBoot.Commands.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:49:03	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:49:03	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Kd58820a5#\b2bc002c7825ea80f88229a0b23f6187\Microsoft.KeyDistributionService.Cmdlets.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:49:03	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:49:03	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Pae3498d9#\06289431488ff72a1a29f4766b5a193e\Microsoft.PowerShell.Commands.Management.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:49:02	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:49:02	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.M870d558a#\f61a36f0747ae5ce5ab810b1699c3de8\Microsoft.Management.Infrastructure.Native.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:49:01	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:49:01	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Mf49f6405#\9c1c1578a21163e24ce8e1a48b2bebe0\Microsoft.Management.Infrastructure.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:35:31	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:35:31	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\mmc.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\EventViewer\cef1edab40a8dd065676ec79549422a0\EventViewer.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:35:31	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:35:31	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\mmc.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Mff1be75b#\d84a6ff9656ba28eb936dc0739f656c2\Microsoft.ManagementConsole.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:35:30	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:35:30	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\mmc.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\MMCFxCommon\bcb5b94fcb0ff525c0555d2bfd9b64ac\MMCFxCommon.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:35:30	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:35:30	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\mmc.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\MMCEx\eb5710c331e1ef26e77c869abc2e3768\MMCEx.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:33:30	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 16:33:30	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\748d7ebe618eebb0be51e5a27fb1dd8c\System.ServiceProcess.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.
Information	16/09/2021 16:33:21	Microsoft-Windows-CodeIntegrity	3099	(21)	other (see event data)
Information	16/09/2021 16:33:21	Microsoft-Windows-CodeIntegrity	3085	(20)	Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.
Information	16/09/2021 11:00:05	Microsoft-Windows-CodeIntegrity	3089	(1)	Signature information for another event. Match using the Correlation Id.
Information	16/09/2021 11:00:05	Microsoft-Windows-CodeIntegrity	3076	(18)	Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.C99be4d25#\e2cd495836d6b870d25059c72a9f18b5\Microsoft.ConfigCI.Commands.ni.dll that did not meet the Enterprise signing level requirements or violated code integrity policy. However, due to code integrity auditing policy, the image was allowed to load.