Nombre de registro:Microsoft-Windows-CodeIntegrity/Operational
Origen:        Microsoft-Windows-CodeIntegrity
Fecha:         20/11/2025 17:25:17
Id. del evento:3116
Categoría de la tarea:(21)
Nivel:         Información
Palabras clave:
Usuario:       SYSTEM
Equipo:        Angello
Descripción:
Signature information for Code Integrity policy ID {d2bda982-ccf6-4344-ac5b-0b44427b6816}.
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CodeIntegrity" Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
    <EventID>3116</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>21</Task>
    <Opcode>131</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2025-11-20T22:25:17.6121046Z" />
    <EventRecordID>542</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
    <Computer>Angello</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="PolicyGUID">{d2bda982-ccf6-4344-ac5b-0b44427b6816}</Data>
    <Data Name="PublisherNameLength">17</Data>
    <Data Name="PublisherName">Microsoft Windows</Data>
    <Data Name="IssuerNameLength">37</Data>
    <Data Name="IssuerName">Microsoft Windows Production PCA 2011</Data>
    <Data Name="PublisherTBSHashSize">32</Data>
    <Data Name="PublisherTBSHash">BE93D7B56CDFBD317CF29DBE54240CE5E8CF52C7ABE28730B33558353FFB8D4D</Data>
    <Data Name="IssuerTBSHashSize">32</Data>
    <Data Name="IssuerTBSHash">4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data>
    <Data Name="EKUsSize">21</Data>
    <Data Name="EKUs">020A2B0601040182370A0306082B06010505070303</Data>
    <Data Name="KnownRoot">6</Data>
  </EventData>
</Event>

Nombre de registro:Microsoft-Windows-CodeIntegrity/Operational
Origen:        Microsoft-Windows-CodeIntegrity
Fecha:         20/11/2025 17:25:17
Id. del evento:3099
Categoría de la tarea:(21)
Nivel:         Información
Palabras clave:
Usuario:       SYSTEM
Equipo:        Angello
Descripción:
Refreshed and activated Code Integrity policy {d2bda982-ccf6-4344-ac5b-0b44427b6816} Microsoft Windows Driver Policy. id 10.0.27805.0. Status 0x0
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CodeIntegrity" Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
    <EventID>3099</EventID>
    <Version>2</Version>
    <Level>4</Level>
    <Task>21</Task>
    <Opcode>131</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2025-11-20T22:25:17.6118625Z" />
    <EventRecordID>541</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
    <Computer>Angello</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="PolicyNameLength">31</Data>
    <Data Name="PolicyNameBuffer">Microsoft Windows Driver Policy</Data>
    <Data Name="PolicyIdLength">12</Data>
    <Data Name="PolicyIdBuffer">10.0.27805.0</Data>
    <Data Name="PolicyGUID">{d2bda982-ccf6-4344-ac5b-0b44427b6816}</Data>
    <Data Name="Status">0x0</Data>
    <Data Name="Options">0x80880200</Data>
    <Data Name="PolicyHashSize">32</Data>
    <Data Name="PolicyHash">B751601D6165D9D505F60057AD479417F68C6B574E9F2AADA3991D130916C74F</Data>
    <Data Name="OptionsV2">0x0</Data>
  </EventData>
</Event>

Nombre de registro:Microsoft-Windows-CodeIntegrity/Operational
Origen:        Microsoft-Windows-CodeIntegrity
Fecha:         20/11/2025 17:25:17
Id. del evento:3099
Categoría de la tarea:(21)
Nivel:         Información
Palabras clave:
Usuario:       SYSTEM
Equipo:        Angello
Descripción:
Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CodeIntegrity" Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
    <EventID>3099</EventID>
    <Version>2</Version>
    <Level>4</Level>
    <Task>21</Task>
    <Opcode>131</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2025-11-20T22:25:17.6115888Z" />
    <EventRecordID>539</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
    <Computer>Angello</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="PolicyNameLength">54</Data>
    <Data Name="PolicyNameBuffer">Microsoft Windows Virtualization Based Security Policy</Data>
    <Data Name="PolicyIdLength">12</Data>
    <Data Name="PolicyIdBuffer">10.0.29459.0</Data>
    <Data Name="PolicyGUID">{a072029f-588b-4b5e-b7f9-05aad67df687}</Data>
    <Data Name="Status">0x0</Data>
    <Data Name="Options">0x90800000</Data>
    <Data Name="PolicyHashSize">32</Data>
    <Data Name="PolicyHash">B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data>
    <Data Name="OptionsV2">0x0</Data>
  </EventData>
</Event>

Nombre de registro:Microsoft-Windows-CodeIntegrity/Operational
Origen:        Microsoft-Windows-CodeIntegrity
Fecha:         20/11/2025 17:25:17
Id. del evento:3116
Categoría de la tarea:(21)
Nivel:         Información
Palabras clave:
Usuario:       SYSTEM
Equipo:        Angello
Descripción:
Signature information for Code Integrity policy ID {784c4414-79f4-4c32-a6a5-f0fb42a51d0d}.
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CodeIntegrity" Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
    <EventID>3116</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>21</Task>
    <Opcode>131</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2025-11-20T22:25:17.6115558Z" />
    <EventRecordID>538</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
    <Computer>Angello</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="PolicyGUID">{784c4414-79f4-4c32-a6a5-f0fb42a51d0d}</Data>
    <Data Name="PublisherNameLength">17</Data>
    <Data Name="PublisherName">Microsoft Windows</Data>
    <Data Name="IssuerNameLength">37</Data>
    <Data Name="IssuerName">Microsoft Windows Production PCA 2011</Data>
    <Data Name="PublisherTBSHashSize">32</Data>
    <Data Name="PublisherTBSHash">BE93D7B56CDFBD317CF29DBE54240CE5E8CF52C7ABE28730B33558353FFB8D4D</Data>
    <Data Name="IssuerTBSHashSize">32</Data>
    <Data Name="IssuerTBSHash">4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data>
    <Data Name="EKUsSize">21</Data>
    <Data Name="EKUs">020A2B0601040182370A0306082B06010505070303</Data>
    <Data Name="KnownRoot">6</Data>
  </EventData>
</Event>

Nombre de registro:Microsoft-Windows-CodeIntegrity/Operational
Origen:        Microsoft-Windows-CodeIntegrity
Fecha:         20/11/2025 17:25:17
Id. del evento:3116
Categoría de la tarea:(21)
Nivel:         Información
Palabras clave:
Usuario:       SYSTEM
Equipo:        Angello
Descripción:
Signature information for Code Integrity policy ID {784c4414-79f4-4c32-a6a5-f0fb42a51d0d}.
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CodeIntegrity" Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
    <EventID>3116</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>21</Task>
    <Opcode>131</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2025-11-20T22:25:17.6115558Z" />
    <EventRecordID>538</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
    <Computer>Angello</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="PolicyGUID">{784c4414-79f4-4c32-a6a5-f0fb42a51d0d}</Data>
    <Data Name="PublisherNameLength">17</Data>
    <Data Name="PublisherName">Microsoft Windows</Data>
    <Data Name="IssuerNameLength">37</Data>
    <Data Name="IssuerName">Microsoft Windows Production PCA 2011</Data>
    <Data Name="PublisherTBSHashSize">32</Data>
    <Data Name="PublisherTBSHash">BE93D7B56CDFBD317CF29DBE54240CE5E8CF52C7ABE28730B33558353FFB8D4D</Data>
    <Data Name="IssuerTBSHashSize">32</Data>
    <Data Name="IssuerTBSHash">4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data>
    <Data Name="EKUsSize">21</Data>
    <Data Name="EKUs">020A2B0601040182370A0306082B06010505070303</Data>
    <Data Name="KnownRoot">6</Data>
  </EventData>
</Event>