Forum Discussion
MCAS Activity log: "back and forth" entries on changed properties
Hi everyone, In MCAS Activity log we have many "back and forth" entries regarding the property "Computer Operating System" & "AccountSupportedEncryptionTypes" changed from N/A to a value and 3 mi...
EliOfek
Microsoft
MicrosoftThose are detected by MDI. MDI follows the usn changes on those entities, and when the usn # changes, it checks what has changed from the previous syn and log the activity.
for this machine that keeps changing, can you check the usn number after every MDI report ? does it stay the same? if not, it's a proof that something indeed touched this entity (maybe for a brief moment)... and you might not be aware of what does it.
for this machine that keeps changing, can you check the usn number after every MDI report ? does it stay the same? if not, it's a proof that something indeed touched this entity (maybe for a brief moment)... and you might not be aware of what does it.