Looking to get a report on particular Events in the Event Log

[steven_reid]

Hi,

We are looking to implement WDAC and so would like to get a report on the following Event IDs in the event log.

1. Applications and Services Logs - Microsoft - Windows - AppLocker -MSI and Script -- Filter with Event ID 8028
2. Applications and Services Logs - Microsoft - Windows - CodeIntegrity -Operational --Filter with Event ID 3076

We only use the LSAgent to scan our computers as they are all EntraID Joined and spread out around the country.

Is it possible to scan for informational events via LSAgent?

I was looking to use a similar report to the DCOM Hardening report that I found in the Report Library.

Thanks in advance!

[Obi_1_Cinobi · Accepted solution]

Hello there!

Unfortunately, this is currently not possible with LsAgent, but we would love to add your use case to our customer wish list. Please log a support case for this: https://www.lansweeper.com/contact/contact-support/