This event should be generated when file was virtualized using LUAFV.
This event occurs rarely during standard LUAFV file virtualization.
There's no example of this event in this document.
Subcategory: Audit File System
Event Schema:
A file was virtualized.
Subject:
Security ID:%1%
Account Name:%2
Account Domain:%3
Logon ID:%4
Object:
File Name:%5
Virtual File Name:%6
Process Information:
Process ID:%7
Process Name%8
Required Server Roles: None.
Minimum OS Version: Windows Server 2008, Windows Vista.
Event Versions: 0.
Security Monitoring Recommendations
- There's no recommendation for this event in this document.