Chapters/working-with-json/audit.json
|
[ { "Name": "AdtAgent", "DisplayName": "Microsoft Monitoring Agent Audit Forwarding", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ADWS", "DisplayName": "Active Directory Web Services", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AeLookupSvc", "DisplayName": "Application Experience", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ALG", "DisplayName": "Application Layer Gateway Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AllUserInstallAgent", "DisplayName": "Windows All-User Install Agent", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AppHostSvc", "DisplayName": "Application Host Helper Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AppIDSvc", "DisplayName": "Application Identity", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Appinfo", "DisplayName": "Application Information", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AppMgmt", "DisplayName": "Application Management", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "aspnet_state", "DisplayName": "ASP.NET State Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "AudioEndpointBuilder", "DisplayName": "Windows Audio Endpoint Builder", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Audiosrv", "DisplayName": "Windows Audio", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "BFE", "DisplayName": "Base Filtering Engine", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "BITS", "DisplayName": "Background Intelligent Transfer Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "BrokerInfrastructure", "DisplayName": "Background Tasks Infrastructure Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Browser", "DisplayName": "Computer Browser", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "CertPropSvc", "DisplayName": "Certificate Propagation", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "CertSvc", "DisplayName": "Active Directory Certificate Services", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "COMSysApp", "DisplayName": "COM+ System Application", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "CryptSvc", "DisplayName": "Cryptographic Services", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DcomLaunch", "DisplayName": "DCOM Server Process Launcher", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ddpsvc", "DisplayName": "Data Deduplication Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ddpvssvc", "DisplayName": "Data Deduplication Volume Shadow Copy Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "defragsvc", "DisplayName": "Optimize drives", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DeviceAssociationService", "DisplayName": "Device Association Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DeviceInstall", "DisplayName": "Device Install Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Dfs", "DisplayName": "DFS Namespace", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DFSR", "DisplayName": "DFS Replication", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Dhcp", "DisplayName": "DHCP Client", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DHCPServer", "DisplayName": "DHCP Server", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DNS", "DisplayName": "DNS Server", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Dnscache", "DisplayName": "DNS Client", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "dot3svc", "DisplayName": "Wired AutoConfig", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DPS", "DisplayName": "Diagnostic Policy Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DsmSvc", "DisplayName": "Device Setup Manager", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "DsRoleSvc", "DisplayName": "DS Role Server", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Eaphost", "DisplayName": "Extensible Authentication Protocol", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "EFS", "DisplayName": "Encrypting File System (EFS)", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "EventLog", "DisplayName": "Windows Event Log", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "EventSystem", "DisplayName": "COM+ Event System", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "fdPHost", "DisplayName": "Function Discovery Provider Host", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "FDResPub", "DisplayName": "Function Discovery Resource Publication", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "FontCache", "DisplayName": "Windows Font Cache Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "gpsvc", "DisplayName": "Group Policy Client", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "HealthService", "DisplayName": "Microsoft Monitoring Agent", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "hidserv", "DisplayName": "Human Interface Device Access", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "hkmsvc", "DisplayName": "Health Key and Certificate Management", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "IISADMIN", "DisplayName": "IIS Admin Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "IKEEXT", "DisplayName": "IKE and AuthIP IPsec Keying Modules", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "iphlpsvc", "DisplayName": "IP Helper", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "IsmServ", "DisplayName": "Intersite Messaging", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Kdc", "DisplayName": "Kerberos Key Distribution Center", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "KdsSvc", "DisplayName": "Microsoft Key Distribution Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "KeyIso", "DisplayName": "CNG Key Isolation", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "KPSSVC", "DisplayName": "KDC Proxy Server service (KPS)", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "KtmRm", "DisplayName": "KtmRm for Distributed Transaction Coordinator", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "LanmanServer", "DisplayName": "Server", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "LanmanWorkstation", "DisplayName": "Workstation", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "lltdsvc", "DisplayName": "Link-Layer Topology Discovery Mapper", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "lmhosts", "DisplayName": "TCP/IP NetBIOS Helper", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "LSM", "DisplayName": "Local Session Manager", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "MMCSS", "DisplayName": "Multimedia Class Scheduler", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "MpsSvc", "DisplayName": "Windows Firewall", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "MSDTC", "DisplayName": "Distributed Transaction Coordinator", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "MSiSCSI", "DisplayName": "Microsoft iSCSI Initiator Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "msiserver", "DisplayName": "Windows Installer", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "napagent", "DisplayName": "Network Access Protection Agent", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "NcaSvc", "DisplayName": "Network Connectivity Assistant", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Netlogon", "DisplayName": "Netlogon", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Netman", "DisplayName": "Network Connections", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "netprofm", "DisplayName": "Network List Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "NetTcpPortSharing", "DisplayName": "Net.Tcp Port Sharing Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "NlaSvc", "DisplayName": "Network Location Awareness", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "nsi", "DisplayName": "Network Store Interface Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "NTDS", "DisplayName": "Active Directory Domain Services", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "NtFrs", "DisplayName": "File Replication Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "OcspSvc", "DisplayName": "Online Responder Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "PerfHost", "DisplayName": "Performance Counter DLL Host", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "pla", "DisplayName": "Performance Logs \u0026 Alerts", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "PlugPlay", "DisplayName": "Plug and Play", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "PolicyAgent", "DisplayName": "IPsec Policy Agent", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Power", "DisplayName": "Power", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "PrintNotify", "DisplayName": "Printer Extensions and Notifications", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ProfSvc", "DisplayName": "User Profile Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RasAuto", "DisplayName": "Remote Access Auto Connection Manager", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RasMan", "DisplayName": "Remote Access Connection Manager", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RemoteAccess", "DisplayName": "Routing and Remote Access", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RemoteRegistry", "DisplayName": "Remote Registry", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RpcEptMapper", "DisplayName": "RPC Endpoint Mapper", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RpcLocator", "DisplayName": "Remote Procedure Call (RPC) Locator", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RpcSs", "DisplayName": "Remote Procedure Call (RPC)", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "RSoPProv", "DisplayName": "Resultant Set of Policy Provider", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "sacsvr", "DisplayName": "Special Administration Console Helper", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SamSs", "DisplayName": "Security Accounts Manager", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SCardSvr", "DisplayName": "Smart Card", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Schedule", "DisplayName": "Task Scheduler", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SCPolicySvc", "DisplayName": "Smart Card Removal Policy", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "seclogon", "DisplayName": "Secondary Logon", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SENS", "DisplayName": "System Event Notification Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SessionEnv", "DisplayName": "Remote Desktop Configuration", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SharedAccess", "DisplayName": "Internet Connection Sharing (ICS)", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "ShellHWDetection", "DisplayName": "Shell Hardware Detection", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SNMPTRAP", "DisplayName": "SNMP Trap", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Spooler", "DisplayName": "Print Spooler", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "sppsvc", "DisplayName": "Software Protection", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SSDPSRV", "DisplayName": "SSDP Discovery", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SstpSvc", "DisplayName": "Secure Socket Tunneling Protocol Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "svsvc", "DisplayName": "Spot Verifier", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "swprv", "DisplayName": "Microsoft Software Shadow Copy Provider", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "SysMain", "DisplayName": "Superfetch", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "System Center Management APM", "DisplayName": "Microsoft Monitoring Agent APM", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "TapiSrv", "DisplayName": "Telephony", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "TermService", "DisplayName": "Remote Desktop Services", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Themes", "DisplayName": "Themes", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "THREADORDER", "DisplayName": "Thread Ordering Server", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "TlntSvr", "DisplayName": "Telnet", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "TrkWks", "DisplayName": "Distributed Link Tracking Client", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "TrustedInstaller", "DisplayName": "Windows Modules Installer", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "UALSVC", "DisplayName": "User Access Logging Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "UI0Detect", "DisplayName": "Interactive Services Detection", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "UmRdpService", "DisplayName": "Remote Desktop Services UserMode Port Redirector", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "upnphost", "DisplayName": "UPnP Device Host", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "VaultSvc", "DisplayName": "Credential Manager", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vds", "DisplayName": "Virtual Disk", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmicguestinterface", "DisplayName": "Hyper-V Guest Service Interface", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmicheartbeat", "DisplayName": "Hyper-V Heartbeat Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmickvpexchange", "DisplayName": "Hyper-V Data Exchange Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmicrdv", "DisplayName": "Hyper-V Remote Desktop Virtualization Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmicshutdown", "DisplayName": "Hyper-V Guest Shutdown Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmictimesync", "DisplayName": "Hyper-V Time Synchronization Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "vmicvss", "DisplayName": "Hyper-V Volume Shadow Copy Requestor", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "VSS", "DisplayName": "Volume Shadow Copy", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "W32Time", "DisplayName": "Windows Time", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "W3SVC", "DisplayName": "World Wide Web Publishing Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WAS", "DisplayName": "Windows Process Activation Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "wbengine", "DisplayName": "Block Level Backup Engine Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WcsPlugInService", "DisplayName": "Windows Color System", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WdiServiceHost", "DisplayName": "Diagnostic Service Host", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WdiSystemHost", "DisplayName": "Diagnostic System Host", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Wecsvc", "DisplayName": "Windows Event Collector", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "wercplsupport", "DisplayName": "Problem Reports and Solutions Control Panel Support", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WerSvc", "DisplayName": "Windows Error Reporting Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WinHttpAutoProxySvc", "DisplayName": "WinHTTP Web Proxy Auto-Discovery Service", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "Winmgmt", "DisplayName": "Windows Management Instrumentation", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WinRM", "DisplayName": "Windows Remote Management (WS-Management)", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "wmiApSrv", "DisplayName": "WMI Performance Adapter", "Status": 4, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WPDBusEnum", "DisplayName": "Portable Device Enumerator Service", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "WSService", "DisplayName": "Windows Store Service (WSService)", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "wuauserv", "DisplayName": "Windows Update", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" }, { "Name": "wudfsvc", "DisplayName": "Windows Driver Foundation - User-mode Driver Framework", "Status": 1, "MachineName": "chi-dc04", "Audit": "12/01/16" } ] |