| FIGURE 2: Event ID 602 |
| Event Type: |
Success Audit |
| Event Source: |
Security |
| Event Category: |
Detailed Tracking |
| Event ID: |
602 |
| Date: |
10/16/2003 |
| Time: |
11:08:05 AM |
| User: |
W3\Administrator |
| Computer: |
W3 |
| Description: |
| Scheduled Task created: |
| File Name: |
C:\WINDOWS\Tasks\Calculator.job |
| Command: |
C:\WINDOWS\system32\calc.exe |
| Triggers: |
At 11:07 AM every day, starting 10/16/2003. |
| Time: |
10/17/2003 11:07:00 AM |
| Flags: |
0x18000C0 |
| Target User: |
W3\Administrator |
| By: |
| User: |
Administrator |
| Domain: |
W3 |
| Logon ID: |
(0x0,0xAA4D) |