Windows Software Detection Application Removal (via Splunk): code 1034

info Nessus Network Monitor Plugin ID 710046

Synopsis

SIEM Pull Service has detected via Splunk query that, on this Windows system, a software package was removed.

Description

SIEM Pull Service has detected via Splunk query that, on this Windows system, a software package was removed. The query used was ((sourcetype="WinEventLog:System" OR sourcetype="WinEventLog:Application") AND remove*)

Solution

N/A

Plugin Details

Severity: Info

ID: 710046

Family: Policy

Published: 8/20/2004

Updated: 5/18/2018