#event-id-4657

1 article

Windows Events1

Security analyst monitoring Windows Event ID 4657 registry audit logs on multiple screens in a SOC environment

Event 4657

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4657 – Microsoft-Windows-Security-Auditing: Registry Value Modified

Event ID 4657 logs when a registry value is modified on Windows systems with object access auditing enabled. Critical for security monitoring and compliance tracking.

March 1812 min