#Number of GDS's
58
BEGIN GDS
#         GDS ID
10
#         GDS NAME
Signature Container
#         CONTENT ID
0
#         CONTENT VERSION
1
#         NUM FIELDS
6
#         FIELD 1
Signature
#         FIELD 2
Cause
#         FIELD 3
Response
#         FIELD 4
History
#         FIELD 5
Errors
#         FIELD 6
Comments
#
# --------------------------------------
# Trace
# --------------------------------------
BEGIN GDS
#         GDS ID
2
#         GDS NAME
Trace Message
#         CONTENT ID
0
#         CONTENT VERSION
1
#         NUM FIELDS
1
#         FIELD 1
Comments
#
BEGIN GDS
512
Event 512
512
1
9
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
BEGIN GDS
513
Event 513
513
1
9
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
BEGIN GDS
514
Event 514
514
1
10
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Authentication Package
BEGIN GDS
515
Event 515
515
1
10
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon Process
BEGIN GDS
516
Event 516
516
1
10
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Events Discarded
BEGIN GDS
517
Event 517
517
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
BEGIN GDS
518
Event 518
518
1
10
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Notification Package
BEGIN GDS
528
Event 528
528
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
529
Event 529
529
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
530
Event 530
530
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
531
Event 531
531
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
532
Event 532
532
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
533
Event 533
533
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
534
Event 534
534
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
535
Event 535
535
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
536
Event 536
536
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
537
Event 537
537
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
538
Event 538
538
1
11
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Logon Type
BEGIN GDS
539
Event 539
539
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Username
User Domain
Logon Type
Logon Process
Authentication Package
Workstation
BEGIN GDS
560
Event 560
560
1
23
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Server
Object Type
Object Name
Handle ID
Operation ID
Process ID
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
Access Types
Priviliges
BEGIN GDS
561
Event 561
561
1
12
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Handle ID
Operation ID
Process ID
BEGIN GDS
562
Event 562
562
1
12
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Server
Handle ID
Process ID
BEGIN GDS
563
Event 563
563
1
23
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Server
Object Type
Object Name
Handle ID
Operation ID
Process ID
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
Access Types
Priviliges
BEGIN GDS
564
Event 564
564
1
12
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Server
Handle ID
Process ID
BEGIN GDS
576
Event 576
576
1
11
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Priviliges
BEGIN GDS
577
Event 577
577
1
18
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Server
Service
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
Priviliges
BEGIN GDS
578
Event 578
578
1
19
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Server
Handle ID
Process ID
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
Priviliges
BEGIN GDS
592
Event 592
592
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Process ID
Executable Name
Parent PID
BEGIN GDS
593
Event 593
593
1
11
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Process ID
BEGIN GDS
594
Event 594
594
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Source Handle ID
Source Process ID
Target Handle ID
Target Process ID
BEGIN GDS
595
Event 595
595
1
19
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Object Type
Object Name
Process ID
Primary User
Primary User Domain
Primary User Logon ID
Client User
Client User Domain
Client User Logon ID
Access Types
BEGIN GDS
608
Event 608
608
1
12
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
User Right
Affected Username
BEGIN GDS
609
Event 609
609
1
12
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
User Right
Affected Username
BEGIN GDS
610
Event 610
610
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Trusted Domain
Domain SID
Account Name
Account Domain
BEGIN GDS
611
Event 611
611
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Trusted Domain
Domain SID
Account Name
Account Domain
BEGIN GDS
612
Event 612
612
1
11
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
System Audit Policy
BEGIN GDS
624
Event 624
624
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
BEGIN GDS
625
Event 625
625
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
BEGIN GDS
626
Event 626
626
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
BEGIN GDS
627
Event 627
627
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
628
Event 628
628
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
BEGIN GDS
629
Event 629
629
1
13
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
BEGIN GDS
630
Event 630
630
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
631
Event 631
631
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
632
Event 632
632
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Member SID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
633
Event 633
633
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Member SID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
634
Event 634
634
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
635
Event 635
635
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
636
Event 636
636
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Member SID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
637
Event 637
637
1
15
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Member SID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
638
Event 638
638
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
639
Event 639
639
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
640
Event 640
640
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Change
Object Type
Object Name
Object ID
BEGIN GDS
641
Event 641
641
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
642
Event 642
642
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account Domain
Account SID
Priviliges
BEGIN GDS
643
Event 643
643
1
14
EventID
Time
Event Info
SuccessFailure
Source
Computer
User SID
User Domain
Username
Logon ID
Account Name
Account SID
Priviliges
Account Domain