If you look at the XML EventData of Windows events like 1002 (DHCP error), you will see something like this:
Article Link: https://isc.sans.edu/diary/rss/30256
If you look at the XML EventData of Windows events like 1002 (DHCP error), you will see something like this:
Article Link: https://isc.sans.edu/diary/rss/30256