4896 High One or more rows have been Issue and May indicate an deleted from the certificate manage attacker covering database. Table ID: %1 Filter: %2 certificate their tracks after Rows Deleted: %3 requests issuing certificates. 4897 Medium Role separation enabled: %1 Change CA If role separation security is used, this can settings be used to trigger an alert if the expected configuration changes. 4898 Medium Certificate Services loaded a Change CA Alert if templates template. %1 v%2 (Schema V%3) security that are not %4 %5 Template Information: settings expected on a Template Content: %7 Security CA are loaded. Descriptor: %8 Additional Information: Domain Controller: %6
4896 High One or more rows have been deleted from the certificate database. Table ID: %1 Filter: %2 Rows Deleted: %3 Issue and manage certificate requests May indicate an attacker covering their tracks after issuing certificates. 4897 Medium Role separation enabled: %1 Change CA security settings If role separation is used, this can be used to trigger an alert if the expected configuration changes. 4898 Medium Certificate Services loaded a template. %1 v%2 (Schema V%3) %4 %5 Template Information: Template Content: %7 Security Descriptor: %8 Additional Information: Domain Controller: %6 Change CA security settings Alert if templates that are not expected on a CA are loaded.