Doriansoft noticed that there's a relationship between our pre-Vista security event IDs and our Vista-era security event IDs. For most security events: VistaEventId = PreVistaEventId + 4096 Why is this? We needed to differentiate the Vista events from
Read More...