On some Windows 2012 r2 server the process mbaservice.exe generate a flood of thousands and thousands of events that saturate the log file.
All events are equals. Below an event. The ProcessID 608 is lsass.exe.
I'ts a bug ? How prevent to saturate log file with this event ?
Aany suggestion is appreciated .
System
- Provider
[ Name] Microsoft-Windows-Security-Auditing
[ Guid] {54849625-5478-4994-A5BA-3E3B0328C30D}
EventID 5447
Version 0
Level 0
Task 13573
Opcode 0
Keywords 0x8020000000000000
- TimeCreated
[ SystemTime] 2019-11-28T08:37:11.563287400Z
EventRecordID 57999359
Correlation
- Execution
[ ProcessID] 608
[ ThreadID] 628
Channel Security
Computer xxxxxxxx
Security
- EventData
ProcessId 1404
UserSid S-1-5-18
UserName NT AUTHORITY\SYSTEM
ProviderKey {00000000-0000-0000-0000-000000000000}
ProviderName -
ChangeType %%16384
FilterKey {41D8AE66-9396-493A-919E-8091EE026882}
FilterName Malwarebytes Anti-Malware
FilterType %%16388
FilterId 100430
LayerKey {C38D57D1-05A7-4C33-904F-7FBCEEE60E82}
LayerName Livello v4 connessione ALE
LayerId 48
Weight 576460752303423488
Conditions ID condizione: {b235ae9a-1d64-49b8-a44c-5ff3d9095045} Valore corrispondenza: Nell'intervallo Valore condizione: 0x0116d02f - 0x0116d02f
Action %%16389
CalloutKey {00000000-0000-0000-0000-000000000000}
CalloutName -