Windows 11 Windows 11 Security Audit Log Event 4802 (screensaver invoked) not working

[AfevisSolmunko]

Hi! I upgraded to windows 11 a few days ago & I'm trying to create a task via scheduler that runs automatically when event 4802 (the screensaver is invoked via timeout) occurs in the Windows security audit log. https://learn.microsoft.com/en-us/p...urity/threat-protection/auditing/event-4802My filter:<QueryList> <Query Id="0" Path="Security"> <Select Path="Security">*[System[(Level=4 or Level=0) and (EventID=4802)]]</Select> </Query></Q

Continue reading...