I'm afraid my environment isn't setup to let me make that work. Maybe you can do some "Run As..." tasks and then go into the console and run an nDepth search for AnyAlert from DetectionIP from your machine for the last 10 minutes, and also against your DCs for 10 minutes and see if you can identify the event that we could correlate off of?
↧