Hi,

I've just finished installing ADAudit and am starting now to configure things but yesterday I switched on all the critical alerts and over night received a few emails.  One of them is titled PowerShell Base64 encoded shellcode but something's not right.  The time generated data is years ago and the severity is listed as both critical and informational.  I've attached a screen shot so you can see what I mean.

Any clues as to what this means?  Time and date on the server are correctly set and I think other alerts are OK but I've not had many.

Thanks