Source Event ID Meaning
FCSAM 1000 Scan Started
FCSAM 1001 Scan Completed
FCSAM 1006 Scan Malware Detected
FCSAM 1007 Scan Malware Action taken (ie clean/remove/quarantine/ignore etc)
FCSAM 1008 Scan Malware Action taken - Failed

 

Source Event ID Meaning
FCSAM 3002 RTP Failed
FCSAM 3004 RTP Malware Detected
FCSAM 3005 RTP Malware Action taken (ie clean/remove/quarantine/ignore etc)
FCSAM 3006 RTP Malware Action taken - Failed