// PDB:  C:\Jenkins_Agent\workspace\d-integration-win-fpneoclient-ui\temp\Release.Win32\bin\fpneoprotectionsvc.pdb
// PDB:  Last Updated :2026-02-17:20:44:13:803 (UTC) [binplace]
12b8693c-52da-31b3-7716-60bf5d317f8f UEBA // SRC=PersistentRisk.cpp MJ= MN=
#typev wppifp_h223 31 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@199] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=WppFuncImpl<<lambda_84c2acd98f73d9ff33cc25fe4a3295d3> >::~WppFuncImpl<<lambda_84c2acd98f73d9ff33cc25fe4a3295d3> >
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev wppifp_h223 10 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@20] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=WppFuncImpl<<lambda_8d5946852b7e36f18dd3f8c0bf2bd1fb> >::~WppFuncImpl<<lambda_8d5946852b7e36f18dd3f8c0bf2bd1fb> >
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev wppifp_h223 11 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@28] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=WppFuncImpl<<lambda_d8638c82b11278a40377ee1e07fb09fd> >::~WppFuncImpl<<lambda_d8638c82b11278a40377ee1e07fb09fd> >
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp257 37 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@257] Debug: Adding enforced risk alert. Remaining days: %11!u!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::addEnforcedRisk
{
COMPID_, ItemString -- 10
(uint32_t)remainingDays, ItemLong -- 11
}
#typev persistentrisk_cpp251 36 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@251] Debug: remaining time = %11!I64u! end time = %12!I64u! curr time %13!I64u!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::addEnforcedRisk
{
COMPID_, ItemString -- 10
remainingTime, ItemULongLong -- 11
endTime, ItemULongLong -- 12
currTime, ItemULongLong -- 13
}
#typev persistentrisk_cpp234 35 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@234] Debug: Admin enforced risk. Risk score: %11!u!. End date: %12!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::addEnforcedRisk
{
COMPID_, ItemString -- 10
aRiskAlerts.enforced_risk().initial_risk_impact(), ItemLong -- 11
aRiskAlerts.enforced_risk().end_date_yyyy_mm_dd(), ItemPString -- 12
}
#typev persistentrisk_cpp180 29 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@180] Error: Failed setting alert in database. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp175 28 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@175] Debug: Alert was updated in cloud. alert_id: %11!s!, event_id: %12!s!. modifier: %13!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
protocol::UserRiskAlert_RiskModifier_Name(alert.last_modified_by()), ItemPString -- 13
}
#typev persistentrisk_cpp188 30 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@188] Debug: Setting last sync time. user: %11!s!. sync time: %12!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
userName, ItemPString -- 11
riskAlerts.sync_time_utc_rfc3339(), ItemPString -- 12
}
#typev persistentrisk_cpp168 27 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@168] Debug: Alert exists in local database and wasn't updated in cloud. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp158 26 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@158] Error: Failed setting alert in database. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp153 25 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@153] Debug: Alert doesn't exist in the database, adding it. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp146 24 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@146] Error: Failed checking if alert exists in the database. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp140 23 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@140] Debug: Processing alert. alert_id: %11!s!, event_id: %12!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
alert.event_id(), ItemPString -- 11
alert.alert_id(), ItemPString -- 12
}
#typev persistentrisk_cpp135 38 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@273] Debug: Removing enforced risk for: %11!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
aUser, ItemPString -- 11
}
#typev persistentrisk_cpp125 22 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@125] Debug: Processing received alerts for user: %11!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
userName, ItemPString -- 11
}
#typev persistentrisk_cpp119 21 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@119] Error: Failed getting user info by sid: %11!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
riskAlerts.user_sid(), ItemPString -- 11
}
#typev persistentrisk_cpp107 20 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@107] Debug: Received risk sync response. user sid: %11!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
riskAlerts.user_sid(), ItemPString -- 11
}
#typev persistentrisk_cpp103 19 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@103] Error: Failed converting json to message: %11!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
status.ToString(), ItemPString -- 11
}
#typev persistentrisk_cpp95 18 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@95] Dump Text: Sync user risk response: [Chunk %11!Iu! of %12!Iu!, size %13!Iu! of %14!Iu!]:%15!s!%16!s!" //   LEVEL=rsDump COMPID=UEBA DUMPTEXT=json FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
CHUNK_, ItemPtr -- 11
CHUNK_COUNT_, ItemPtr -- 12
CHUNK_SIZE_, ItemPtr -- 13
TOTAL_SIZE_, ItemPtr -- 14
NEW_LINE_, ItemString -- 15
CURTEXT_, ItemPString -- 16
}
#typev persistentrisk_cpp81 17 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@81] Entering to: %!FUNC!; Message type: %11!s!" //   LEVEL=rsFunc COMPID=UEBA FUNC=PersistentRisk::onMBMessage
{
COMPID_, ItemString -- 10
aMBMessage.mType, ItemPString -- 11
}
#typev persistentrisk_cpp230 31 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@199] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp225 34 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@225] Debug: Received private id for user: %11!s!" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
aUserData->get_data().normalized_user_name(), ItemPString -- 11
}
#typev persistentrisk_cpp218 31 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@199] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp206 33 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@206] Debug: Logon without private id. waiting for private id" //   LEVEL=rsDebug COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
}
#typev persistentrisk_cpp200 32 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@200] Info: User: %11!s!. IsLogon: %12!s!" //   LEVEL=rsInfo COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
aUserData->get_data().normalized_user_name(), ItemPString -- 11
aIsLogon, ItemListLong(false,true) -- 12
}
#typev persistentrisk_cpp199 31 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@199] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::onUserDataReady
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp51 14 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@51] Error: Failed reading tenant/client id. tenant id: %11!s!. client id: %12!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::sendCloudRequest
{
COMPID_, ItemString -- 10
tenantId, ItemPString -- 11
iotClientId, ItemPString -- 12
}
#typev persistentrisk_cpp75 16 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@75] Dump Text: Sync user risk request: [Chunk %11!Iu! of %12!Iu!, size %13!Iu! of %14!Iu!]:%15!s!%16!s!" //   LEVEL=rsDump COMPID=UEBA DUMPTEXT=json FUNC=PersistentRisk::sendCloudRequest
{
COMPID_, ItemString -- 10
CHUNK_, ItemPtr -- 11
CHUNK_COUNT_, ItemPtr -- 12
CHUNK_SIZE_, ItemPtr -- 13
TOTAL_SIZE_, ItemPtr -- 14
NEW_LINE_, ItemString -- 15
CURTEXT_, ItemPString -- 16
}
#typev persistentrisk_cpp71 15 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@71] Error: Failed converting request message to string: %11!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::sendCloudRequest
{
COMPID_, ItemString -- 10
status.ToString(), ItemPString -- 11
}
#typev persistentrisk_cpp41 13 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@41] Error: Failed getting user last sync time. user: %11!s!" //   LEVEL=rsError COMPID=UEBA FUNC=PersistentRisk::sendCloudRequest
{
COMPID_, ItemString -- 10
aUserData->get_data().normalized_user_name(), ItemPString -- 11
}
#typev persistentrisk_cpp36 12 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %!FUNC! PersistentRisk.cpp@36] Entering to: %!FUNC!; User: %11!s!. Sid: %12!s!" //   LEVEL=rsFunc COMPID=UEBA FUNC=PersistentRisk::sendCloudRequest
{
COMPID_, ItemString -- 10
aUserData->get_data().normalized_user_name(), ItemPString -- 11
aUserData->get_data().session_user_info().user_sid(), ItemPString -- 12
}
#typev persistentrisk_cpp24 10 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@20] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::start
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp20 10 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@20] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::start
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp32 11 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@28] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::stop
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}
#typev persistentrisk_cpp28 11 "[%9!u!]%8!u!.%3!u! %4!s! [%10!s!][%1!s! %11!s! PersistentRisk.cpp@28] Function %12!s!: " //   LEVEL=rsFunc FUNCNAME=__FUNCTION__ COMPID=UEBA FUNC=PersistentRisk::stop
{
COMPID_, ItemString -- 10
cFUNC, ItemString -- 11
cACTION, ItemString -- 12
}