6401 BranchCache: Received invalid data from a peer; data discarded
Written when BranchCache receives invalid data from a peer and discards it. It is mainly a diagnostic event.
Overview
The subcategory is Audit Other System Events. It is generated when BranchCache (a feature that shares content locally between sites) receives invalid data from a peer and discards it.
How it is triggered
- When invalid data that fails verification is received from a BranchCache peer.
Security review points
- It is mostly a diagnostic event from communication inconsistencies, with low priority. That said, receiving invalid data is also the result of BranchCache content-integrity verification working. Check the peer only if invalid data from a specific peer is frequent.
Notes for log review
- It only carries meaning in BranchCache environments. It is for operations/troubleshooting.
Key fields
| Field | Meaning |
|---|---|
| Source peer | The source of the invalid data |