I'm not finding entries in any of my logs from VeraCrypt, nor can I find an option in VeraCrypt preferences to enable/disable.
My goal is to use a unique event for when a specific favorite volume is mounted as a trigger for a scheduled task, but I'll start with seeing any event(s) in the logs. The only thing I see so far is from the source Ntfs (Microsoft-Windows-Ntfs) which gets 3 entries for ID 98 every time the volume is mounted.
Event ID 98 Descriptions:
1. Volume C: (\Device\HarddiskVolume7) is healthy. No action is needed.
2. Volume \?\Volume{omitted} (\Device\HarddiskVolume8) is healthy. No action is needed.
3. Volume F: (\Device\VeraCryptVolumeF) is healthy. No action is needed.
I unfortunately can't use Descriptions when defining an event trigger so these won't work, since Event ID 98 is used for all drives.
Edit: Upgraded to 1.23-Beta2.
Last edit: Derek 2018-07-05
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I'm not finding entries in any of my logs from VeraCrypt, nor can I find an option in VeraCrypt preferences to enable/disable.
My goal is to use a unique event for when a specific favorite volume is mounted as a trigger for a scheduled task, but I'll start with seeing any event(s) in the logs. The only thing I see so far is from the source Ntfs (Microsoft-Windows-Ntfs) which gets 3 entries for ID 98 every time the volume is mounted.
Event ID 98 Descriptions:
1. Volume C: (\Device\HarddiskVolume7) is healthy. No action is needed.
2. Volume \?\Volume{omitted} (\Device\HarddiskVolume8) is healthy. No action is needed.
3. Volume F: (\Device\VeraCryptVolumeF) is healthy. No action is needed.
I unfortunately can't use Descriptions when defining an event trigger so these won't work, since Event ID 98 is used for all drives.
Edit: Upgraded to 1.23-Beta2.
Last edit: Derek 2018-07-05
Sorted this out using a WMI script scheduled to run at user logon, please ignore.