# Event ID 4906: The CrashOnAuditFail value has changed.

## Description

This event generates every time CrashOnAuditFail audit flag value was modified.

## Data Dictionary

|Standard Name|Field Name|Type|Description|Sample Value|
|---|---|---|---|---|
|crash_on_audit_fail_value|CrashOnAuditFailValue|integer|contains new value of CrashOnAuditFail flag.|1|

## Reference

[MS Source](https://github.com/MicrosoftDocs/windows-itpro-docs/blob/public/windows/security/threat-protection/auditing/event-4906.md)