File System auditing stopped, no events being audited.
FSService.nptlog lists the following errrors:
[ERROR][CFSFilterManager::LoadDriver(278)] Failed to load driver.
[ERROR][HRXEx::throw_fail(111)] Exception raised : HRESULT=0xE77F1BC0The specified service does not exist.
[EIP: 0xE7884A1F,0xE7884169] 0x800704DB, description = The specified service does not exist.
[ERROR][CFSFilterManager::SendRequest(166)] SendRequest: Failed to connect to driver; exception catched:The specified service does not exist.
[EIP: 0xE7884A1F,0xE7884169] 0x800704DB
[ERROR][CFSFilterManager::SendRequest(190)] SendRequest: Failed to send message (3) to driver; output buffer size = 0; exception caught:The specified service does not exist.
[EIP: 0xE7884A1F,0xE7884169] 0x800704DB
[ERROR][CAuditingServiceModule::PreMessageLoop(253)] Service initialization failed: The specified service does not exist.
[EIP: 0xE7884A1F,0xE7884169] 0x800704DB
Checking the registry key HKLM\SYSTEM\CurrentControlSet\Services\FSDriver, to find that the key is corrupted
DependOnService key, etc is missing.