[+] Collecting Information.. {5EEFEBDB-E90C-423A-8ABF-0241E7C5B87D} MOF Windows Defender Firewall Service - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {5EBB59D1-4739-4E45-872D-B8703956D84B} MOF Deduplication Tracing Provider {7E2DBFC7-41E8-4987-BCA7-76CADFAD765F} MOF FD WSDAPI Trace - keyword: 0x1: DUMMY: DUMMY Flag {485E7DE9-0A80-11D8-AD15-505054503030} MOF UMDF - Framework Trace - keyword: 0x1: FX_TRACE_API: FX_TRACE_API Flag 0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag 0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag 0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag 0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag 0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag 0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag 0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag 0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag 0x200: FX_TRACE_IO: FX_TRACE_IO Flag 0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag 0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag 0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag 0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag 0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag 0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag 0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag 0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag 0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag 0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag 0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag 0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag 0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag 0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag 0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag 0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag 0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag 0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag 0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag 0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag 0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag 0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {1AB5AC29-037F-43A1-9484-78C9DB61F869} MOF WPD ShellServiceObject Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_Perf: WPD_Perf Flag 0x200: WPD_F2: WPD_F2 Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: WPD_F4: WPD_F4 Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: WPDShServiceObj_f1: WPDShServiceObj_f1 Flag 0x20000: WPDShServiceObj_f2: WPDShServiceObj_f2 Flag {127D46AF-4AD3-489F-9165-F00BA64D5467} MOF File Kernel Trace; Volume To Log - keyword: 0x1: a: A 0x2: b: B 0x4: c: C 0x8: d: D 0x10: e: E 0x20: f: F 0x40: g: G 0x80: h: H 0x100: i: I 0x200: j: J 0x400: k: K 0x800: l: L 0x1000: m: M 0x2000: n: N 0x4000: o: O 0x8000: p: P 0x10000: q: Q 0x20000: r: R 0x40000: s: S 0x80000: t: T 0x100000: u: U 0x200000: v: V 0x400000: w: W 0x800000: x: X 0x1000000: y: Y 0x2000000: z: Z 0x4000000: all: All 0x8000000: local: Local 0x10000000: network: Network {0DD082C4-66F2-271F-74BA-2BF1F9F65C66} MOF OLEDB.1 {E2A24A32-00DC-4025-9689-C108C01991C5} MOF EA IME API - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: EAAPI: EAAPI Flag 0x8: EntryPoint: EntryPoint Flag 0x10: ImeDDI: ImeDDI Flag 0x20: TipInterface: TipInterface Flag 0x40: FileOp: FileOp Flag 0x80: Misc: Misc Flag {791CD79C-65B5-48A3-804C-786048994F47} MOF Microsoft-Windows-OfflineFiles-CscFastSync {935F4AE6-845D-41C6-97FA-380DAD429B72} MOF AuthFw NetShell Plugin - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag {BBA3ADD2-C229-4CDB-AE2B-57EB6966B0C4} MOF Active Directory: Kerberos Client {45350D79-4497-42F1-BD1B-83587575B91A} MOF WPD ClassInstaller Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_Install: WPD_Install Flag 0x200: WPD_F2: WPD_F2 Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: WPD_F4: WPD_F4 Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: WPDCI_feature1: WPDCI_feature1 Flag 0x20000: WPDCI_feature2: WPDCI_feature2 Flag {8E0E93FB-76AD-42EE-8770-B9DFEA596F65} MOF Microsoft-Windows-Fax - keyword: 0x1: Provider: Provider Flag 0x2: Common: Common Flag 0x4: Service: Service Flag 0x8: Print: Print Flag 0x10: Admin: Admin Flag 0x20: Com: Com Flag 0x40: Tapi: Tapi Flag 0x80: Setup: Setup Flag 0x100: FaxClient: FaxClient Flag 0x200: Outlook: Outlook Flag 0x400: Other: Other Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9F} MOF IMAPI2 MSF - keyword: 0x1: MsftDiscFormat2MsfAddress_DebugConstructor: MsftDiscFormat2MsfAddress_DebugConstructor Flag 0x2: MsftDiscFormat2MsfAddress_DebugDestructor: MsftDiscFormat2MsfAddress_DebugDestructor Flag 0x4: MsftDiscFormat2MsfAddress_DebugGeneral: MsftDiscFormat2MsfAddress_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {A0A352C5-B8EC-41E9-9936-8452C1C0A6CF} MOF WPD ClassExtension Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_Install: WPD_Install Flag 0x200: WPD_F2: WPD_F2 Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: WPD_F4: WPD_F4 Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: PortableDeviceClassExtension_f1: PortableDeviceClassExtension_f1 Flag 0x20000: PortableDeviceClassExtension_f2: PortableDeviceClassExtension_f2 Flag {FF9E2BDD-0E24-437C-84BE-7CFCAE635808} MOF UMPass Driver Trace - keyword: 0x1: TraceEntryExit: TraceEntryExit Flag 0x2: TraceIoctl: TraceIoctl Flag 0x4: TraceParameter: TraceParameter Flag 0x8: TraceInit: TraceInit Flag 0x10: TraceInfo: TraceInfo Flag 0x20: TraceDriver: TraceDriver Flag 0x40: TraceCreateClose: TraceCreateClose Flag 0x80: TracePower: TracePower Flag 0x100: TracePnP: TracePnP Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {222962AB-6180-4B88-A825-346B75F2A24A} MOF Heap Trace Provider {DB1D0418-105A-4C77-9A25-8F96A19716A4} MOF FD SSDP Trace - keyword: 0x1: DUMMY: DUMMY Flag {D9131565-E1DD-4C9E-A728-951999C2ADB5} MOF Network Profile Manager - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Informational: Informational Flag 0x8: Verbose: Verbose Flag {485E7DEF-0A80-11D8-AD15-505054503030} MOF UMDF - Lpc Trace - keyword: 0x1: LPC_TRACE_PORT: LPC_TRACE_PORT Flag 0x2: LPC_TRACE_CONNECTION: LPC_TRACE_CONNECTION Flag 0x4: LPC_TRACE_COMMUNICATION: LPC_TRACE_COMMUNICATION Flag 0x8: LPC_TRACE_LPC: LPC_TRACE_LPC Flag 0x10: LPC_TRACE_API: LPC_TRACE_API Flag 0x20: LPC_TRACE_WORKER: LPC_TRACE_WORKER Flag 0x40: LPC_TRACE_LOOKASIDE: LPC_TRACE_LOOKASIDE Flag 0x80: LPC_TRACE_MSG: LPC_TRACE_MSG Flag 0x100: LPC_TRACE_TIMER: LPC_TRACE_TIMER Flag 0x200: LPC_TRACE_RESERVED_09: LPC_TRACE_RESERVED_09 Flag 0x400: LPC_TRACE_RESERVED_0a: LPC_TRACE_RESERVED_0a Flag 0x800: LPC_TRACE_RESERVED_0b: LPC_TRACE_RESERVED_0b Flag 0x1000: LPC_TRACE_RESERVED_0c: LPC_TRACE_RESERVED_0c Flag 0x2000: LPC_TRACE_RESERVED_0d: LPC_TRACE_RESERVED_0d Flag 0x4000: LPC_TRACE_RESERVED_0e: LPC_TRACE_RESERVED_0e Flag 0x8000: LPC_TRACE_RESERVED_0f: LPC_TRACE_RESERVED_0f Flag 0x10000: LPC_TRACE_RESERVED_10: LPC_TRACE_RESERVED_10 Flag 0x20000: LPC_TRACE_RESERVED_11: LPC_TRACE_RESERVED_11 Flag 0x40000: LPC_TRACE_RESERVED_12: LPC_TRACE_RESERVED_12 Flag 0x80000: LPC_TRACE_RESERVED_13: LPC_TRACE_RESERVED_13 Flag 0x100000: LPC_TRACE_RESERVED_14: LPC_TRACE_RESERVED_14 Flag 0x200000: LPC_TRACE_RESERVED_15: LPC_TRACE_RESERVED_15 Flag 0x400000: LPC_TRACE_RESERVED_16: LPC_TRACE_RESERVED_16 Flag 0x800000: LPC_TRACE_RESERVED_17: LPC_TRACE_RESERVED_17 Flag 0x1000000: LPC_TRACE_RESERVED_18: LPC_TRACE_RESERVED_18 Flag 0x2000000: LPC_TRACE_RESERVED_19: LPC_TRACE_RESERVED_19 Flag 0x4000000: LPC_TRACE_RESERVED_1a: LPC_TRACE_RESERVED_1a Flag 0x8000000: LPC_TRACE_RESERVED_1b: LPC_TRACE_RESERVED_1b Flag 0x10000000: LPC_TRACE_RESERVED_1c: LPC_TRACE_RESERVED_1c Flag 0x20000000: LPC_TRACE_RESERVED_1d: LPC_TRACE_RESERVED_1d Flag 0x40000000: LPC_TRACE_RESERVED_1e: LPC_TRACE_RESERVED_1e Flag 0x80000000: LPC_TRACE_FUNCTION: LPC_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {BD568F20-FCCD-B948-054E-DB3421115D61} MOF DBNETLIB.1 {0C5A3172-2248-44FD-B9A6-8389CB1DC56A} MOF WLAN AutoConfig Trace - keyword: 0x1: DOT11_AUTOCONF: DOT11_AUTOCONF Flag 0x2: DOT11_AUTOCONF_CLIENT: DOT11_AUTOCONF_CLIENT Flag 0x4: DOT11_AUTOCONF_UI: DOT11_AUTOCONF_UI Flag 0x8: DOT11_FATMSM: DOT11_FATMSM Flag 0x10: DOT11_COMMON: DOT11_COMMON Flag 0x20: DOT11_WLANGPA: DOT11_WLANGPA Flag 0x40: DOT11_CLASS_COINSTALLER: DOT11_CLASS_COINSTALLER Flag 0x80: DOT11_MSM: DOT11_MSM Flag 0x100: DOT11_MSM_ADAPT: DOT11_MSM_ADAPT Flag 0x200: DOT11_MSM_SCAN: DOT11_MSM_SCAN Flag 0x400: DOT11_MSM_CONNECT: DOT11_MSM_CONNECT Flag 0x800: DOT11_MSM_SECURITY_PKT: DOT11_MSM_SECURITY_PKT Flag {20C46239-D059-4214-A11E-7D6769CBE020} MOF Microsoft-Windows-Remote-FileSystem-Log {D905AC1D-65E7-4242-99EA-FE66A8355DF8} MOF Native WIFI MSM Trace - keyword: 0x1: DOT11_ASSOCIATE: DOT11_ASSOCIATE Flag 0x2: DOT11_ROAMING: DOT11_ROAMING Flag 0x4: DOT11_1X: DOT11_1X Flag 0x8: DOT11_PNP: DOT11_PNP Flag 0x10: DOT11_SCAN: DOT11_SCAN Flag 0x20: DOT11_RECEIVE: DOT11_RECEIVE Flag 0x40: DOT11_SEND: DOT11_SEND Flag 0x80: DOT11_IOCTL: DOT11_IOCTL Flag 0x100: DOT11_OID: DOT11_OID Flag 0x200: DOT11_MISC: DOT11_MISC Flag 0x400: DOT11_UPCALL: DOT11_UPCALL Flag 0x800: DOT11_KEYMGR: DOT11_KEYMGR Flag 0x1000: DOT11_PEER: DOT11_PEER Flag 0x2000: DOT11_SOFTAP: DOT11_SOFTAP Flag 0x4000: DOT11_PAM: DOT11_PAM Flag 0x8000: DOT11_REPEATER: DOT11_REPEATER Flag 0x10000: DOT11_APROUTER: DOT11_APROUTER Flag 0x20000: DOT11_WME: DOT11_WME Flag 0x40000: DOT11_CONFIG: DOT11_CONFIG Flag 0x80000: DOT11_NOTIFY_OBJECT: DOT11_NOTIFY_OBJECT Flag {89D89015-C0DF-414C-BC48-F50E114832BC} MOF Microsoft-Windows-OfflineFiles-CscService {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9E} MOF IMAPI2 Interleave Stream - keyword: 0x1: MsftDiscFormat2StreamInterleave_DebugConstructor: MsftDiscFormat2StreamInterleave_DebugConstructor Flag 0x2: MsftDiscFormat2StreamInterleave_DebugDestructor: MsftDiscFormat2StreamInterleave_DebugDestructor Flag 0x4: MsftDiscFormat2StreamInterleave_DebugGeneral: MsftDiscFormat2StreamInterleave_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {6B510852-3583-4E2D-AFFE-A67F9F223438} MOF Security: Kerberos Authentication - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Trace: Trace Flag 0x8: API: API Flag 0x10: Cred: Credentials Flag 0x20: Context: Context Flag 0x40: LSess: Logon Session Flag 0x80: Referral: Referral Flag 0x100: Logon: Logon Flag 0x200: KDC: KDC Flag 0x400: Context2: Context More Flag 0x800: Time: Time Flag 0x1000: User: User Flag 0x2000: Leaks: Leaks Flag 0x4000: Socket: Socket Flag 0x8000: Spn: SPN cache Flag 0x10000: S4uErr: S4U Error Flag 0x20000: S4U: S4U Trace Flag 0x40000: Bnd: Binding Cache Flag 0x80000: Loopback: Loopback Flag 0x100000: Renew: Ticket Renewal Flag 0x200000: U2U: U2U Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9D} MOF IMAPI2 Concatenate Stream - keyword: 0x1: MsftDiscFormat2StreamConcatenate_DebugConstructor: MsftDiscFormat2StreamConcatenate_DebugConstructor Flag 0x2: MsftDiscFormat2StreamConcatenate_DebugDestructor: MsftDiscFormat2StreamConcatenate_DebugDestructor Flag 0x4: MsftDiscFormat2StreamConcatenate_DebugGeneral: MsftDiscFormat2StreamConcatenate_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {485E7DF0-0A80-11D8-AD15-505054503030} MOF UMDF - Host Process Trace - keyword: 0x1: HOSTPROC_TRACE_API: HOSTPROC_TRACE_API Flag 0x2: HOSTPROC_TRACE_DDI: HOSTPROC_TRACE_DDI Flag 0x4: HOSTPROC_TRACE_GENERAL: HOSTPROC_TRACE_GENERAL Flag 0x8: HOSTPROC_TRACE_OBJECT: HOSTPROC_TRACE_OBJECT Flag 0x10: HOSTPROC_TRACE_DRVMGR: HOSTPROC_TRACE_DRVMGR Flag 0x20: HOSTPROC_TRACE_DRIVER: HOSTPROC_TRACE_DRIVER Flag 0x40: HOSTPROC_TRACE_DEVICE: HOSTPROC_TRACE_DEVICE Flag 0x80: HOSTPROC_TRACE_REQUEST: HOSTPROC_TRACE_REQUEST Flag 0x100: HOSTPROC_TRACE_FILEOBJECT: HOSTPROC_TRACE_FILEOBJECT Flag 0x200: HOSTPROC_TRACE_IO: HOSTPROC_TRACE_IO Flag 0x400: HOSTPROC_TRACE_PNP: HOSTPROC_TRACE_PNP Flag 0x800: HOSTPROC_TRACE_LOADER: HOSTPROC_TRACE_LOADER Flag 0x1000: HOSTPROC_TRACE_IOTARGET: HOSTPROC_TRACE_IOTARGET Flag 0x2000: HOSTPROC_TRACE_FUNC: HOSTPROC_TRACE_FUNC Flag 0x4000: HOSTPROC_TRACE_INIT: HOSTPROC_TRACE_INIT Flag 0x8000: HOSTPROC_TRACE_DISPATCHER: HOSTPROC_TRACE_DISPATCHER Flag 0x10000: HOSTPROC_TRACE_WIN32_DISPATCHER: HOSTPROC_TRACE_WIN32_DISPATCHER Flag 0x20000: HOSTPROC_TRACE_USB_DISPATCHER: HOSTPROC_TRACE_USB_DISPATCHER Flag 0x40000: HOSTPROC_TRACE_REMOTE_DISPATCHER: HOSTPROC_TRACE_REMOTE_DISPATCHER Flag 0x80000: HOSTPROC_RESERVED_13: HOSTPROC_RESERVED_13 Flag 0x100000: HOSTPROC_RESERVED_14: HOSTPROC_RESERVED_14 Flag 0x200000: HOSTPROC_RESERVED_15: HOSTPROC_RESERVED_15 Flag 0x400000: HOSTPROC_RESERVED_16: HOSTPROC_RESERVED_16 Flag 0x800000: HOSTPROC_RESERVED_17: HOSTPROC_RESERVED_17 Flag 0x1000000: HOSTPROC_RESERVED_18: HOSTPROC_RESERVED_18 Flag 0x2000000: HOSTPROC_RESERVED_19: HOSTPROC_RESERVED_19 Flag 0x4000000: HOSTPROC_RESERVED_1a: HOSTPROC_RESERVED_1a Flag 0x8000000: HOSTPROC_RESERVED_1b: HOSTPROC_RESERVED_1b Flag 0x10000000: HOSTPROC_RESERVED_1c: HOSTPROC_RESERVED_1c Flag 0x20000000: HOSTPROC_RESERVED_1d: HOSTPROC_RESERVED_1d Flag 0x40000000: HOSTPROC_RESERVED_1e: HOSTPROC_RESERVED_1e Flag 0x80000000: HOSTPROC_TRACE_FUNCTION: HOSTPROC_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {1FF6B227-2CA7-40F9-9A66-980EADAA602E} MOF WMI_Tracing - keyword: 0x1: _CORE_: _CORE_ Flag 0x2: _ESS_: _ESS_ Flag 0x4: _PROVIDERS_: _PROVIDERS_ Flag 0x8: _DO_NOT_USE_: _DO_NOT_USE_ Flag {CCC64809-6B5F-4C1B-AB39-336904DA9B3B} MOF Microsoft-Windows-LLTD-Mapper - keyword: 0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag 0x2: TRACE_CLASS_INIT: TRACE_CLASS_INIT Flag 0x4: TRACE_CLASS_ENGINE: TRACE_CLASS_ENGINE Flag 0x8: TRACE_CLASS_PACKET: TRACE_CLASS_PACKET Flag 0x10: TRACE_CLASS_PROTOCOL: TRACE_CLASS_PROTOCOL Flag 0x20: TRACE_CLASS_ALGORITHM: TRACE_CLASS_ALGORITHM Flag 0x40: TRACE_CLASS_SESSION: TRACE_CLASS_SESSION Flag 0x80: TRACE_CLASS_TRANSACTION: TRACE_CLASS_TRANSACTION Flag 0x100: TRACE_CLASS_MAPPING: TRACE_CLASS_MAPPING Flag {1311095B-B9FF-497A-8560-2F43CA5438E4} MOF WPD FSDriver Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: PnP: PnP Flag 0x200: Event: Event Flag 0x400: Cancel: Cancel Flag 0x800: Perf: Perf Flag 0x1000: PerfVerbose: PerfVerbose Flag 0x2000: Properties: Properties Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag {1BABEFB4-59CB-49E5-9698-FD38AC830A91} MOF msiscsi_iScsi - keyword: 0x1: iScsiFlagGeneral: iScsiFlagGeneral Flag 0x2: iScsiFlagAdapter: iScsiFlagAdapter Flag 0x4: iScsiFlagUnit: iScsiFlagUnit Flag 0x8: iScsiFlagPnP: iScsiFlagPnP Flag 0x10: iScsiFlagPower: iScsiFlagPower Flag 0x20: iScsiFlagIoctl: iScsiFlagIoctl Flag 0x40: iScsiFlagQueue: iScsiFlagQueue Flag 0x80: iScsiFlagWmi: iScsiFlagWmi Flag 0x100: iScsiFlagTimer: iScsiFlagTimer Flag 0x200: iScsiFlagInit: iScsiFlagInit Flag 0x400: iScsiFlagLock: iScsiFlagLock Flag 0x800: iScsiFlagIsr: iScsiFlagIsr Flag 0x1000: iScsiFlagEnum: iScsiFlagEnum Flag 0x2000: iScsiFlagBoot: iScsiFlagBoot Flag 0x4000: iScsiFlagErl: iScsiFlagErl Flag 0x8000: iScsiFlagNetwork: iScsiFlagNetwork Flag 0x10000: iScsiFlagRadius: iScsiFlagRadius Flag 0x20000: iScsiFlagSockets: iScsiFlagSockets Flag 0x40000: iScsiFlagScsi: iScsiFlagScsi Flag 0x80000: iScsiFlagScsiDataIO: iScsiFlagScsiDataIO Flag 0x100000: iScsiFlagProtocolLogInOut: iScsiFlagProtocolLogInOut Flag 0x200000: iScsiFlagProtocolTMF: iScsiFlagProtocolTMF Flag 0x400000: iScsiFlagProtocolTransfer: iScsiFlagProtocolTransfer Flag 0x800000: iScsiFlagCHAP: iScsiFlagCHAP Flag 0x1000000: iScsiFlagDigest: iScsiFlagDigest Flag 0x2000000: iScsiFlagIpSec: iScsiFlagIpSec Flag 0x4000000: iScsiDebug26: iScsiDebug26 Flag 0x8000000: iScsiDebug27: iScsiDebug27 Flag 0x10000000: iScsiDebug28: iScsiDebug28 Flag 0x20000000: iScsiDebug29: iScsiDebug29 Flag 0x40000000: iScsiDebug30: iScsiDebug30 Flag 0x80000000: iScsiDebug31: iScsiDebug31 Flag {740F3C34-57DF-4BAD-8EEA-72AC69AD5DF5} MOF RefsWppTrace - keyword: 0x1: FATAL: FATAL Flag 0x2: ERROR: ERROR Flag 0x4: WARNING: WARNING Flag 0x8: READ: READ Flag 0x10: WRITE: WRITE Flag 0x20: NONCACHEDIO: NONCACHEDIO Flag 0x40: PAGETABLEWRITE: PAGETABLEWRITE Flag 0x80: FILEID: FILEID Flag 0x100: STATUS: STATUS Flag 0x200: MINSTORE: MINSTORE Flag 0x400: SCRUB: SCRUB Flag 0x800: TREEUPDATE: TREEUPDATE Flag 0x1000: LOG: LOG Flag 0x2000: READCACHE: READCACHE Flag 0x4000: ACTIVITYID: ACTIVITYID Flag 0x8000: COMPACTION: COMPACTION Flag {74A75B02-36D8-EDE6-D10E-95B691503408} MOF RowsetHelper.1 {8A8B5246-6EB6-4339-8B59-B0085B9F4890} MOF Mobility Center Performance Trace - keyword: 0x1: TRACE_PERFORMANCE: TRACE_PERFORMANCE Flag {C5BFFE2E-9D87-D568-A09E-08FC83D0C7C2} MOF SQLOLEDB_1 {F59D1D86-CC03-4736-BC9C-4C7936871B3D} MOF RSS Platform Backgroundsync Trace - keyword: 0x1: Fatal: Fatal Flag 0x2: Error: Error Flag 0x4: Warning: Warning Flag 0x8: Info: Info Flag 0x10: API: API Flag 0x20: FuncCall: FuncCall Flag 0x40: HiFreq: HiFreq Flag {CC85922F-DB41-11D2-9244-006008269001} MOF Local Security Authority (LSA) {725BA9B3-C1F3-4518-AF1B-C8D669191E15} MOF Microsoft-Windows-QoS-WMI-Diag - keyword: 0x1: QOSWMI_TRACE_CALL: QOSWMI_TRACE_CALL Flag 0x2: QOSWMI_TRACE_POLICY: QOSWMI_TRACE_POLICY Flag 0x4: QOSWMI_TRACE_UTILS: QOSWMI_TRACE_UTILS Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors 0x3: Warning: Warnings 0x4: Information: Information 0x5: Verbose: Detailed information {520319A9-B932-4EC7-943C-61E560939101} MOF WLAN Dialog Trace - keyword: 0x1: WLANDLG_TRACE: WLANDLG_TRACE Flag {B6501BA0-C61A-C4E6-6FA2-A4E7F8C8E7A0} MOF MSDASQL_1 {945186BF-3DD6-4F3F-9C8E-9EDD3FC9D558} MOF Disk Class Driver Tracing Provider - keyword: 0x1: TRACE_FLAG_GENERAL: This enables all configuration traces 0x2: TRACE_FLAG_PNP: This enables PNP traces 0x4: TRACE_FLAG_POWER: This enables power traces 0x8: TRACE_FLAG_RW: This enables read/write traces 0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces 0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces 0x40: TRACE_FLAG_WMI: This enables WMI traces 0x80: TRACE_FLAG_TIMER: This enables timer traces 0x100: TRACE_FLAG_INIT: This enables initilization traces 0x200: TRACE_FLAG_LOCK: This enables remove lock traces 0x400: TRACE_FLAG_DEBUG1: This flag is not used 0x800: TRACE_FLAG_DEBUG2: This flag is not used 0x1000: TRACE_FLAG_MCN: This enables media change notification traces 0x2000: TRACE_FLAG_ISR: This enables ISR traces 0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {5C6CE734-1B3E-705E-C2AB-B272D99AAF8F} MOF MSADCO.1 {D5E09122-D0B2-4235-ADC1-C89FAAAF1069} MOF Windows Defender Firewall Driver - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag {7F3FE630-462B-47C5-AB07-67CA84934ABD} MOF WSAT_TraceProvider {A1E89BB0-EF73-4980-8C99-DD15F7271D7E} MOF Sensor ClassExtension Trace - keyword: 0x1: TRACE_NONE: TRACE_NONE Flag 0x2: TRACE_FATAL: TRACE_FATAL Flag 0x4: TRACE_ERROR: TRACE_ERROR Flag 0x8: TRACE_WARNING: TRACE_WARNING Flag 0x10: TRACE_INFORMATION: TRACE_INFORMATION Flag 0x20: TRACE_VERBOSE: TRACE_VERBOSE Flag 0x40: TRACE_RESERVED6: TRACE_RESERVED6 Flag 0x80: TRACE_RESERVED7: TRACE_RESERVED7 Flag 0x100: TRACE_RESERVED8: TRACE_RESERVED8 Flag 0x200: TRACE_RESERVED9: TRACE_RESERVED9 Flag 0x400: TRACE_STACK: TRACE_STACK Flag 0x800: TRACE_RESERVED10: TRACE_RESERVED10 Flag 0x1000: TRACE_UNITTEST: TRACE_UNITTEST Flag 0x2000: TRACE_VERIFICATION: TRACE_VERIFICATION Flag {AD33FA19-F2D2-46D1-8F4C-E3C3087E45AD} MOF FWPKCLNT Trace Provider {72891EE8-C088-4331-9745-5BF4AA7B344D} MOF WPD Composite Driver Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: PnP: PnP Flag 0x200: Event: Event Flag 0x400: Cancel: Cancel Flag 0x800: Perf: Perf Flag 0x1000: PerfVerbose: PerfVerbose Flag 0x2000: Bulk: Bulk Flag 0x4000: Power: Power Flag 0x8000: Audit: Audit Flag 0x10000: WPDMTP_feature1: WPDMTP_feature1 Flag 0x20000: WPDMTP_feature2: WPDMTP_feature2 Flag {A42C7BD1-5AF3-4B32-9BC6-B85EB31D3F4A} MOF WPD ShellExtension Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_Perf: WPD_Perf Flag 0x200: WPD_F2: WPD_F2 Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: WPD_F4: WPD_F4 Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: WPDNSE_REFCOUNT: WPDNSE_REFCOUNT Flag 0x20000: WPDNSE_DLLREFCOUNT: WPDNSE_DLLREFCOUNT Flag 0x40000: WPDNSE_CHANGENOTIFY: WPDNSE_CHANGENOTIFY Flag 0x80000: WPDNSE_TRANSCODE: WPDNSE_TRANSCODE Flag {564F1E24-FC86-28E1-74F8-5CA0D950BEE0} MOF MSDAREM.1 {3B9E3DA4-70B8-46D3-9EF2-3DDF128BDED8} MOF SD Bus Trace - keyword: 0x1: SDBUS_DEBUG_FAIL: SDBUS_DEBUG_FAIL Flag 0x2: SDBUS_DEBUG_WARNING: SDBUS_DEBUG_WARNING Flag 0x4: SDBUS_DEBUG_INFO: SDBUS_DEBUG_INFO Flag 0x8: SDBUS_DEBUG_PNP: SDBUS_DEBUG_PNP Flag 0x10: SDBUS_DEBUG_POWER: SDBUS_DEBUG_POWER Flag 0x20: SDBUS_DEBUG_ENUM: SDBUS_DEBUG_ENUM Flag 0x40: SDBUS_DEBUG_DEVINIT: SDBUS_DEBUG_DEVINIT Flag 0x80: SDBUS_DEBUG_DEVCFG: SDBUS_DEBUG_DEVCFG Flag 0x100: SDBUS_DEBUG_INTERFACE: SDBUS_DEBUG_INTERFACE Flag 0x200: SDBUS_DEBUG_DEVCMD: SDBUS_DEBUG_DEVCMD Flag 0x400: SDBUS_DEBUG_EVENT: SDBUS_DEBUG_EVENT Flag 0x800: SDBUS_DEBUG_CARD_EVT: SDBUS_DEBUG_CARD_EVT Flag 0x1000: SDBUS_DEBUG_SDCMD: SDBUS_DEBUG_SDCMD Flag 0x2000: SDBUS_DEBUG_SDRESP: SDBUS_DEBUG_SDRESP Flag 0x4000: SDBUS_DEBUG_DEVICE: SDBUS_DEBUG_DEVICE Flag 0x8000: SDBUS_DEBUG_RECOVERY: SDBUS_DEBUG_RECOVERY Flag 0x10000: SDBUS_DEBUG_TRANSFER: SDBUS_DEBUG_TRANSFER Flag 0x20000: SDBUS_DEBUG_INACTIVITY: SDBUS_DEBUG_INACTIVITY Flag 0x40000: SDBUS_DEBUG_EVT_HANDLING: SDBUS_DEBUG_EVT_HANDLING Flag 0x80000: SDBUS_DEBUG_WORKENG: SDBUS_DEBUG_WORKENG Flag 0x100000: SDBUS_DEBUG_WORKENG2: SDBUS_DEBUG_WORKENG2 Flag 0x200000: SDBUS_DEBUG_DUMP_REGS: SDBUS_DEBUG_DUMP_REGS Flag {C100BECE-D33A-4A4B-BF23-BBEF4663D017} MOF Windows Connect Now - keyword: 0x1: TR_DEFAULT: TR_DEFAULT Flag 0x2: TR_SM: TR_SM Flag 0x4: TR_BUF: TR_BUF Flag 0x8: TR_TLV: TR_TLV Flag 0x10: TR_CACHE: TR_CACHE Flag 0x20: TR_DLL: TR_DLL Flag 0x40: TR_RPC: TR_RPC Flag 0x80: TR_POLICY: TR_POLICY Flag 0x100: TR_PROTO: TR_PROTO Flag 0x200: TR_CRYPTO: TR_CRYPTO Flag 0x400: TR_WSD: TR_WSD Flag 0x800: TR_EAP: TR_EAP Flag 0x1000: TR_TRANS: TR_TRANS Flag 0x2000: TR_WQ: TR_WQ Flag 0x4000: TR_UTIL: TR_UTIL Flag 0x8000: TR_COM: TR_COM Flag 0x10000: TR_FD: TR_FD Flag 0x20000: TR_WIZ: TR_WIZ Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps 0x6: Enter/Exit: Function enter/exit {D75D8303-6C21-4BDE-9C98-ECC6320F9291} MOF File Kernel Trace; Operation Set 1 - keyword: 0x1: create: Create 0x2: createnamedpipe: Create Named Pipe 0x4: close: Close 0x8: read: Read 0x10: write: Write 0x20: queryinfo: Query Information 0x40: setinfo: Set Information 0x80: queryea: Query EA 0x100: setea: Set EA 0x200: flushbuffers: Flush Buffers 0x400: queryvolinfo: Query Volume Information 0x800: setvolinfo: Set Volume Information 0x1000: directorycontrol: Directory Control 0x2000: filesystemcontrol: File System Control 0x4000: devicecontrol: Device Control 0x8000: internaldevicecontrol: Internal Device Control 0x10000: shutdown: Shutdown 0x20000: lockcontrol: Lock Control 0x40000: cleanup: Cleanup 0x80000: createmailslot: Create Mailslot 0x100000: querysecurity: Query Security 0x200000: setsecurity: Set Security 0x400000: power: Power 0x800000: systemcontrol: System Control 0x1000000: devicechange: Device Change 0x2000000: queryquota: Query Quota 0x4000000: setquota: Set Quota 0x8000000: pnp: PNP {C861D0E2-A2C1-4D36-9F9C-970BAB943A12} MOF Thread Pool {8A3CF0B5-E0BC-450B-AE4B-61728FFA1D58} MOF Wireless Client Trace - keyword: 0x1: Fatal: Fatal Flag 0x2: Error: Error Flag 0x4: Warning: Warning Flag 0x8: Information: Information Flag 0x10: Trace: Trace Flag 0x20: Noise: Noise Flag 0x40: Perf: Perf Flag {07E397EC-C240-4ED7-8A2A-B9FF0FE5D581} MOF IMAPI2 Raw Image Writer - keyword: 0x1: MsftDiscFormat2RawImage_DebugConstructor: MsftDiscFormat2RawImage_DebugConstructor Flag 0x2: MsftDiscFormat2RawImage_DebugDestructor: MsftDiscFormat2RawImage_DebugDestructor Flag 0x4: MsftDiscFormat2RawImage_DebugAddRef: MsftDiscFormat2RawImage_DebugAddRef Flag 0x8: MsftDiscFormat2RawImage_DebugRelease: MsftDiscFormat2RawImage_DebugRelease Flag 0x10: MsftDiscFormat2RawImage_DebugGeneral: MsftDiscFormat2RawImage_DebugGeneral Flag 0x20: MsftDiscFormat2RawImage_DebugX: MsftDiscFormat2RawImage_DebugX Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {6CC2405D-817F-4886-886F-D5D1643210F0} MOF Microsoft-Windows-NetAdapterCim-Diag - keyword: 0x1: NDISWMI_TRACE_ADVPROP: NDISWMI_TRACE_ADVPROP Flag 0x2: NDISWMI_TRACE_BINDING: NDISWMI_TRACE_BINDING Flag 0x4: NDISWMI_TRACE_CALL: NDISWMI_TRACE_CALL Flag 0x8: NDISWMI_TRACE_CHKSUM: NDISWMI_TRACE_CHKSUM Flag 0x10: NDISWMI_TRACE_ENCAP: NDISWMI_TRACE_ENCAP Flag 0x20: NDISWMI_TRACE_GENERAL: NDISWMI_TRACE_GENERAL Flag 0x40: NDISWMI_TRACE_HWINFO: NDISWMI_TRACE_HWINFO Flag 0x80: NDISWMI_TRACE_LSO: NDISWMI_TRACE_LSO Flag 0x100: NDISWMI_TRACE_NETCFG: NDISWMI_TRACE_NETCFG Flag 0x200: NDISWMI_TRACE_POWER: NDISWMI_TRACE_POWER Flag 0x400: NDISWMI_TRACE_QOS: NDISWMI_TRACE_QOS Flag 0x800: NDISWMI_TRACE_RDMA: NDISWMI_TRACE_RDMA Flag 0x1000: NDISWMI_TRACE_RSC: NDISWMI_TRACE_RSC Flag 0x2000: NDISWMI_TRACE_RSS: NDISWMI_TRACE_RSS Flag 0x4000: NDISWMI_TRACE_SRIOV: NDISWMI_TRACE_SRIOV Flag 0x8000: NDISWMI_TRACE_STATS: NDISWMI_TRACE_STATS Flag 0x10000: NDISWMI_TRACE_VMQ: NDISWMI_TRACE_VMQ Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors 0x3: Warning: Warnings 0x4: Information: Information 0x5: Verbose: Detailed information {94335EB3-79EA-44D5-8EA9-306F49B3A040} MOF Downlevel IPsec Service - keyword: 0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag 0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag 0x4: TRC_INFORMATION: TRC_INFORMATION Flag 0x8: TRC_WARNING: TRC_WARNING Flag 0x10: TRC_ERROR: TRC_ERROR Flag {485E7DE9-0A80-11D8-AD15-505054503030} MOF Wudfx02000_KmdfTraceGuid - keyword: 0x1: FX_TRACE_API: FX_TRACE_API Flag 0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag 0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag 0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag 0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag 0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag 0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag 0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag 0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag 0x200: FX_TRACE_IO: FX_TRACE_IO Flag 0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag 0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag 0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag 0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag 0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag 0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag 0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag 0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag 0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag 0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag 0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag 0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag 0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag 0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag 0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag 0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag 0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag 0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag 0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag 0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag 0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag 0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {54DEA73A-ED1F-42A4-AF71-3E63D056F174} MOF Circular Kernel Session Provider - keyword: 0x1: process: Process creations/deletions 0x2: thread: Thread creations/deletions 0x4: img: Image load 0x8: proccntr: Process counters 0x10: cswitch: Context switches 0x20: dpc: Deferred procedure calls 0x40: isr: Interrupts 0x80: syscall: System calls 0x100: disk: Disk IO 0x200: file: File details 0x400: diskinit: Disk IO entry 0x800: dispatcher: Dispatcher operations 0x1000: pf: Page faults 0x2000: hf: Hard page faults 0x4000: virtalloc: Virtual memory allocations 0x10000: net: Network TCP/IP 0x20000: registry: Registry details 0x100000: alpc: ALPC 0x200000: splitio: Split IO 0x800000: driver: Driver delays 0x1000000: profile: Sample based profiling 0x2000000: fileiocompletion: File IO completion 0x4000000: fileio: File IO {76DBA919-5A36-FC80-2CAD-3185532B7CB1} MOF MSADCE.1 {19EE4CF9-5322-4843-B0D8-BAB81BE4E81E} MOF Microsoft-Windows-OfflineFiles-CscApi {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7EA0} MOF IMAPI2 Multisession Sequential - keyword: 0x1: MsftMultisessionSequential_DebugConstructor: MsftMultisessionSequential_DebugConstructor Flag 0x2: MsftMultisessionSequential_DebugDestructor: MsftMultisessionSequential_DebugDestructor Flag 0x4: MsftMultisessionSequential_DebugGeneral: MsftMultisessionSequential_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {D451642C-63A6-11D7-9720-00B0D03E0347} MOF Windows Winlogon Trace - keyword: 0x1: Core: Core Flag 0x2: Setup: Setup Flag 0x4: DataStore: DataStore Flag 0x8: Machine: Machine Flag 0x10: Session: Session Flag 0x20: User: User Flag 0x40: WMsg: WMsg Flag 0x80: Sas: Sas Flag 0x100: StateTrace: StateTrace Flag 0x200: Job: Job Flag 0x400: Timeout: Timeout Flag 0x800: Power: Power Flag 0x1000: Logon: Logon Flag 0x2000: Logoff: Logoff Flag 0x4000: Lock: Lock Flag 0x8000: Unlock: Unlock Flag 0x10000: ChangePassword: ChangePassword Flag 0x20000: ScreenSaver: ScreenSaver Flag 0x40000: Accessibility: Accessibility Flag 0x80000: SLActivate: SLActivate Flag {651D672B-E11F-41B7-ADD3-C2F6A4023672} MOF IPMI Provider Trace - keyword: 0x1: Function: Function Flag 0x2: FunctionParameter: FunctionParameter Flag 0x4: FunctionDetail: FunctionDetail Flag {AEFE45F4-8548-42B4-B1C8-25673B07AD8B} MOF PrintFilterPipelineSvc_ObjectsGuid - keyword: 0x1: Generic_Exception: Generic_Exception Flag 0x2: Generic_Error: Generic_Error Flag 0x4: Generic_Warn: Generic_Warn Flag 0x8: PipeMgr_Trace: PipeMgr_Trace Flag 0x10: PipeMgr_Reach: PipeMgr_Reach Flag 0x20: PipeBuf_Trace: PipeBuf_Trace Flag 0x40: PTConv_Trace: PTConv_Trace Flag 0x80: Framework_Trace: Framework_Trace Flag 0x100: Filter_Trace: Filter_Trace Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {8C50FA6E-394E-4B47-B6D1-A880A5F225A2} MOF RSS Platform Trace - keyword: 0x1: Fatal: Fatal Flag 0x2: Error: Error Flag 0x4: Warning: Warning Flag 0x8: Info: Info Flag 0x10: API: API Flag 0x20: FuncCall: FuncCall Flag 0x40: HiFreq: HiFreq Flag {2D333977-52E1-4886-801F-2D59EB8060AF} MOF IrDA Protocol Driver - keyword: 0x1: DBG_0x00000001: DBG_0x00000001 Flag 0x2: DBG_NDIS: DBG_NDIS Flag 0x4: DBG_TIMER: DBG_TIMER Flag 0x8: DBG_IRMAC: DBG_IRMAC Flag 0x10: DBG_0x00000010: DBG_0x00000010 Flag 0x20: DBG_IRLAP: DBG_IRLAP Flag 0x40: DBG_IRLAPLOG: DBG_IRLAPLOG Flag 0x80: DBG_RXFRAME: DBG_RXFRAME Flag 0x100: DBG_TXFRAME: DBG_TXFRAME Flag 0x200: DBG_IRLMP: DBG_IRLMP Flag 0x400: DBG_IRLMP_CONN: DBG_IRLMP_CONN Flag 0x800: DBG_IRLMP_CRED: DBG_IRLMP_CRED Flag 0x1000: DBG_IRLMP_IAS: DBG_IRLMP_IAS Flag 0x2000: DBG_DISCOVERY: DBG_DISCOVERY Flag 0x4000: DBG_PRINT: DBG_PRINT Flag 0x8000: DBG_ADDR: DBG_ADDR Flag 0x10000: DBG_0x00010000: DBG_0x00010000 Flag 0x20000: DBG_REF: DBG_REF Flag 0x40000: DBG_TDI: DBG_TDI Flag 0x80000: DBG_TDI_IRP: DBG_TDI_IRP Flag 0x100000: DBG_0x00100000: DBG_0x00100000 Flag 0x200000: DBG_ALLOC: DBG_ALLOC Flag 0x400000: DBG_FUNCTION: DBG_FUNCTION Flag 0x800000: DBG_WARN: DBG_WARN Flag 0x1000000: DBG_ERROR: DBG_ERROR Flag {9C88041D-349D-4647-8BFD-2C0A167BFE58} MOF MMC - keyword: 0x1: DUMMY: DUMMY Flag {BBBC81CF-E219-469C-A405-F820EE496194} MOF Microsoft-Windows-P2P-PNRP - keyword: 0x1: NSP: NSP Flag 0x2: PNRPHLP: PNRPHLP Flag 0x4: API: API Flag 0x8: MT: MT Flag 0x10: PROTO: PROTO Flag 0x20: CPAST: CPAST Flag 0x40: CACHE: CACHE Flag 0x80: CLOUD: CLOUD Flag 0x100: CPASEC: CPASEC Flag 0x200: PERF: PERF Flag 0x400: RESOLVE: RESOLVE Flag 0x800: IM: IM Flag - level: 0x1: Error: Severe errors that need logging 0x2: Warning: Warnings such as allocation failure 0x3: Information: Includes non-error cases 0x4: Verbose: Detailed traces from intermediate steps {D5418619-C167-44D9-BC36-765BEB5D55F3} MOF Microsoft-Windows-OfflineFiles-CscDclUser {94335EB3-79EA-44D5-8EA9-306F49B3A041} MOF Downlevel IPsec API - keyword: 0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag 0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag 0x4: TRC_INFORMATION: TRC_INFORMATION Flag 0x8: TRC_WARNING: TRC_WARNING Flag 0x10: TRC_ERROR: TRC_ERROR Flag {3AC66736-CC59-4CFF-8115-8DF50E39816B} MOF Critical Section Trace Provider {485E7DEE-0A80-11D8-AD15-505054503030} MOF UMDF - Reflector Trace - keyword: 0x1: RD_TRACE_DRIVER: RD_TRACE_DRIVER Flag 0x2: RD_TRACE_FDO: RD_TRACE_FDO Flag 0x4: RD_TRACE_DEVICE: RD_TRACE_DEVICE Flag 0x8: RD_TRACE_CONTROL: RD_TRACE_CONTROL Flag 0x10: RD_TRACE_DMCONTROL: RD_TRACE_DMCONTROL Flag 0x20: RD_TRACE_LPC: RD_TRACE_LPC Flag 0x40: RD_TRACE_DISPATCH: RD_TRACE_DISPATCH Flag 0x80: RD_TRACE_PNP: RD_TRACE_PNP Flag 0x100: RD_TRACE_PROCESS: RD_TRACE_PROCESS Flag 0x200: RD_TRACE_IO: RD_TRACE_IO Flag 0x400: RD_TRACE_CANCEL: RD_TRACE_CANCEL Flag 0x800: RD_TRACE_DEVIF: RD_TRACE_DEVIF Flag 0x1000: RD_TRACE_WMI: RD_TRACE_WMI Flag 0x2000: RD_TRACE_RESERVED_0d: RD_TRACE_RESERVED_0d Flag 0x4000: RD_TRACE_RESERVED_0e: RD_TRACE_RESERVED_0e Flag 0x8000: RD_TRACE_RESERVED_0f: RD_TRACE_RESERVED_0f Flag 0x10000: RD_TRACE_RESERVED_10: RD_TRACE_RESERVED_10 Flag 0x20000: RD_TRACE_RESERVED_11: RD_TRACE_RESERVED_11 Flag 0x40000: RD_TRACE_RESERVED_12: RD_TRACE_RESERVED_12 Flag 0x80000: RD_TRACE_RESERVED_13: RD_TRACE_RESERVED_13 Flag 0x100000: RD_TRACE_RESERVED_14: RD_TRACE_RESERVED_14 Flag 0x200000: RD_TRACE_RESERVED_15: RD_TRACE_RESERVED_15 Flag 0x400000: RD_TRACE_RESERVED_16: RD_TRACE_RESERVED_16 Flag 0x800000: RD_TRACE_RESERVED_17: RD_TRACE_RESERVED_17 Flag 0x1000000: RD_TRACE_RESERVED_18: RD_TRACE_RESERVED_18 Flag 0x2000000: RD_TRACE_RESERVED_19: RD_TRACE_RESERVED_19 Flag 0x4000000: RD_TRACE_RESERVED_1a: RD_TRACE_RESERVED_1a Flag 0x8000000: RD_TRACE_RESERVED_1b: RD_TRACE_RESERVED_1b Flag 0x10000000: RD_TRACE_RESERVED_1c: RD_TRACE_RESERVED_1c Flag 0x20000000: RD_TRACE_RESERVED_1d: RD_TRACE_RESERVED_1d Flag 0x40000000: RD_TRACE_RESERVED_1e: RD_TRACE_RESERVED_1e Flag 0x80000000: RD_TRACE_FUNCTION: RD_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {5A1600D2-68E5-4DE7-BCF4-1C2D215FE0FE} MOF FWPUCLNT Trace Provider {A9C1A3B7-54F3-4724-ADCE-58BC03E3BC78} MOF Windows Media Player Trace - keyword: 0x1: _DH_DEFAULT: _DH_DEFAULT Flag 0x2: _DH_WMP_DPF: _DH_WMP_DPF Flag 0x4: _DH_WMPGRAPH: _DH_WMPGRAPH Flag 0x8: _DH_WMPRENDER: _DH_WMPRENDER Flag 0x10: _DH_PLUGINS: _DH_PLUGINS Flag 0x20: _DH_PLAYER_FULLSCREEN: _DH_PLAYER_FULLSCREEN Flag 0x40: _DH_WMPDMOWRAPPER: _DH_WMPDMOWRAPPER Flag 0x80: _DH_WMPCD_DPF: _DH_WMPCD_DPF Flag 0x100: _DH_LAYOUTMAN_DOCKING: _DH_LAYOUTMAN_DOCKING Flag 0x200: _DH_WMHTML: _DH_WMHTML Flag 0x400: _DH_WMP_SYNC: _DH_WMP_SYNC Flag 0x800: _DH_WMP_DEVICE_CAPS: _DH_WMP_DEVICE_CAPS Flag 0x1000: _DH_WMP_DRM: _DH_WMP_DRM Flag 0x2000: _DH_WMP_DEVICES: _DH_WMP_DEVICES Flag 0x4000: _DH_WMP_CDBURN: _DH_WMP_CDBURN Flag 0x8000: _DH_WMP_CACHE_PROVIDER: _DH_WMP_CACHE_PROVIDER Flag 0x10000: _DH_WMP_LIBRARY: _DH_WMP_LIBRARY Flag 0x20000: _DH_WMP_SYNCMGR: _DH_WMP_SYNCMGR Flag 0x40000: _DH_WMP_SYNCWIZ: _DH_WMP_SYNCWIZ Flag 0x80000: _DH_WMP_LISL: _DH_WMP_LISL Flag 0x100000: _DH_WMP_SYNC_STATUS: _DH_WMP_SYNC_STATUS Flag 0x200000: _DH_WMP_HME: _DH_WMP_HME Flag 0x400000: _DH_WMP_MLS: _DH_WMP_MLS Flag 0x800000: _DH_WMP_FIRMWARE_UPDATE: _DH_WMP_FIRMWARE_UPDATE Flag 0x1000000: _DH_WMP_SYNC_PERF: _DH_WMP_SYNC_PERF Flag 0x2000000: _DH_WMP_SQM: _DH_WMP_SQM Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {106B464D-8043-46B1-8CB8-E92A0CD7A560} MOF IKEEXT Trace Provider {467C1914-37F0-4C7D-B6DB-5CD7DFE7BD5E} MOF Mount Manager Trace - keyword: 0x1: TracingGeneral: TracingGeneral Flag 0x2: TracingIoctl: TracingIoctl Flag 0x4: TracingMemory: TracingMemory Flag 0x8: TracingCache: TracingCache Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {EB004A05-9B1A-11D4-9123-0050047759BC} MOF TCPIP Service Trace - keyword: 0x1: NETIO_TRACE_SEND: NETIO_TRACE_SEND Flag 0x2: NETIO_TRACE_RECEIVE: NETIO_TRACE_RECEIVE Flag 0x4: NETIO_TRACE_INTERFACE: NETIO_TRACE_INTERFACE Flag 0x8: NETIO_TRACE_NMR: NETIO_TRACE_NMR Flag 0x10: NETIO_TRACE_NSI: NETIO_TRACE_NSI Flag 0x20: NETIO_TRACE_FRAMING: NETIO_TRACE_FRAMING Flag 0x40: NETIO_TRACE_NETWORK: NETIO_TRACE_NETWORK Flag 0x80: NETIO_TRACE_TRANSPORT: NETIO_TRACE_TRANSPORT Flag 0x100: NETIO_TRACE_TUNNEL: NETIO_TRACE_TUNNEL Flag 0x200: NETIO_TRACE_TDX: NETIO_TRACE_TDX Flag 0x400: NETIO_TRACE_LEGACY: NETIO_TRACE_LEGACY Flag 0x800: NETIO_TRACE_PACER: NETIO_TRACE_PACER Flag 0x1000: WFP_TRACE_BASE: WFP_TRACE_BASE Flag 0x2000: WFP_TRACE_FE: WFP_TRACE_FE Flag 0x4000: WFP_TRACE_STM: WFP_TRACE_STM Flag 0x8000: WFP_TRACE_IPSEC: WFP_TRACE_IPSEC Flag 0x10000: WFP_TRACE_ALE: WFP_TRACE_ALE Flag 0x20000: NETIO_TRACE_EQOS: NETIO_TRACE_EQOS Flag {9E814AAD-3204-11D2-9A82-006008A86939} MOF Windows Kernel Trace - keyword: 0x1: process: Process creations/deletions 0x2: thread: Thread creations/deletions 0x4: img: Image load 0x8: proccntr: Process counters 0x10: cswitch: Context switches 0x20: dpc: Deferred procedure calls 0x40: isr: Interrupts 0x80: syscall: System calls 0x100: disk: Disk IO 0x200: file: File details 0x400: diskinit: Disk IO entry 0x800: dispatcher: Dispatcher operations 0x1000: pf: Page faults 0x2000: hf: Hard page faults 0x4000: virtalloc: Virtual memory allocations 0x10000: net: Network TCP/IP 0x20000: registry: Registry details 0x100000: alpc: ALPC 0x200000: splitio: Split IO 0x800000: driver: Driver delays 0x1000000: profile: Sample based profiling 0x2000000: fileiocompletion: File IO completion 0x4000000: fileio: File IO {7EA56435-3F2F-3F63-A829-F0B35B5CAD41} MOF ADOMD.1 {D08BD885-501E-489A-BAC6-B7D24BFE6BBF} MOF ATA Port Driver Tracing Provider - keyword: 0x1: TRACE_FLAG_GENERAL: This enables all configuration traces 0x2: TRACE_FLAG_PNP: This enables PNP traces 0x4: TRACE_FLAG_POWER: This enables power traces 0x8: TRACE_FLAG_RW: This enables read/write traces 0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces 0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces 0x40: TRACE_FLAG_WMI: This enables WMI traces 0x80: TRACE_FLAG_TIMER: This enables timer traces 0x100: TRACE_FLAG_INIT: This enables initilization traces 0x200: TRACE_FLAG_LOCK: This enables remove lock traces 0x400: TRACE_FLAG_DEBUG1: This flag is not used 0x800: TRACE_FLAG_DEBUG2: This flag is not used 0x1000: TRACE_FLAG_MCN: This enables media change notification traces 0x2000: TRACE_FLAG_ISR: This enables ISR traces 0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {3333D2FC-3AEE-479F-985D-8BEBAE552B99} MOF Microsoft-Windows-P2P-Mesh - keyword: 0x1: PEER: PEER Flag 0x2: LINKMAN: LINKMAN Flag 0x4: GRAPHMAIN: GRAPHMAIN Flag 0x8: DATABASE: DATABASE Flag 0x10: GRAPHOBJ: GRAPHOBJ Flag 0x20: FLOODMAN: FLOODMAN Flag 0x40: SOCKMAN: SOCKMAN Flag 0x80: GROUPING_GO: GROUPING_GO Flag 0x100: EVENT: EVENT Flag 0x200: GROUPING: GROUPING Flag 0x400: GSM: GSM Flag 0x800: SSP: SSP Flag - level: 0x1: Error: Severe errors that need logging 0x2: Warning: Warnings such as allocation failure 0x3: Information: Includes non-error cases 0x4: Verbose: Detailed traces from intermediate steps {637A0F36-DFF5-4B2F-83DD-B106C1C725E2} MOF WLAN Diagnostics Trace - keyword: 0x1: WD_LOG_FLAG_INIT: WD_LOG_FLAG_INIT Flag 0x2: WD_LOG_FLAG_RPC: WD_LOG_FLAG_RPC Flag 0x4: WD_LOG_FLAG_EVENT: WD_LOG_FLAG_EVENT Flag 0x8: WD_LOG_FLAG_INTERFACE: WD_LOG_FLAG_INTERFACE Flag 0x10: WD_LOG_FLAG_CONNECTION: WD_LOG_FLAG_CONNECTION Flag 0x20: WD_LOG_FLAG_CONTROL: WD_LOG_FLAG_CONTROL Flag 0x40: WD_LOG_FLAG_LOCKS: WD_LOG_FLAG_LOCKS Flag 0x80: WD_LOG_FLAG_MEMORY: WD_LOG_FLAG_MEMORY Flag 0x100: WD_LOG_FLAG_REFERENCES: WD_LOG_FLAG_REFERENCES Flag 0x200: WD_LOG_FLAG_FUNCTION_TRACE: WD_LOG_FLAG_FUNCTION_TRACE Flag 0x400: WD_LOG_FLAG_ASSERT: WD_LOG_FLAG_ASSERT Flag {5E23B838-5B71-47E6-B123-6FE02EF573EF} MOF Microsoft-Windows-OfflineFiles-CscUM {361F227C-AA14-4D19-9007-0C8D1A8A541B} MOF Microsoft-Windows-OfflineFiles-CscNetApi {D4199645-41BE-4FD5-9D71-A612C508FDC6} MOF RdpCore Api Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag 0x8: TS_TRACE_LEVEL_TEST: TS_TRACE_LEVEL_TEST Flag {04C6E16D-B99F-4A3A-9B3E-B8325BBC781E} MOF Windows Remote Management Trace - keyword: 0x1: SOAPTraceClient: SOAPTraceClient Flag 0x2: SOAPTraceListener: SOAPTraceListener Flag 0x4: Reserved2: Reserved2 Flag 0x8: Reserved3: Reserved3 Flag 0x10: Reserved4: Reserved4 Flag 0x20: Reserved5: Reserved5 Flag 0x40: Performance: Performance Flag 0x80: Assert: Assert Flag 0x100: RemotingError: RemotingError Flag 0x200: RemotingDebug: RemotingDebug Flag 0x400: ClientError: ClientError Flag 0x800: ClientDebug: ClientDebug Flag 0x1000: PSLError: PSLError Flag 0x2000: PSLDebug: PSLDebug Flag 0x4000: SubscriptionError: SubscriptionError Flag 0x8000: SubscriptionDebug: SubscriptionDebug Flag 0x10000: CatalogDebug: CatalogDebug Flag 0x20000: CatalogError: CatalogError Flag 0x40000: WSManWmiProvDebug: WSManWmiProvDebug Flag 0x80000: WSManWmiProvError: WSManWmiProvError Flag 0x100000: ConfigDebug: ConfigDebug Flag 0x200000: ConfigError: ConfigError Flag 0x400000: UtilError: UtilError Flag 0x800000: UtilDebug: UtilDebug Flag 0x1000000: WSManAutoError: WSManAutoError Flag 0x2000000: WSManAutoDebug: WSManAutoDebug Flag 0x4000000: WSManAutoFlow: WSManAutoFlow Flag 0x8000000: EventCount: EventCount Flag 0x10000000: SecurityDebug: SecurityDebug Flag 0x20000000: Unittest: Unittest Flag 0x40000000: MemoryDebug: MemoryDebug Flag {6710597F-7319-4AAE-9B85-C8D87136A56B} MOF SBP2 Port Driver Tracing Provider - keyword: 0x1: TRACE_FLAG_GENERAL: This enables all configuration traces 0x2: TRACE_FLAG_PNP: This enables PNP traces 0x4: TRACE_FLAG_POWER: This enables power traces 0x8: TRACE_FLAG_RW: This enables read/write traces 0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces 0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces 0x40: TRACE_FLAG_WMI: This enables WMI traces 0x80: TRACE_FLAG_TIMER: This enables timer traces 0x100: TRACE_FLAG_INIT: This enables initilization traces 0x200: TRACE_FLAG_LOCK: This enables remove lock traces 0x400: TRACE_FLAG_DEBUG1: This flag is not used 0x800: TRACE_FLAG_DEBUG2: This flag is not used 0x1000: TRACE_FLAG_MCN: This enables media change notification traces 0x2000: TRACE_FLAG_ISR: This enables ISR traces 0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {F1C521CA-DA82-4D79-9EE4-D7A375723B68} MOF FDPHost Service Trace - keyword: 0x1: DUMMY: DUMMY Flag {2B240425-3141-43EE-931F-EC9F997C7D7E} MOF RSS Platform Perf Trace - keyword: 0x1: Perf: Perf Flag {058DD951-7604-414D-A5D6-A56D35367A46} MOF File Kernel Trace; Operation Set 2 - keyword: 0x1: acquireforsectionsynchronization: Acquire For Section Synchronization 0x2: releaseforsectionsynchronization: Release For Section Synchronization 0x4: acquireformodwrite: Acquire For Mod Write 0x8: releaseformodwrite: Release For Mod Write 0x10: acquireforccflush: Acquire For CC Flush 0x20: releaseforccflush: Release For CC Flush 0x40: notifystreamfileobject: Notify Stream File Object 0x1000: fastiocheckifpossible: Fast IO Check If Possible 0x2000: networkqueryopen: Network Query Open 0x4000: mdlread: MDL Read 0x8000: mdlreadcomplete: MDL Read Complete 0x10000: preparemdlwrite: Prepare MDL Write 0x20000: mdlwritecomplete: MDL Write Complete 0x40000: volumemount: Volume Mount 0x80000: volumedismount: Volume Dismount {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E92} MOF IMAPI2 Disc Recorder Enumerator - keyword: 0x1: MsftEnumDiscRecorder2_DebugConstructor: MsftEnumDiscRecorder2_DebugConstructor Flag 0x2: MsftEnumDiscRecorder2_DebugDestructor: MsftEnumDiscRecorder2_DebugDestructor Flag 0x4: MsftEnumDiscRecorder2_DebugGeneral: MsftEnumDiscRecorder2_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {485E7DE9-0A80-11D8-AD15-505054503030} MOF UMDF - WDF Core - keyword: 0x1: FX_TRACE_API: FX_TRACE_API Flag 0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag 0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag 0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag 0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag 0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag 0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag 0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag 0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag 0x200: FX_TRACE_IO: FX_TRACE_IO Flag 0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag 0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag 0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag 0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag 0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag 0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag 0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag 0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag 0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag 0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag 0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag 0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag 0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag 0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag 0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag 0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag 0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag 0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag 0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag 0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag 0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag 0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {FA8DE7C4-ACDE-4443-9994-C4E2359A9EDB} MOF Classpnp Driver Tracing Provider - keyword: 0x1: TRACE_FLAG_GENERAL: This enables all configuration traces 0x2: TRACE_FLAG_PNP: This enables PNP traces 0x4: TRACE_FLAG_POWER: This enables power traces 0x8: TRACE_FLAG_RW: This enables read/write traces 0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces 0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces 0x40: TRACE_FLAG_WMI: This enables WMI traces 0x80: TRACE_FLAG_TIMER: This enables timer traces 0x100: TRACE_FLAG_INIT: This enables initilization traces 0x200: TRACE_FLAG_LOCK: This enables remove lock traces 0x400: TRACE_FLAG_DEBUG1: This flag is not used 0x800: TRACE_FLAG_DEBUG2: This flag is not used 0x1000: TRACE_FLAG_MCN: This enables media change notification traces 0x2000: TRACE_FLAG_ISR: This enables ISR traces 0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {28C9F48F-D244-45A8-842F-DC9FBC9B6E92} MOF Windows Defender Firewall API - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E99} MOF IMAPI2 Track-at-Once CD Writer - keyword: 0x1: MsftDiscFormat2Tao_DebugConstructor: MsftDiscFormat2Tao_DebugConstructor Flag 0x2: MsftDiscFormat2Tao_DebugDestructor: MsftDiscFormat2Tao_DebugDestructor Flag 0x4: MsftDiscFormat2Tao_DebugGeneral: MsftDiscFormat2Tao_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {8E6B6962-AB54-4335-8229-3255B919DD0E} MOF WMI_Tracing_Client_Operations - keyword: 0x1: _WMI_TRACE_CLIENT_OPERATIONS_: _WMI_TRACE_CLIENT_OPERATIONS_ Flag {04C8A86F-3369-12F8-4769-24E484A9E725} MOF ADODB.1 {A7EB57F6-145E-4F18-BD75-DBBF6F7E23A7} MOF WMP Network Sharing Service - keyword: 0x1: EntryExit: EntryExit Flag 0x2: Service: Service Flag 0x4: Security: Security Flag 0x8: QueryParser: QueryParser Flag 0x10: Search: Search Flag 0x20: HttpServer: HttpServer Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {02FE721A-0725-469E-A26D-37B3C09FAAC1} MOF Portable Device Connectivity API Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag {51734B23-5B7E-4892-BA8E-45BC110B735C} MOF Microsoft-Windows-Remote-FileSystem-Monitor {5A966D1C-6B48-11DA-8BDE-F66BAD1E3F3A} MOF TS Rdp Sound End Point Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag {72FB9358-A9B3-41E0-AE41-E8DECA41E3A8} MOF USB Storage Driver Tracing Provider - keyword: 0x1: TRACE_FLAG_GENERAL: This enables all configuration traces 0x2: TRACE_FLAG_PNP: This enables PNP traces 0x4: TRACE_FLAG_POWER: This enables power traces 0x8: TRACE_FLAG_RW: This enables read/write traces 0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces 0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces 0x40: TRACE_FLAG_WMI: This enables WMI traces 0x80: TRACE_FLAG_TIMER: This enables timer traces 0x100: TRACE_FLAG_INIT: This enables initilization traces 0x200: TRACE_FLAG_LOCK: This enables remove lock traces 0x400: TRACE_FLAG_DEBUG1: This flag is not used 0x800: TRACE_FLAG_DEBUG2: This flag is not used 0x1000: TRACE_FLAG_MCN: This enables media change notification traces 0x2000: TRACE_FLAG_ISR: This enables ISR traces 0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {8B20D3E4-581F-4A27-8109-DF01643A7A93} MOF FD WNet Trace - keyword: 0x1: DUMMY: DUMMY Flag {7DA1385C-F8F5-414D-B9D0-02FCA090F1EC} MOF File Kernel Trace; Optional Data - keyword: 0x1: usercontext: User Context 0x2: sessionid: Session Id 0x4: lastaccesstime: Last Access Time 0x8: callparameters: Call Parameters 0x10: callresultdata: Call Result Data 0x20: previousdata: Previous Data 0x40: createonexistingfile: Create On Existing File 0x80: processwindowstation: Process Window Station 0x100: blockpagingio: Block Paging IO {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9B} MOF IMAPI2 Zero Stream - keyword: 0x1: MsftDiscFormat2StreamZero_DebugConstructor: MsftDiscFormat2StreamZero_DebugConstructor Flag 0x2: MsftDiscFormat2StreamZero_DebugDestructor: MsftDiscFormat2StreamZero_DebugDestructor Flag 0x4: MsftDiscFormat2StreamZero_DebugGeneral: MsftDiscFormat2StreamZero_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {6165F3E2-AE38-45D4-9B23-6B4818758BD9} MOF Security: TSPkg - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Trace: Trace Flag 0x8: Creds: Credential Flag 0x10: Context: CTXT Flag 0x20: Calls: CALLS Flag 0x40: Auth: AUTH Flag 0x80: Session: SESS Flag {6D2FD9C5-8BD8-4A5D-8AA8-01E5C3B2AE23} MOF Refsv1WppTrace - keyword: 0x1: FATAL: FATAL Flag 0x2: ERROR: ERROR Flag 0x4: WARNING: WARNING Flag 0x8: READ: READ Flag 0x10: WRITE: WRITE Flag 0x20: COMPRESSED: COMPRESSED Flag 0x40: EFS: EFS Flag 0x80: MFT: MFT Flag 0x100: VOLBITMAP: VOLBITMAP Flag 0x200: CREATE: CREATE Flag 0x400: ALTSTREAMS: ALTSTREAMS Flag 0x800: OBJID: OBJID Flag 0x1000: INDEXES: INDEXES Flag 0x2000: TXFKTM: TXFKTM Flag 0x4000: TXFRECOVERY: TXFRECOVERY Flag 0x8000: TXFRM: TXFRM Flag 0x10000: TXFFCB: TXFFCB Flag 0x20000: SELFHEAL: SELFHEAL Flag 0x40000: HEALBITMAP: HEALBITMAP Flag 0x80000: USNJRNL: USNJRNL Flag 0x100000: DELNOTIFY: DELNOTIFY Flag 0x200000: MINSTORE: MINSTORE Flag 0x400000: SCRUB: SCRUB Flag 0x800000: TREEUPDATE: TREEUPDATE Flag {6DA4DDCA-0901-4BAE-9AD4-7E6030BAB531} MOF WLAN HC Diagnostics Trace - keyword: 0x1: WLANHC_AUTOCONFIG: WLANHC_AUTOCONFIG Flag 0x2: WLANHC_RNWFMSM: WLANHC_RNWFMSM Flag 0x4: WLANHC_FATMSM: WLANHC_FATMSM Flag 0x8: WLANHC_DLLMAIN: WLANHC_DLLMAIN Flag 0x10: WLANHC_TEST: WLANHC_TEST Flag {87B93A44-1F73-EC83-7261-2DFC972D9B1E} MOF MSDATL3.1 {777BA8FF-2498-4875-933A-3067DE883070} MOF XWizard Framework - keyword: 0x1: Critical: Critical Flag 0x2: Error: Error Flag 0x4: Warning: Warning Flag 0x8: Info: Info Flag 0x10: Verbose: Verbose Flag - level: 0x1: Critical: Abnormal termination/exit 0x2: Error: Severe error events (usually internal) 0x3: Warning: Allocation/Resource/Stress failures 0x4: Info: User info (Registration/Wizard flow paths) 0x5: Verbose: Function entry/exit (Detail) {0888E5EF-9B98-4695-979D-E92CE4247224} MOF RmClient_RestartManager - channel: 0x9: Application: Application 0x10: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {0381564E-D5CB-4E48-AB35-BE24389B0F59} MOF WPD BusEnumService Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: PnP: PnP Flag 0x200: Service: Service Flag 0x400: GroupPolicy: GroupPolicy Flag 0x800: BthActiveConnect: BthActiveConnect Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag {485E7DEB-0A80-11D8-AD15-505054503030} MOF UMDF - Test Trace - keyword: 0x1: TEST_TRACE_GENERAL: TEST_TRACE_GENERAL Flag 0x2: TEST_TRACE_APP: TEST_TRACE_APP Flag 0x4: TEST_TRACE_TSTDRIVER: TEST_TRACE_TSTDRIVER Flag 0x8: TEST_TRACE_FLTRDRIVER: TEST_TRACE_FLTRDRIVER Flag 0x10: TEST_TRACE_RESERVED_04: TEST_TRACE_RESERVED_04 Flag 0x20: TEST_TRACE_RESERVED_05: TEST_TRACE_RESERVED_05 Flag 0x40: TEST_TRACE_RESERVED_06: TEST_TRACE_RESERVED_06 Flag 0x80: TEST_TRACE_RESERVED_07: TEST_TRACE_RESERVED_07 Flag 0x100: TEST_TRACE_RESERVED_08: TEST_TRACE_RESERVED_08 Flag 0x200: TEST_TRACE_RESERVED_09: TEST_TRACE_RESERVED_09 Flag 0x400: TEST_TRACE_RESERVED_0a: TEST_TRACE_RESERVED_0a Flag 0x800: TEST_TRACE_RESERVED_0b: TEST_TRACE_RESERVED_0b Flag 0x1000: TEST_TRACE_RESERVED_0c: TEST_TRACE_RESERVED_0c Flag 0x2000: TEST_TRACE_RESERVED_0d: TEST_TRACE_RESERVED_0d Flag 0x4000: TEST_TRACE_RESERVED_0e: TEST_TRACE_RESERVED_0e Flag 0x8000: TEST_TRACE_RESERVED_0f: TEST_TRACE_RESERVED_0f Flag 0x10000: TEST_TRACE_RESERVED_10: TEST_TRACE_RESERVED_10 Flag 0x20000: TEST_TRACE_RESERVED_11: TEST_TRACE_RESERVED_11 Flag 0x40000: TEST_TRACE_RESERVED_12: TEST_TRACE_RESERVED_12 Flag 0x80000: TEST_TRACE_RESERVED_13: TEST_TRACE_RESERVED_13 Flag 0x100000: TEST_TRACE_RESERVED_14: TEST_TRACE_RESERVED_14 Flag 0x200000: TEST_TRACE_RESERVED_15: TEST_TRACE_RESERVED_15 Flag 0x400000: TEST_TRACE_RESERVED_16: TEST_TRACE_RESERVED_16 Flag 0x800000: TEST_TRACE_RESERVED_17: TEST_TRACE_RESERVED_17 Flag 0x1000000: TEST_TRACE_RESERVED_18: TEST_TRACE_RESERVED_18 Flag 0x2000000: TEST_TRACE_RESERVED_19: TEST_TRACE_RESERVED_19 Flag 0x4000000: TEST_TRACE_RESERVED_1a: TEST_TRACE_RESERVED_1a Flag 0x8000000: TEST_TRACE_RESERVED_1b: TEST_TRACE_RESERVED_1b Flag 0x10000000: TEST_TRACE_RESERVED_1c: TEST_TRACE_RESERVED_1c Flag 0x20000000: TEST_TRACE_RESERVED_1d: TEST_TRACE_RESERVED_1d Flag 0x40000000: TEST_TRACE_RESERVED_1e: TEST_TRACE_RESERVED_1e Flag 0x80000000: TEST_TRACE_FUNCTION: TEST_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {485E7DE8-0A80-11D8-AD15-505054503030} MOF UMDF - Platform Library Trace - keyword: 0x1: PLATFORM_TRACE_DRIVERSTOP: PLATFORM_TRACE_DRIVERSTOP Flag 0x2: PLATFORM_TRACE_INIT: PLATFORM_TRACE_INIT Flag 0x4: PLATFORM_TRACE_CONFIG: PLATFORM_TRACE_CONFIG Flag 0x8: PLATFORM_TRACE_TRACING: PLATFORM_TRACE_TRACING Flag 0x10: PLATFORM_TRACE_ERROR_REPORTING: PLATFORM_TRACE_ERROR_REPORTING Flag 0x20: PLATFORM_TRACE_SECURITY: PLATFORM_TRACE_SECURITY Flag 0x40: PLATFORM_TRACE_LOG: PLATFORM_TRACE_LOG Flag 0x80: PLATFORM_TRACE_RESERVED_07: PLATFORM_TRACE_RESERVED_07 Flag 0x100: PLATFORM_TRACE_RESERVED_08: PLATFORM_TRACE_RESERVED_08 Flag 0x200: PLATFORM_TRACE_RESERVED_09: PLATFORM_TRACE_RESERVED_09 Flag 0x400: PLATFORM_TRACE_RESERVED_0a: PLATFORM_TRACE_RESERVED_0a Flag 0x800: PLATFORM_TRACE_RESERVED_0b: PLATFORM_TRACE_RESERVED_0b Flag 0x1000: PLATFORM_TRACE_RESERVED_0c: PLATFORM_TRACE_RESERVED_0c Flag 0x2000: PLATFORM_TRACE_RESERVED_0d: PLATFORM_TRACE_RESERVED_0d Flag 0x4000: PLATFORM_TRACE_RESERVED_0e: PLATFORM_TRACE_RESERVED_0e Flag 0x8000: PLATFORM_TRACE_RESERVED_0f: PLATFORM_TRACE_RESERVED_0f Flag 0x10000: PLATFORM_TRACE_RESERVED_10: PLATFORM_TRACE_RESERVED_10 Flag 0x20000: PLATFORM_TRACE_RESERVED_11: PLATFORM_TRACE_RESERVED_11 Flag 0x40000: PLATFORM_TRACE_RESERVED_12: PLATFORM_TRACE_RESERVED_12 Flag 0x80000: PLATFORM_TRACE_RESERVED_13: PLATFORM_TRACE_RESERVED_13 Flag 0x100000: PLATFORM_TRACE_RESERVED_14: PLATFORM_TRACE_RESERVED_14 Flag 0x200000: PLATFORM_TRACE_RESERVED_15: PLATFORM_TRACE_RESERVED_15 Flag 0x400000: PLATFORM_TRACE_RESERVED_16: PLATFORM_TRACE_RESERVED_16 Flag 0x800000: PLATFORM_TRACE_RESERVED_17: PLATFORM_TRACE_RESERVED_17 Flag 0x1000000: PLATFORM_TRACE_RESERVED_18: PLATFORM_TRACE_RESERVED_18 Flag 0x2000000: PLATFORM_TRACE_RESERVED_19: PLATFORM_TRACE_RESERVED_19 Flag 0x4000000: PLATFORM_TRACE_RESERVED_1a: PLATFORM_TRACE_RESERVED_1a Flag 0x8000000: PLATFORM_TRACE_RESERVED_1b: PLATFORM_TRACE_RESERVED_1b Flag 0x10000000: PLATFORM_TRACE_RESERVED_1c: PLATFORM_TRACE_RESERVED_1c Flag 0x20000000: PLATFORM_TRACE_RESERVED_1d: PLATFORM_TRACE_RESERVED_1d Flag 0x40000000: PLATFORM_TRACE_RESERVED_1e: PLATFORM_TRACE_RESERVED_1e Flag 0x80000000: PLATFORM_TRACE_FUNCTION: PLATFORM_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {28C9F48F-D244-45A8-842F-DC9FBC9B6E94} MOF Windows Defender Firewall NetShell Plugin - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag {9138500E-3648-4EDB-AA4C-859E9F7B7C38} MOF VSS tracing provider {E159FC63-02FE-42F3-A234-028B9B8561CB} MOF Microsoft-Windows-LLTD-Responder - keyword: 0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag 0x2: TRACE_CLASS_DISPATCH: TRACE_CLASS_DISPATCH Flag 0x4: TRACE_CLASS_REQUEST: TRACE_CLASS_REQUEST Flag 0x8: TRACE_CLASS_BINDING: TRACE_CLASS_BINDING Flag 0x10: TRACE_CLASS_SESSION: TRACE_CLASS_SESSION Flag 0x20: TRACE_CLASS_QUIESCENT: TRACE_CLASS_QUIESCENT Flag 0x40: TRACE_CLASS_HELLO: TRACE_CLASS_HELLO Flag 0x80: TRACE_CLASS_COMMAND: TRACE_CLASS_COMMAND Flag 0x100: TRACE_CLASS_EMIT: TRACE_CLASS_EMIT Flag 0x200: TRACE_CLASS_THREAD: TRACE_CLASS_THREAD Flag 0x400: TRACE_CLASS_TIMER: TRACE_CLASS_TIMER Flag 0x800: TRACE_CLASS_QOS: TRACE_CLASS_QOS Flag 0x1000: TRACE_CLASS_NLC: TRACE_CLASS_NLC Flag {37D2C3CD-C5D4-4587-8531-4696C44244C8} MOF Security: SChannel - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Trace: Trace Flag 0x8: Alloc: Alloc Flag 0x10: Res: Res Flag 0x20: Func: Func Flag 0x40: Cred: Cred Flag 0x80: Ctxt: Ctxt Flag 0x100: Mapper: Mapper Flag 0x200: Buffers: Buffers Flag {FB6A424F-B5D6-4329-B9D5-A975B3A93EAD} MOF Security: WDigest - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Trace: Trace Flag 0x8: TraceASC: ASC Flag 0x10: TraceICS: ISC Flag 0x20: TraceLSA: LSA Flag 0x40: TraceUser: User Flag 0x80: TraceFunc: Function Flag 0x100: TraceMem: Mem Flag 0x200: TraceStuff: Stuff Flag {EBCCA1C2-AB46-4A1D-8C2A-906C2FF25F39} MOF Service Control Manager Trace - keyword: 0x1: ERROR: ERROR Flag 0x2: WARNING: WARNING Flag 0x4: TRACE: TRACE Flag 0x8: INFO: INFO Flag 0x10: SECURITY: SECURITY Flag 0x20: CONFIG: CONFIG Flag 0x40: DEPEND: DEPEND Flag 0x80: DEPEND_DUMP: DEPEND_DUMP Flag 0x100: CONFIG_API: CONFIG_API Flag 0x200: LOCK_API: LOCK_API Flag 0x400: ACCOUNT: ACCOUNT Flag 0x800: USECOUNT: USECOUNT Flag 0x1000: NETBIOS: NETBIOS Flag 0x2000: THREADS: THREADS Flag 0x4000: BSM: BSM Flag 0x8000: SHUTDOWN: SHUTDOWN Flag 0x10000: WHY: WHY Flag 0x20000: BOOT: BOOT Flag 0x40000: HANDLE: HANDLE Flag 0x80000: LOCKS: LOCKS Flag 0x100000: CONTROL: CONTROL Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E91} MOF IMAPI2 Disc Master - keyword: 0x1: MsftDiscMaster2_DebugConstructor: MsftDiscMaster2_DebugConstructor Flag 0x2: MsftDiscMaster2_DebugDestructor: MsftDiscMaster2_DebugDestructor Flag 0x4: MsftDiscMaster2_DebugGeneral: MsftDiscMaster2_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {4A8AAA94-CFC4-46A7-8E4E-17BC45608F0A} MOF BITS Service Trace - keyword: 0x1: LogFlagInfo: LogFlagInfo Flag 0x2: LogFlagWarning: LogFlagWarning Flag 0x4: LogFlagError: LogFlagError Flag 0x8: LogFlagFunction: LogFlagFunction Flag 0x10: LogFlagRefCount: LogFlagRefCount Flag 0x20: LogFlagSerialize: LogFlagSerialize Flag 0x40: LogFlagDownload: LogFlagDownload Flag 0x80: LogFlagTask: LogFlagTask Flag 0x100: LogFlagLock: LogFlagLock Flag 0x200: LogFlagService: LogFlagService Flag 0x400: LogFlagDataBytes: LogFlagDataBytes Flag 0x800: LogFlagTransferDetails: LogFlagTransferDetails Flag 0x1000: LogFlagPeer: LogFlagPeer Flag {8E598056-8993-11D2-819E-0000F875A064} MOF Active Directory Domain Services: SAM {E4FF10D8-8A88-4FC6-82C8-8C23E9462FE5} MOF Downlevel IPsec NetShell Plugin - keyword: 0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag 0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag 0x4: TRC_INFORMATION: TRC_INFORMATION Flag 0x8: TRC_WARNING: TRC_WARNING Flag 0x10: TRC_ERROR: TRC_ERROR Flag {CA1CF55C-9E49-4AD3-8038-39CB6F66AF11} MOF RSS Platform Backgroundsync Perf Trace - keyword: 0x1: Perf: Perf Flag {5BBB6C18-AA45-49B1-A15F-085F7ED0AA90} MOF Security: NTLM Authentication - keyword: 0x1: Error: Error Flag 0x2: Warning: Warning Flag 0x4: Init: Init Flag 0x8: Misc: Misc Flag 0x10: LogonSess: Logon Session Flag 0x20: Leak: Leak Track Flag 0x40: Lpc: Lpc Flag 0x80: LpcMore: Lpc More Flag 0x100: Api: Api Flag 0x200: ApiMore: Api More Flag 0x400: SKey: Session Keys Flag 0x800: Nego: Negotiate Flag 0x1000: Updates: Updates Flag 0x2000: NtLmV2: NTLM V2 Flag 0x4000: Cred: Credentials Flag 0x8000: Version: Protocol Version Flag 0x10000: Target: Target Flag {F8036571-42D9-480A-BABB-DE7833CB059C} MOF IMAPI2FS Tracing - keyword: 0x1: Constructor: Trace information from the constructors 0x2: Destructor: Trace information from the destructors 0x4: General: General Debugging Information 0x8: FunctionEntryExit: Trace all function entry/exits - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {F9BE9C98-10DB-4318-BB61-CB0DDEA08BF7} MOF UmBus Driver Trace - keyword: 0x1: TraceEntryExit: TraceEntryExit Flag 0x2: TraceIoctl: TraceIoctl Flag 0x4: TraceParameter: TraceParameter Flag 0x8: TraceInit: TraceInit Flag 0x10: TraceInfo: TraceInfo Flag 0x20: TraceDriver: TraceDriver Flag 0x40: TraceCreateClose: TraceCreateClose Flag 0x80: TracePower: TracePower Flag 0x100: TracePnP: TracePnP Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {2E8D9EC5-A712-48C4-8CE0-631EB0C1CD65} MOF Layer2 Security HC Diagnostics Trace - keyword: 0x1: SECHC_LOG_FLAG_ASSERT: SECHC_LOG_FLAG_ASSERT Flag 0x2: SECHC_LOG_FLAG_INIT: SECHC_LOG_FLAG_INIT Flag 0x4: SECHC_LOG_FLAG_DIAG: SECHC_LOG_FLAG_DIAG Flag 0x8: SECHC_LOG_FLAG_ONEX_DIAG: SECHC_LOG_FLAG_ONEX_DIAG Flag 0x10: SECHC_LOG_FLAG_REPAIR: SECHC_LOG_FLAG_REPAIR Flag 0x20: SECHC_LOG_FLAG_STATE: SECHC_LOG_FLAG_STATE Flag 0x40: SECHC_LOG_FLAG_EXT: SECHC_LOG_FLAG_EXT Flag 0x80: SECHC_LOG_FLAG_EVENT_LOG: SECHC_LOG_FLAG_EVENT_LOG Flag 0x100: SECHC_LOG_FLAG_FUNCTION: SECHC_LOG_FLAG_FUNCTION Flag 0x200: SECHC_LOG_FLAG_MEMORY: SECHC_LOG_FLAG_MEMORY Flag 0x400: SECHC_LOG_FLAG_LOCKS: SECHC_LOG_FLAG_LOCKS Flag {58E8F67D-29E9-456C-B23D-C6489E341BB0} MOF WPD Types Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_Perf: WPD_Perf Flag 0x200: WPD_F2: WPD_F2 Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: WPD_F4: WPD_F4 Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: PortableDeviceTypes_General: PortableDeviceTypes_General Flag 0x20000: PortableDeviceTypes_Serialization: PortableDeviceTypes_Serialization Flag 0x40000: PortableDeviceTypes_Collections: PortableDeviceTypes_Collections Flag 0x80000: PortableDeviceTypes_Values: PortableDeviceTypes_Values Flag {D2A60D61-0F87-4673-A86C-9C461457FE27} MOF Windows NetworkItemFactory Trace - keyword: 0x1: tagDefault: tagDefault Flag 0x2: tagNetworkItemFactory: tagNetworkItemFactory Flag {D5C6A3E9-FA9C-434E-9653-165B4FC869E4} MOF IPMI Driver Trace - keyword: 0x1: TRACELEVELONE: TRACELEVELONE Flag 0x2: TRACELEVELTWO: TRACELEVELTWO Flag {544D4C9D-942C-46D5-BF50-DF5CD9524A50} MOF KMDFv1 Trace Provider - keyword: 0x1: TRACINGFULL: TRACINGFULL Flag 0x2: TRACINGERROR: TRACINGERROR Flag 0x4: TRACINGDBGPRINT: TRACINGDBGPRINT Flag 0x8: TRACINGFRAMEWORKS: TRACINGFRAMEWORKS Flag 0x10: TRACINGAPI: TRACINGAPI Flag 0x20: TRACINGAPIERROR: TRACINGAPIERROR Flag 0x40: TRACINGRESOURCES: TRACINGRESOURCES Flag 0x80: TRACINGLOCKING: TRACINGLOCKING Flag 0x100: TRACINGCONTEXT: TRACINGCONTEXT Flag 0x200: TRACINGPOOL: TRACINGPOOL Flag 0x400: TRACINGHANDLE: TRACINGHANDLE Flag 0x800: TRACINGPNP: TRACINGPNP Flag 0x1000: TRACINGIO: TRACINGIO Flag 0x2000: TRACINGIOTARGET: TRACINGIOTARGET Flag 0x4000: TRACINGDMA: TRACINGDMA Flag 0x8000: TRACINGREQUEST: TRACINGREQUEST Flag 0x10000: TRACINGDRIVER: TRACINGDRIVER Flag 0x20000: TRACINGDEVICE: TRACINGDEVICE Flag 0x40000: TRACINGUSEROBJECT: TRACINGUSEROBJECT Flag 0x80000: TRACINGOBJECT: TRACINGOBJECT Flag 0x100000: TRACINGPNPPOWERSTATES: TRACINGPNPPOWERSTATES Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {B809F4FF-3023-473C-971B-AB594429EA57} MOF WPD WiaCompat Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E93} MOF IMAPI2 Disc Recorder - keyword: 0x1: MsftDiscRecorder2_DebugConstructor: MsftDiscRecorder2_DebugConstructor Flag 0x2: MsftDiscRecorder2_DebugDestructor: MsftDiscRecorder2_DebugDestructor Flag 0x4: MsftDiscRecorder2_DebugGeneral: MsftDiscRecorder2_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {DAA6CAF5-6678-43F8-A6FE-B40EE096E06E} MOF TS Client ActiveX Control Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {BFA655DC-6C51-11DA-8BDE-F66BAD1E3F3A} MOF TS RDP Shell Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag {485E7DED-0A80-11D8-AD15-505054503030} MOF UMDF - Lpc Driver Trace - keyword: 0x1: LPCDRVR_TRACE_DRIVER: LPCDRVR_TRACE_DRIVER Flag 0x2: LPCDRVR_TRACE_DEVICE: LPCDRVR_TRACE_DEVICE Flag 0x4: LPCDRVR_TRACE_RESERVED_02: LPCDRVR_TRACE_RESERVED_02 Flag 0x8: LPCDRVR_TRACE_RESERVED_03: LPCDRVR_TRACE_RESERVED_03 Flag 0x10: LPCDRVR_TRACE_RESERVED_04: LPCDRVR_TRACE_RESERVED_04 Flag 0x20: LPCDRVR_TRACE_RESERVED_06: LPCDRVR_TRACE_RESERVED_06 Flag 0x40: LPCDRVR_TRACE_RESERVED_07: LPCDRVR_TRACE_RESERVED_07 Flag 0x80: LPCDRVR_TRACE_RESERVED_08: LPCDRVR_TRACE_RESERVED_08 Flag 0x100: LPCDRVR_TRACE_RESERVED_09: LPCDRVR_TRACE_RESERVED_09 Flag 0x200: LPCDRVR_TRACE_RESERVED_0a: LPCDRVR_TRACE_RESERVED_0a Flag 0x400: LPCDRVR_TRACE_RESERVED_0b: LPCDRVR_TRACE_RESERVED_0b Flag 0x800: LPCDRVR_TRACE_RESERVED_0c: LPCDRVR_TRACE_RESERVED_0c Flag 0x1000: LPCDRVR_TRACE_RESERVED_0d: LPCDRVR_TRACE_RESERVED_0d Flag 0x2000: LPCDRVR_TRACE_RESERVED_0e: LPCDRVR_TRACE_RESERVED_0e Flag 0x4000: LPCDRVR_TRACE_RESERVED_0f: LPCDRVR_TRACE_RESERVED_0f Flag 0x8000: LPCDRVR_TRACE_RESERVED_10: LPCDRVR_TRACE_RESERVED_10 Flag 0x10000: LPCDRVR_TRACE_RESERVED_11: LPCDRVR_TRACE_RESERVED_11 Flag 0x20000: LPCDRVR_TRACE_RESERVED_12: LPCDRVR_TRACE_RESERVED_12 Flag 0x40000: LPCDRVR_TRACE_RESERVED_13: LPCDRVR_TRACE_RESERVED_13 Flag 0x80000: LPCDRVR_TRACE_RESERVED_14: LPCDRVR_TRACE_RESERVED_14 Flag 0x100000: LPCDRVR_TRACE_RESERVED_15: LPCDRVR_TRACE_RESERVED_15 Flag 0x200000: LPCDRVR_TRACE_RESERVED_16: LPCDRVR_TRACE_RESERVED_16 Flag 0x400000: LPCDRVR_TRACE_RESERVED_17: LPCDRVR_TRACE_RESERVED_17 Flag 0x800000: LPCDRVR_TRACE_RESERVED_18: LPCDRVR_TRACE_RESERVED_18 Flag 0x1000000: LPCDRVR_TRACE_RESERVED_19: LPCDRVR_TRACE_RESERVED_19 Flag 0x2000000: LPCDRVR_TRACE_RESERVED_1a: LPCDRVR_TRACE_RESERVED_1a Flag 0x4000000: LPCDRVR_TRACE_RESERVED_1b: LPCDRVR_TRACE_RESERVED_1b Flag 0x8000000: LPCDRVR_TRACE_RESERVED_1c: LPCDRVR_TRACE_RESERVED_1c Flag 0x10000000: LPCDRVR_TRACE_RESERVED_1d: LPCDRVR_TRACE_RESERVED_1d Flag 0x20000000: LPCDRVR_TRACE_RESERVED_1e: LPCDRVR_TRACE_RESERVED_1e Flag 0x40000000: LPCDRVR_TRACE_FUNCTION: LPCDRVR_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E90} MOF IMAPI2 dll - keyword: 0x1: IMAPI2_DebugGeneral: IMAPI2_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {1FF10429-99AE-45BB-8A67-C9E945B9FB6C} MOF IMAPI1 Shim - keyword: 0x1: General: General Debugging Information {CEB7253C-BB96-9DFE-51D1-53D966D0CF8B} MOF MSDART.1 {014DE49F-CE63-4779-BA2B-D616F6963A87} MOF Microsoft-Windows-NetworkConnectivityStatus - keyword: 0x1: TM_NLAPROVIDER: TM_NLAPROVIDER Flag 0x2: TM_INTERFACEHOP: TM_INTERFACEHOP Flag 0x4: TM_MEDIA: TM_MEDIA Flag 0x8: TM_WEBPROBE: TM_WEBPROBE Flag 0x10: TM_SUPPORT: TM_SUPPORT Flag 0x20: TM_LOCK: TM_LOCK Flag {D4199645-41BE-4FD5-9D71-A612C508FDC7} MOF RDPEncComTrace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag {F33959B4-DBEC-11D2-895B-00C04F79AB69} MOF Active Directory: NetLogon {A676B545-4CFB-4306-A067-502D9A0F2220} MOF SetupAPI Trace - keyword: 0x1: PNP_ERROR_LEVEL: PNP_ERROR_LEVEL Flag 0x2: PNP_WARNING_LEVEL: PNP_WARNING_LEVEL Flag 0x4: PNP_TRACE_LEVEL: PNP_TRACE_LEVEL Flag 0x8: PNP_INFO_LEVEL: PNP_INFO_LEVEL Flag 0x10: PNP_REGISTRY_WARNING_LEVEL: PNP_REGISTRY_WARNING_LEVEL Flag 0x20: PNP_REGISTRY_TRACE_LEVEL: PNP_REGISTRY_TRACE_LEVEL Flag 0x40: PNP_REGISTRY_INFO_LEVEL: PNP_REGISTRY_INFO_LEVEL Flag 0x80: PNP_REGISTRY_VERBOSE_LEVEL: PNP_REGISTRY_VERBOSE_LEVEL Flag 0x100: PNP_RESOURCE_WARNING_LEVEL: PNP_RESOURCE_WARNING_LEVEL Flag 0x200: PNP_RESOURCE_TRACE_LEVEL: PNP_RESOURCE_TRACE_LEVEL Flag 0x400: PNP_RESOURCE_INFO_LEVEL: PNP_RESOURCE_INFO_LEVEL Flag 0x800: PNP_RESOURCE_VERBOSE_LEVEL: PNP_RESOURCE_VERBOSE_LEVEL Flag 0x1000: PNP_EVENT_WARNING_LEVEL: PNP_EVENT_WARNING_LEVEL Flag 0x2000: PNP_EVENT_TRACE_LEVEL: PNP_EVENT_TRACE_LEVEL Flag 0x4000: PNP_EVENT_INFO_LEVEL: PNP_EVENT_INFO_LEVEL Flag 0x8000: PNP_EVENT_VERBOSE_LEVEL: PNP_EVENT_VERBOSE_LEVEL Flag 0x10000: PNP_INSTALL_WARNING_LEVEL: PNP_INSTALL_WARNING_LEVEL Flag 0x20000: PNP_INSTALL_TRACE_LEVEL: PNP_INSTALL_TRACE_LEVEL Flag 0x40000: PNP_INSTALL_INFO_LEVEL: PNP_INSTALL_INFO_LEVEL Flag 0x80000: PNP_INSTALL_VERBOSE_LEVEL: PNP_INSTALL_VERBOSE_LEVEL Flag {C3C5D8AF-2FD5-4500-A8E7-379C2D0BBE2E} MOF WPD API Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: WPD_F1: WPD_F1 Flag 0x200: Event: WPD Event Flag 0x400: WPD_F3: WPD_F3 Flag 0x800: Perf: WPD Perf Flag 0x1000: WPD_F5: WPD_F5 Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: PortableDeviceAPI_General: PortableDeviceAPI_General Flag 0x20000: PortableDeviceAPI_DriverCommunication: PortableDeviceAPI_DriverCommunication Flag 0x40000: PortableDeviceAPI_Internal: PortableDeviceAPI_Internal Flag 0x80000: PortableDeviceAPI_Properties: PortableDeviceAPI_Properties Flag 0x100000: PortableDeviceAPI_Resources: PortableDeviceAPI_Resources Flag 0x200000: PortableDeviceAPI_Enumeration: PortableDeviceAPI_Enumeration Flag 0x400000: PortableDeviceAPI_Events: PortableDeviceAPI_Events Flag 0x800000: PortableDeviceAPI_Service: PortableDeviceAPI_Service Flag 0x1000000: PortableDeviceAPI_Automation: PortableDeviceAPI_Automation Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9A} MOF IMAPI2 Raw CD Writer - keyword: 0x1: MsftDiscFormat2Raw_DebugConstructor: MsftDiscFormat2Raw_DebugConstructor Flag 0x2: MsftDiscFormat2Raw_DebugDestructor: MsftDiscFormat2Raw_DebugDestructor Flag 0x4: MsftDiscFormat2Raw_DebugGeneral: MsftDiscFormat2Raw_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {8B98D3F2-3CC6-0B9C-6651-9649CCE5C752} MOF MSDADIAG.ETW {106B464A-8043-46B1-8CB8-E92A0CD7A560} MOF BFE Trace Provider {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E94} MOF IMAPI2 Utilities - keyword: 0x1: MsftUtils_DebugConstructor: MsftUtils_DebugConstructor Flag 0x2: MsftUtils_DebugDestructor: MsftUtils_DebugDestructor Flag 0x4: MsftUtils_DebugGeneral: MsftUtils_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {4B647745-F438-0A42-F870-5DBD29949C99} MOF SQLSRV32.1 {0EFF663F-8B6E-4E6D-8182-087A8EAA29CB} MOF Windows Defender Firewall API - GP - keyword: 0x1: TL_ERROR: TL_ERROR Flag 0x2: TL_WARN: TL_WARN Flag 0x4: TL_INFO: TL_INFO Flag 0x8: TL_FUNC: TL_FUNC Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E96} MOF IMAPI2 Write Engine - keyword: 0x1: MsftWriteEngine2_DebugConstructor: MsftWriteEngine2_DebugConstructor Flag 0x2: MsftWriteEngine2_DebugDestructor: MsftWriteEngine2_DebugDestructor Flag 0x4: MsftWriteEngine2_DebugGeneral: MsftWriteEngine2_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {57AC2B71-75CD-4043-9B00-B51674B0DC71} MOF NSC IrDA Driver - keyword: 0x1: DBG_LOG_ERROR: NSC IrDA Driver Error 0x2: DBG_LOG_INFO: NSC IrDA Driver Generic Info 0x4: DBG_LOG_FIR: NSC IrDA Driver FIR Info 0x8: DBG_LOG_SIR: NSC IrDA Driver SIR Info {0741C7BE-DAAC-4A5B-B00A-4BD9A2D89D0E} MOF Microsoft-Windows-LLTD-MapperIO - keyword: 0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag 0x2: TRACE_CLASS_DISPATCH: TRACE_CLASS_DISPATCH Flag 0x4: TRACE_CLASS_BINDING: TRACE_CLASS_BINDING Flag 0x8: TRACE_CLASS_CONTEXT: TRACE_CLASS_CONTEXT Flag 0x10: TRACE_CLASS_QOS: TRACE_CLASS_QOS Flag 0x20: TRACE_CLASS_REQUEST: TRACE_CLASS_REQUEST Flag {F01B7774-7ED7-401E-8088-B576793D7841} MOF Certificate Services Client Trace - keyword: 0x1: TRC_FATAL: TRC_FATAL Flag 0x2: TRC_ERROR: TRC_ERROR Flag 0x4: TRC_WARNING: TRC_WARNING Flag 0x8: TRC_INFO: TRC_INFO Flag 0x10: TRC_DETAIL: TRC_DETAIL Flag {4199EE71-D55D-47D7-9F57-34A1D5B2C904} MOF TerminalServer-MediaFoundationPlugin - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag 0x8: TS_TRACE_LEVEL_TEST: TS_TRACE_LEVEL_TEST Flag {96AB095A-9519-4F5C-81EE-C510B0A45463} MOF UMB Trace - keyword: 0x1: DUMMY: DUMMY Flag {082DFF20-F430-11D9-8CD6-0800200C9A66} MOF Mobility Center Trace - keyword: 0x1: TRACE_NONE: TRACE_NONE Flag 0x2: TRACE_FATAL: TRACE_FATAL Flag 0x4: TRACE_ERROR: TRACE_ERROR Flag 0x8: TRACE_WARNING: TRACE_WARNING Flag 0x10: TRACE_INFORMATION: TRACE_INFORMATION Flag 0x20: TRACE_VERBOSE: TRACE_VERBOSE Flag 0x40: TRACE_RESERVED6: TRACE_RESERVED6 Flag 0x80: TRACE_RESERVED7: TRACE_RESERVED7 Flag 0x100: TRACE_RESERVED8: TRACE_RESERVED8 Flag 0x200: TRACE_RESERVED9: TRACE_RESERVED9 Flag 0x400: TRACE_STACK: TRACE_STACK Flag 0x800: TRACE_RESERVED10: TRACE_RESERVED10 Flag 0x1000: TRACE_UNITTEST: TRACE_UNITTEST Flag 0x2000: TRACE_VERIFICATION: TRACE_VERIFICATION Flag {24722B88-DF97-4FF6-E395-DB533AC42A1E} MOF BCP.1 {485E7DEA-0A80-11D8-AD15-505054503030} MOF UMDF - Driver Manager Trace - keyword: 0x1: MGR_TRACE_MGR: MGR_TRACE_MGR Flag 0x2: MGR_TRACE_SERVICE_KEY: MGR_TRACE_SERVICE_KEY Flag 0x4: MGR_TRACE_DEVNODE: MGR_TRACE_DEVNODE Flag 0x8: MGR_TRACE_PROCESS: MGR_TRACE_PROCESS Flag 0x10: MGR_TRACE_LPC: MGR_TRACE_LPC Flag 0x20: MGR_TRACE_RESERVED_05: MGR_TRACE_RESERVED_05 Flag 0x40: MGR_TRACE_RESERVED_06: MGR_TRACE_RESERVED_06 Flag 0x80: MGR_TRACE_RESERVED_07: MGR_TRACE_RESERVED_07 Flag 0x100: MGR_TRACE_RESERVED_08: MGR_TRACE_RESERVED_08 Flag 0x200: MGR_TRACE_RESERVED_09: MGR_TRACE_RESERVED_09 Flag 0x400: MGR_TRACE_RESERVED_0a: MGR_TRACE_RESERVED_0a Flag 0x800: MGR_TRACE_RESERVED_0b: MGR_TRACE_RESERVED_0b Flag 0x1000: MGR_TRACE_RESERVED_0c: MGR_TRACE_RESERVED_0c Flag 0x2000: MGR_TRACE_RESERVED_0d: MGR_TRACE_RESERVED_0d Flag 0x4000: MGR_TRACE_RESERVED_0e: MGR_TRACE_RESERVED_0e Flag 0x8000: MGR_TRACE_RESERVED_0f: MGR_TRACE_RESERVED_0f Flag 0x10000: MGR_TRACE_RESERVED_10: MGR_TRACE_RESERVED_10 Flag 0x20000: MGR_TRACE_RESERVED_11: MGR_TRACE_RESERVED_11 Flag 0x40000: MGR_TRACE_RESERVED_12: MGR_TRACE_RESERVED_12 Flag 0x80000: MGR_TRACE_RESERVED_13: MGR_TRACE_RESERVED_13 Flag 0x100000: MGR_TRACE_RESERVED_14: MGR_TRACE_RESERVED_14 Flag 0x200000: MGR_TRACE_RESERVED_15: MGR_TRACE_RESERVED_15 Flag 0x400000: MGR_TRACE_RESERVED_16: MGR_TRACE_RESERVED_16 Flag 0x800000: MGR_TRACE_RESERVED_17: MGR_TRACE_RESERVED_17 Flag 0x1000000: MGR_TRACE_RESERVED_18: MGR_TRACE_RESERVED_18 Flag 0x2000000: MGR_TRACE_RESERVED_19: MGR_TRACE_RESERVED_19 Flag 0x4000000: MGR_TRACE_RESERVED_1a: MGR_TRACE_RESERVED_1a Flag 0x8000000: MGR_TRACE_RESERVED_1b: MGR_TRACE_RESERVED_1b Flag 0x10000000: MGR_TRACE_RESERVED_1c: MGR_TRACE_RESERVED_1c Flag 0x20000000: MGR_TRACE_RESERVED_1d: MGR_TRACE_RESERVED_1d Flag 0x40000000: MGR_TRACE_RESERVED_1e: MGR_TRACE_RESERVED_1e Flag 0x80000000: MGR_TRACE_FUNCTION: MGR_TRACE_FUNCTION Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {C2BA06E2-F7CE-44AA-9E7E-62652CDEFE97} MOF Windows Wininit Trace - keyword: 0x1: Core: Core Flag 0x2: Boot: Boot Flag 0x4: Setup: Setup Flag 0x8: Shutdown: Shutdown Flag 0x10: Power: Power Flag 0x20: WMsg: WMsg Flag 0x40: Sas: Sas Flag {D804A67F-4C25-43C1-896F-89FF78B3A911} MOF WMP Network Sharing Taskbar - keyword: 0x1: EntryExit: EntryExit Flag 0x2: Ux: Ux Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {B2FC00C4-2941-4D11-983B-B16E8AA4E25D} MOF Ntfs_NtfsLog {1AC55562-D4FF-4BC5-8EF3-A18E07C4668E} MOF Network Location Awareness Trace - keyword: 0x1: TM_LIST: TM_LIST Flag 0x2: TM_LOCK: TM_LOCK Flag 0x4: TM_MEMORY: TM_MEMORY Flag 0x8: TM_REFOBJ: TM_REFOBJ Flag 0x10: TM_HANDLE: TM_HANDLE Flag 0x20: TM_FSM: TM_FSM Flag 0x40: TM_TRIEMAP: TM_TRIEMAP Flag 0x80: TM_CACHE: TM_CACHE Flag 0x100: TM_UNITTEST: TM_UNITTEST Flag 0x200: TM_DLLMAIN: TM_DLLMAIN Flag 0x400: TM_ME: TM_ME Flag 0x800: TM_STORE: TM_STORE Flag 0x1000: TM_PMUX: TM_PMUX Flag 0x2000: TM_FUSER: TM_FUSER Flag 0x4000: TM_PLGWORKER: TM_PLGWORKER Flag 0x8000: TM_PLGEXT: TM_PLGEXT Flag 0x10000: TM_PLGINT: TM_PLGINT Flag 0x20000: TM_IPPC: TM_IPPC Flag 0x40000: TM_APPSRV: TM_APPSRV Flag 0x80000: TM_NLAAPI: TM_NLAAPI Flag 0x100000: TM_NLASH: TM_NLASH Flag 0x200000: TM_PNP: TM_PNP Flag 0x400000: TM_INTRANET: TM_INTRANET Flag 0x800000: TM_INTERNET: TM_INTERNET Flag 0x1000000: TM_ARPND: TM_ARPND Flag 0x2000000: TM_COMPCLNT: TM_COMPCLNT Flag 0x4000000: TM_ICSC: TM_ICSC Flag 0x8000000: TM_NLAWPLG: TM_NLAWPLG Flag 0x10000000: TM_BWC: TM_BWC Flag {8ED60A3A-8C12-49C5-A518-FDF451BC10FC} MOF WMP Network Sharing API - keyword: 0x1: EntryExit: EntryExit Flag 0x2: API: API Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {42695762-EA50-497A-9068-5CBBB35E0B95} MOF Windows Notification Facility Provider {C92CF544-91B3-4DC0-8E11-C580339A0BF8} MOF NTLM Security Protocol {6C770D53-0441-AFD4-DCAB-1D89155FECFC} MOF MSADOX.1 {17ABF473-982C-4D0E-B502-3A59D89E71DE} MOF WPD WMDMCompat Trace - keyword: 0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag 0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag 0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag 0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag 0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag 0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag 0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag 0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag 0x100: Enumeration: Enumeration Flag 0x200: DataXfer: DataXfer Flag 0x400: Properties: Properties Flag 0x800: Perf: Perf Flag 0x1000: PerfVerbose: PerfVerbose Flag 0x2000: WPD_F6: WPD_F6 Flag 0x4000: WPD_F7: WPD_F7 Flag 0x8000: WPD_F8: WPD_F8 Flag 0x10000: Janus: Janus Flag 0x20000: Extension: Extension Flag {932B59F1-90C2-D8BA-0956-3975C344AE2B} MOF ODBCBCP.1 {94335EB3-79EA-44D5-8EA9-306F49B3A070} MOF Downlevel IPsec Policy Store - keyword: 0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag 0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag 0x4: TRC_INFORMATION: TRC_INFORMATION Flag 0x8: TRC_WARNING: TRC_WARNING Flag 0x10: TRC_ERROR: TRC_ERROR Flag {EF4109DC-68FC-45AF-B329-CA2825437209} MOF Certificate Services Client CredentialRoaming Trace - keyword: 0x1: TRC_FATAL: TRC_FATAL Flag 0x2: TRC_ERROR: TRC_ERROR Flag 0x4: TRC_WARNING: TRC_WARNING Flag 0x8: TRC_INFO: TRC_INFO Flag 0x10: TRC_DETAIL: TRC_DETAIL Flag {0C51B20C-F755-48A8-8123-BF6DA2ADC727} MOF TS Client Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag {D2C4D428-7B68-4563-AF51-96C13F95A807} MOF Infrared Monitor Service - keyword: 0x1: IRMON_ERROR: Irmon Error Debug Msg 0x2: IRMON_WARN: Irmon Warn Debug Msg 0x4: IRMON_INFO: Irmon Info Debug Msg 0x8: IRMON_VERBOSE: Irmon Verbose Debug Msg {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E98} MOF IMAPI2 Standard Data Writer - keyword: 0x1: MsftDiscFormat2Data_DebugConstructor: MsftDiscFormat2Data_DebugConstructor Flag 0x2: MsftDiscFormat2Data_DebugDestructor: MsftDiscFormat2Data_DebugDestructor Flag 0x4: MsftDiscFormat2Data_DebugGeneral: MsftDiscFormat2Data_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {D905AC1C-65E7-4242-99EA-FE66A8355DF8} MOF Native WIFI Filter Driver Trace - keyword: 0x1: DOT11_ASSOCIATE: DOT11_ASSOCIATE Flag 0x2: DOT11_ROAMING: DOT11_ROAMING Flag 0x4: DOT11_1X: DOT11_1X Flag 0x8: DOT11_PNP: DOT11_PNP Flag 0x10: DOT11_SCAN: DOT11_SCAN Flag 0x20: DOT11_RECEIVE: DOT11_RECEIVE Flag 0x40: DOT11_SEND: DOT11_SEND Flag 0x80: DOT11_IOCTL: DOT11_IOCTL Flag 0x100: DOT11_OID: DOT11_OID Flag 0x200: DOT11_MISC: DOT11_MISC Flag 0x400: DOT11_UPCALL: DOT11_UPCALL Flag 0x800: DOT11_KEYMGR: DOT11_KEYMGR Flag 0x1000: DOT11_PEER: DOT11_PEER Flag 0x2000: DOT11_SOFTAP: DOT11_SOFTAP Flag 0x4000: DOT11_PAM: DOT11_PAM Flag 0x8000: DOT11_REPEATER: DOT11_REPEATER Flag 0x10000: DOT11_APROUTER: DOT11_APROUTER Flag 0x20000: DOT11_WME: DOT11_WME Flag 0x40000: DOT11_CONFIG: DOT11_CONFIG Flag 0x80000: DOT11_NOTIFY_OBJECT: DOT11_NOTIFY_OBJECT Flag {E2EB5B52-08B1-4391-B670-F58317376247} MOF WLAN Extensibility Trace - keyword: 0x1: DOT11_ISF: DOT11_ISF Flag {AFF081FE-0247-4275-9C4E-021F3DC1DA35} MOF ASP.NET Events - keyword: 0x1: Infrastructure: Infrastructure Events 0x2: Module: Pipeline Module Events 0x4: Page: Page Events 0x8: AppServices: Application Services Events - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors 0x3: Warning: Warnings 0x4: Information: Information 0x5: Verbose: Detailed information {D3DE60B2-A663-45D5-9826-A0A5949D2CB0} MOF MUI Resource Trace {649E3596-2620-4D58-A01F-17AEFE8185DB} MOF FD Publication Trace - keyword: 0x1: DUMMY: DUMMY Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E97} MOF IMAPI2 Media Eraser - keyword: 0x1: MsftDiscFormat2Erase_DebugConstructor: MsftDiscFormat2Erase_DebugConstructor Flag 0x2: MsftDiscFormat2Erase_DebugDestructor: MsftDiscFormat2Erase_DebugDestructor Flag 0x4: MsftDiscFormat2Erase_DebugGeneral: MsftDiscFormat2Erase_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {13CD7F92-5BAA-8C7C-3D72-B69FAC139A46} MOF MSADDS.1 {480217A9-F824-4BD4-BBE8-F371CAAF9A0D} MOF FD Core Trace - keyword: 0x1: DUMMY: DUMMY Flag {F34765F6-A1BE-4B9D-1400-B8A12921F704} MOF ODBC.1 {7311AD03-18D6-45AC-9B08-B020BDD6A590} MOF PNPX AssocDB Trace - keyword: 0x1: DUMMY: DUMMY Flag {DAB01D4D-2D48-477D-B1C3-DAAD0CE6F06B} MOF ACPI Driver Trace Provider {C127C1A8-6CEB-11DA-8BDE-F66BAD1E3F3A} MOF TS Rdp Init Trace - keyword: 0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag 0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag 0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag {64A552E0-6C60-B907-E59C-10F1DFF76B0D} MOF MSDAPRST.1 {4B6EFB94-30EA-49A7-BB29-E9ED9DCE67DA} MOF WPD Bluetooth MTP Emumerator Driver Trace - keyword: 0x1: CRITICAL Flag: CRITICAL Flag 0x2: ERROR Flag: ERROR Flag 0x4: WARNING Flag: WARNING Flag 0x8: ASSERT Flag: ASSERT Flag 0x10: FUNC_TRACE Flag: FUNC_TRACE Flag 0x20: INFO Flag: INFO Flag 0x40: TRACE Flag: TRACE Flag 0x80: DEV_CONFIG Flag: DEV_CONFIG Flag 0x100: PnP Flag: PnP Flag 0x200: Event Flag: Event Flag 0x400: Cancel Flag: Cancel Flag 0x800: Perf Flag: Perf Flag 0x1000: PerfVerbose Flag: PerfVerbose Flag 0x2000: Bulk Flag: Bulk Flag 0x4000: MtpOp Flag: MtpOp Flag 0x8000: Config Flag: Config Flag 0x10000: L2CAP Flag: L2CAP Flag 0x20000: IO Flag: IO Flag 0x40000: Packet: Packet Flag {0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9C} MOF IMAPI2 Pseudo-Random Stream - keyword: 0x1: MsftDiscFormat2StreamRandom_DebugConstructor: MsftDiscFormat2StreamRandom_DebugConstructor Flag 0x2: MsftDiscFormat2StreamRandom_DebugDestructor: MsftDiscFormat2StreamRandom_DebugDestructor Flag 0x4: MsftDiscFormat2StreamRandom_DebugGeneral: MsftDiscFormat2StreamRandom_DebugGeneral Flag - level: 0x1: Fatal: Abnormal exit or termination 0x2: Error: Severe errors that need logging 0x3: Warning: Warnings such as allocation failure 0x4: Information: Includes non-error cases 0x5: Verbose: Detailed traces from intermediate steps {101C0E21-EBBA-A60A-EC3D-58797788928A} MOF MSADCF.1 {0063715B-EEDA-4007-9429-AD526F62696E} Manifest Microsoft-Windows-Services - channel: 0x10: Microsoft-Windows-Services/Diagnostic - keyword: 0x10000: Performance 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Services/Diagnostic - level: 0x4: win:Informational: Information {00B7E1DF-B469-4C69-9C41-53A6576E3DAD} Manifest Microsoft-Windows-Security-IdentityStore - channel: 0x10: Microsoft-Windows-Security-IdentityStore/Performance - keyword: 0x8000000000000000: Microsoft-Windows-Security-IdentityStore/Performance - level: 0x4: win:Informational: Information {01090065-B467-4503-9B28-533766761087} Manifest Microsoft-Windows-ParentalControls - channel: 0x10: Microsoft-Windows-ParentalControls/Operational - keyword: 0x10: WPC: WPC 0x20: ThirdParty: ThirdParty 0x8000000000000000: Microsoft-Windows-ParentalControls/Operational - level: 0x4: win:Informational: Information {01578F96-C270-4602-ADE0-578D9C29FC0C} Manifest Microsoft-Windows-VAN - channel: 0x10: Microsoft-Windows-VAN/Diagnostic: Microsoft-Windows-VAN/Diagnostic - keyword: 0x1: PerfLabTest 0x10: VAN-Performance 0x100: Aoac 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-VAN/Diagnostic: Microsoft-Windows-VAN/Diagnostic - level: 0x4: win:Informational: Information {017247F2-7E96-11DC-8314-0800200C9A66} Manifest Microsoft-Windows-ErrorReportingConsole - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {017BA13C-9A55-4F1F-8200-323055AAC810} Manifest Microsoft-Windows-Registry-SQM-Provider - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {01979C6A-42FA-414C-B8AA-EEE2C8202018} Manifest Microsoft-Windows-WindowsBackup - channel: 0x10: Microsoft-Windows-WindowsBackup/ActionCenter - keyword: 0x8000000000000000: Microsoft-Windows-WindowsBackup/ActionCenter - level: 0x4: win:Informational: Information {02012A8A-ADF5-4FAB-92CB-CCB7BB3E689A} Manifest Microsoft-Windows-ShareMedia-ControlPanel - channel: 0x10: Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic - level: 0x4: win:Informational: Information {030F2F57-ABD0-4427-BCF1-3A3587D7DC7D} Manifest Microsoft-Windows-Diagnostics-PerfTrack - channel: 0x10: Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic - keyword: 0x10000: PerfTrackStatus: PerfTrack Status 0x20000: SQMStatus: SQM Status 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {04268430-D489-424D-B914-0CFF741D6684} Manifest Microsoft-Windows-Bluetooth-MTPEnum - channel: 0x10: Microsoft-Windows-Bluetooth-MTPEnum/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-Bluetooth-MTPEnum/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {04A490D4-84C6-4920-9C22-51C80825FF2C} Manifest Microsoft-Windows-Telephony-PhoneUtil - keyword: 0x1: Error 0x2: Performance 0x1000: MISC 0x2000: SIMOM 0x4000000000: Warning 0x8000000000: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {04D66358-C4A1-419B-8023-23B73902DE2C} Manifest Microsoft-Windows-PDH - keyword: 0x80000000000000: win:EventlogClassic: Classic {04ECCF8E-8490-4AD1-8ED5-0AE7750E69E6} Manifest Microsoft-Windows-MCCS-AccountsHost {05921578-2261-42C7-A0D3-26DDBCE6C50D} Manifest Microsoft-Windows-Diagnosis-WDC - channel: 0x10: Microsoft-Windows-Diagnosis-WDC/Analytic - keyword: 0x200: memory 0x400: list 0x800: error 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Diagnosis-WDC/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {059C3E04-5535-4929-85E1-93030E78F47B} Manifest Microsoft-Windows-Shsvcs - channel: 0x10: Microsoft-Windows-Shsvcs/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Shsvcs/Diagnostic - level: 0x4: win:Informational: Information {059F0F37-910E-4FF0-A7EE-AE8D49DD319B} Manifest Microsoft-Windows-ReFS-v1 - channel: 0x8: System: System - keyword: 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {05D7B0F0-2121-4EFF-BF6B-ED3F69B894D7} Manifest Microsoft-Windows-TaskbarCPL - channel: 0x10: Microsoft-Windows-TaskbarCPL/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-TaskbarCPL/Diagnostic - level: 0x4: win:Informational: Information {05F02597-FE85-4E67-8542-69567AB8FD4F} Manifest Microsoft-Windows-LiveId - channel: 0x10: Microsoft-Windows-LiveId/Analytic: Microsoft-Windows-LiveId/Analytic 0x11: Microsoft-Windows-LiveId/Operational: Microsoft-Windows-LiveId/Operational - keyword: 0x1: Telemetry: Telemetry trigger events 0x2: Error: Error 0x4: Analytic: Analytic 0x8: Function: Function 0x10: Operational: Operational 0x20: Warning: Warning 0x40: Critical: Critical 0x80: RequestStart: Request Start 0x100: LiveSsp: livessp 0x200: CredProv: wlidcredprov 0x400: WlidNsp: wlidnsp 0x800: WlidSvc: wlidsvc 0x1000: WlidModern: wlidmodern 0x2000: WlidCli: wlidcli 0x4000: WlidProv: wlidprov 0x8000: WlidBho: wlidbho 0x10000: TokenProvider: TokenProvider 0x20000: Extension: MSA Extension API 0x40000: Cache: Cache 0x80000: Credentials: Credentials 0x100000: StateMachine: StateMachine 0x200000: SOAP: SOAP 0x400000: RPC: RPC 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-LiveId/Analytic: Microsoft-Windows-LiveId/Analytic 0x4000000000000000: Microsoft-Windows-LiveId/Operational: Microsoft-Windows-LiveId/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {0602ECEF-6381-4BC0-AEDA-EB9BB919B276} Manifest Microsoft-Windows-Bluetooth-Policy - channel: 0x10: Microsoft-Windows-Bluetooth/Policy - keyword: 0x8000000000000000: Microsoft-Windows-Bluetooth/Policy - level: 0x4: win:Informational: Information {06184C97-5201-480E-92AF-3A3626C5B140} Manifest Microsoft-Windows-Services-Svchost - channel: 0x10: Microsoft-Windows-Services-Svchost/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Services-Svchost/Diagnostic - level: 0x4: win:Informational: Information {0657ADC1-9AE8-4E18-932D-E6079CDA5AB3} Manifest Microsoft-Windows-TimeBroker - channel: 0x10: TimeBroker: Debug - keyword: 0x1: Api: API 0x2: EventState: EventState 0x8000000000000000: TimeBroker: Debug - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB} Manifest Microsoft-Windows-Time-Service - channel: 0x8: System: System 0x10: Microsoft-Windows-Time-Service/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Time-Service/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {07DE7879-1C96-41CE-AFBD-C659A0E8E643} Manifest Microsoft-Windows-VolumeControl - channel: 0x10: Microsoft-Windows-VolumeControl/Performance: Performance - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-VolumeControl/Performance: Performance - level: 0x4: win:Informational: Information {08466062-AED4-4834-8B04-CDDB414504E5} Manifest Microsoft-Windows-Security-Audit-Configuration-Client - channel: 0x10: Microsoft-Windows-Security-Audit-Configuration-Client/Operational: Microsoft-Windows-Security-Audit-Configuration-Client/Operational 0x11: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Security-Audit-Configuration-Client/Operational: Microsoft-Windows-Security-Audit-Configuration-Client/Operational 0x4000000000000000: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {0888E5EF-9B98-4695-979D-E92CE4247224} Manifest Microsoft-Windows-RestartManager - channel: 0x9: Application: Application 0x10: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {088A803B-578D-41B1-9402-92B7CEB380C8} Manifest Microsoft-Windows-Telephony-TelephonyInteractiveUser {08D945EB-C8BD-44AA-994F-86079D8DCE35} Manifest Microsoft-Windows-Shell-AppWizCpl - channel: 0x10: Microsoft-Windows-Shell-AppWizCpl/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Shell-AppWizCpl/Diagnostic - level: 0x4: win:Informational: Information {093DA50C-0BB9-4D7D-B95C-3BB9FCDA5EE8} Manifest Microsoft-Windows-Winsock-SQM - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {09608C12-C1DA-4104-A6FE-B959CF57560A} Manifest Microsoft-Windows-WUSA - channel: 0x10: Setup 0x11: Microsoft-Windows-WUSA/Debug - keyword: 0x8000000000000000: Setup 0x4000000000000000: Microsoft-Windows-WUSA/Debug - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {099614A5-5DD7-4788-8BC9-E29F43DB28FC} Manifest Microsoft-Windows-LDAP-Client - channel: 0x10: Microsoft-Windows-LDAP-Client/Debug - keyword: 0x1: search 0x2: write 0x4: refcnt 0x8: heap 0x10: cache 0x20: ssl 0x40: spewsearch 0x80: serverdown 0x100: connect 0x200: reconnect 0x400: receivedata 0x800: bytes_sent 0x1000: eom 0x2000: ber 0x4000: outmemory 0x8000: controls 0x10000: bytes_received 0x20000: cldap 0x40000: filter 0x80000: bind 0x100000: network_errors 0x200000: verbose 0x400000: parse 0x800000: referrals 0x1000000: request 0x2000000: connection 0x4000000: init_term 0x8000000: api_errors 0x10000000: errors 0x8000000000000000: Microsoft-Windows-LDAP-Client/Debug - level: 0x0: win:LogAlways: Log Always {09AC07B9-6AC9-43BC-A50F-58419A797C69} Manifest Microsoft-Windows-SmartCard-Audit - channel: 0x10: Microsoft-Windows-SmartCard-Audit/Authentication: Microsoft-Windows-SmartCard-Audit/Authentication - keyword: 0x1: AuditFailure: Audit Failure 0x2: AuditSuccess: Audit Success 0x4: SmartCard: Smart Card 0x8: CHV: CHV 0x10: PIN: PIN 0x8000000000000000: Microsoft-Windows-SmartCard-Audit/Authentication: Microsoft-Windows-SmartCard-Audit/Authentication - level: 0x2: win:Error: Error 0x4: win:Informational: Information {09EC9687-D7AD-40CA-9C5E-78A04A5AE993} Manifest Microsoft-Windows-DeviceSync - channel: 0x10: Microsoft-Windows-DeviceSync/Operational 0x11: Microsoft-Windows-DeviceSync/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-DeviceSync/Operational 0x4000000000000000: Microsoft-Windows-DeviceSync/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {0A002690-3839-4E3A-B3B6-96D8DF868D99} Manifest Microsoft-Antimalware-Engine - level: 0x4: win:Informational: Information {0A88862D-20A3-4C1F-B76F-162C55ADBF93} Manifest Microsoft-Windows-ClearTypeTextTuner - channel: 0x10: Microsoft-Windows-ClearTypeTextTuner/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: Microsoft-Windows-ClearTypeTextTuner/Diagnostic - level: 0x4: win:Informational: Information {0B886108-1899-4D3A-9C0D-42D8FC4B9108} Manifest Microsoft-Windows-CoreSystem-InitMachineConfig - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {0B9FDCCC-451C-449C-9BD8-6756FCC6091A} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Storage-Filter - channel: 0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug 0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - keyword: 0x1: Reset 0x2: PortNotification 0x4: PauseResume 0x8: IoPerfNotification 0x10: Config 0x20: Perf 0x80000: Logo_Performance: Logo Performance measurement 0x100000: IO_Performance: IO Performance measurement 0x200000: Read: Read request 0x400000: Write: Write request 0x800000: PagingRead: Paging Read request 0x1000000: PagingWrite: Paging Write request 0x2000000: LowMemoryRead: Low memory Read request 0x4000000: LowMemoryWrite: Low memory write request 0x8000000: NonReadWrite: Non-Read/Write request 0x10000000: PassThrough: Pass-Through request 0x20000000: Flush: Flush request 0x40000000: IOCTL: Device I/O control request 0x80000000: WMI: WMI request 0x100000000: Power: Power request 0x200000000: PnP: PnP request 0x400000000: Enum: Device enumeration handling 0x800000000: Queue: Queue-related operation 0x1000000000: ISR: Interrupt Service Routine processing 0x2000000000: DPC: Deferred Procedure Call handling 0x4000000000: Timer: Timer-related operation 0x8000000000: Protocol: Bus protocol specific operation 0x10000000000: Target: Target-related operation 0x20000000000: Adapter: Controller or Host Bus Adapter related operation 0x40000000000: Retry: Retry handling 0x80000000000: Timeout: Timeout handling 0x100000000000: ReSet: Reset handling 0x200000000000: MiniportInterface: Activity between port and miniport 0x800000000000: Test: Testing-specific processing 0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug 0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {0BD19909-EB6F-4B16-8074-6DCE803F091D} Manifest Microsoft-Windows-UserDataAccess-Poom - keyword: 0x1: Error 0x2: Performance 0x4: POOM_Appointment 0x8: POOM_Contacts 0x10: POOM_Photos 0x20: POOM_Feeds 0x40: POOM 0x100: debug: Debug 0x4000000000: Warning 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {0BD3506A-9030-4F76-9B88-3E8FE1F7CFB6} Manifest Microsoft-Windows-NWiFi - channel: 0x10: Microsoft-Windows-NWiFi/Diagnostic: Microsoft-Windows-NWiFi/Diagnostic - keyword: 0x1: Init 0x2: Ioctls 0x4: RSNA 0x8: AuthUpcall 0x10: IODisp 0x20: NDISReq 0x40: TKIPSec 0x80: Reset 0x100: AssocMgr 0x200: LWF 0x400: SOFTAP 0x800: PowerMgmt 0x1000: SleepResume 0x2000: LwtDiagnostic 0x4000: DisconnectedStandby 0x10000000: TelemetryReserved28 0x20000000: Telemetry 0x40000000: Measures 0x80000000: CriticalData 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NWiFi/Diagnostic: Microsoft-Windows-NWiFi/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {0BF2FB94-7B60-4B4D-9766-E82F658DF540} Manifest Microsoft-Windows-Kernel-ShimEngine - channel: 0x10: Microsoft-Windows-Kernel-ShimEngine/Debug 0x11: Microsoft-Windows-Kernel-ShimEngine/Operational: Microsoft-Windows-Kernel-ShimEngine/Operational 0x12: Microsoft-Windows-Kernel-ShimEngine/Diagnostic - keyword: 0x1: ShimEngineEvents 0x2: ShimEngineMessages 0x100: DriverScopeGeneral 0x200: DriverScopePnp 0x400: DriverScopePower 0x800: DriverScopeIrps 0x1000: DriverScopePool 0x2000: SkipDriverUnloadGeneral 0x8000000000000000: Microsoft-Windows-Kernel-ShimEngine/Debug 0x4000000000000000: Microsoft-Windows-Kernel-ShimEngine/Operational: Microsoft-Windows-Kernel-ShimEngine/Operational 0x2000000000000000: Microsoft-Windows-Kernel-ShimEngine/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {0C478C5B-0351-41B1-8C58-4A6737DA32E3} Manifest Microsoft-Windows-WFP - channel: 0x10: Microsoft-Windows-IKE/Operational 0x11: Microsoft-Windows-WFP/Operational 0x12: Microsoft-Windows-WFP/Analytic 0x13: Microsoft-Windows-IKEDBG/Debug 0x14: Microsoft-Windows-VPN/Operational - keyword: 0x1: ut:Transfer 0x10: ut:AOAC 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-IKE/Operational 0x4000000000000000: Microsoft-Windows-WFP/Operational 0x2000000000000000: Microsoft-Windows-WFP/Analytic 0x1000000000000000: Microsoft-Windows-IKEDBG/Debug 0x800000000000000: Microsoft-Windows-VPN/Operational - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {0CC157B3-CF07-4FC2-91EE-31AC92E05FE1} Manifest Microsoft-Windows-AppSruProv - channel: 0x10: Microsoft-Windows-AppSruProv - keyword: 0x8000000000000000: Microsoft-Windows-AppSruProv - level: 0x4: win:Informational: Information {0D4FDC09-8C27-494A-BDA0-505E4FD8ADAE} Manifest Microsoft-Windows-Directory-Services-SAM - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {0D759F0F-CFF9-4902-8867-EB9E29D7A98B} Manifest Microsoft-Windows-WMP-Setup_WM - channel: 0x10: WMPSetup - keyword: 0x8000000000000000: WMPSetup - level: 0x4: win:Informational: Information {0DD4D48E-2BBF-452F-A7EC-BA3DBA8407AE} Manifest Microsoft-Windows-ActionQueue - channel: 0x10: Microsoft-Windows-ActionQueue/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-ActionQueue/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {0F177893-4A9C-4709-B921-F432D67F43D5} Manifest Microsoft-Windows-Complus - keyword: 0x80000000000000: win:EventlogClassic: Classic {0F352580-E9E2-46C2-8336-6AC66E986416} Manifest Microsoft-Windows-OOBE-Machine-Plugins-Wireless - channel: 0x10: Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic - keyword: 0x1: msoobe 0x8000000000000000: Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic - level: 0x4: win:Informational: Information {0F67E49F-FE51-4E9F-B490-6F2948CC6027} Manifest Microsoft-Windows-Kernel-Processor-Power - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-Processor-Power/Diagnostic - keyword: 0x1: Perf 0x2: Diag 0x4: PowerDiagnostics 0x8: Lpi 0x10: SleepStudy 0x20: Algorithm 0x40: Profiles 0x80: PerfDiag 0x100: EnergyEstimation 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-Processor-Power/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {0FA2EE03-1FEB-5057-3BB3-EB25521B8482} Manifest Microsoft-Windows-PersistentMemory-PmemDisk - channel: 0x8: System: System 0x10: Microsoft-Windows-PersistentMemory-PmemDisk/Analytic 0x11: Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic 0x12: Microsoft-Windows-PersistentMemory-PmemDisk/Operational - keyword: 0x2: Hardware_Events: Hardware events 0x100000000: Read: Read request 0x200000000: Write: Write request 0x400000000: PagingRead: Paging Read request 0x800000000: PagingWrite: Paging Write request 0x1000000000: NonReadWrite: Non-Read/Write request 0x2000000000: IOCTL: Device I/O control request 0x4000000000: PnP: PnP request 0x8000000000: IO_Performance: IO Performance measurement 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Analytic 0x2000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic 0x1000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {0FF1C24B-7F05-45C0-ABDC-3C8521BE4F62} Manifest Microsoft-Windows-Mobile-Broadband-Experience-SmsApi - channel: 0x10: SMSApi 0x11: Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic - keyword: 0x1: Default 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: SMSApi 0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic - level: 0x4: win:Informational: Information {10A208DD-A372-421C-9D99-4FAD6DB68B62} Manifest Microsoft-Windows-ApplicabilityEngine - channel: 0x10: Microsoft-Windows-ApplicabilityEngine/Operational 0x11: Microsoft-Windows-ApplicabilityEngine/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-ApplicabilityEngine/Operational 0x4000000000000000: Microsoft-Windows-ApplicabilityEngine/Analytic - level: 0x4: win:Informational: Information {1139C61B-B549-4251-8ED3-27250A1EDEC8} Manifest Microsoft-Windows-RemoteDesktopServices-RdpCoreTS - channel: 0x10: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin 0x11: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 0x12: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug - keyword: 0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin 0x4000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 0x2000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {11A75546-3234-465E-BEC8-2D301CB501AC} Manifest Microsoft-Windows-WindowsSystemAssessmentTool - channel: 0x10: Microsoft-Windows-WindowsSystemAssessmentTool/Operational 0x11: Microsoft-Windows-WindowsSystemAssessmentTool/Tracing 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-WindowsSystemAssessmentTool/Operational 0x4000000000000000: Microsoft-Windows-WindowsSystemAssessmentTool/Tracing 0x2000000000000000: Application: Application - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information {11BD2A68-77FF-4991-9658-F451F2EB6CE1} Manifest Microsoft-Windows-Shell-OpenWith - channel: 0x10: Microsoft-Windows-Shell-OpenWith/Diagnostic - keyword: 0x1: OpenWith 0x8000000000000000: Microsoft-Windows-Shell-OpenWith/Diagnostic - level: 0x4: win:Informational: Information {11C5D8AD-756A-42C2-8087-EB1B4A72A846} Manifest Microsoft-Windows-NdisImPlatformEventProvider - channel: 0x10: Microsoft-Windows-NdisImPlatform/Operational: Microsoft-Windows-NdisImPlatform/Operational - keyword: 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-NdisImPlatform/Operational: Microsoft-Windows-NdisImPlatform/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {11CD958A-C507-4EF3-B3F2-5FD9DFBD2C78} Manifest Microsoft-Windows-Windows Defender - channel: 0x10: Microsoft-Windows-Windows Defender/Operational 0x11: Microsoft-Windows-Windows Defender/WHC - keyword: 0x8000000000000000: Microsoft-Windows-Windows Defender/Operational 0x4000000000000000: Microsoft-Windows-Windows Defender/WHC - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {121D3DA8-BAF1-4DCB-929F-2D4C9A47F7AB} Manifest Microsoft-Windows-Base-Filtering-Engine-Connections - channel: 0x10: Microsoft-Windows-Base-Filtering-Engine-Connections/Operational: BFE IPsec Connections Operational Log - keyword: 0x20000000000: ut:PiiPresent 0x8000000000000000: Microsoft-Windows-Base-Filtering-Engine-Connections/Operational: BFE IPsec Connections Operational Log - level: 0x4: win:Informational: Information {125F2CF1-2768-4D33-976E-527137D080F8} Manifest Microsoft-Windows-SmartCard-TPM-VCard-Module - channel: 0x10: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin 0x11: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational - keyword: 0x8000000000000000: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin 0x4000000000000000: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {126CDB97-D346-4894-8A34-658DA5EEA1B6} Manifest Microsoft-Windows-System-Restore - channel: 0x9: Application: Application - keyword: 0x1: Performance: Performance 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Application: Application - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {126DED58-A28D-4113-8E7A-59D7444B2AF1} Manifest Microsoft-Windows-Ncasvc - channel: 0x10: Microsoft-Windows-Ncasvc/Operational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Ncasvc/Operational - level: 0x4: win:Informational: Information {127E0DC5-E13B-4935-985E-78FD508B1D80} Manifest Microsoft-Windows-TerminalServices-RdpSoundDriver - channel: 0x10: Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback 0x11: Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback 0x4000000000000000: Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture - level: 0x2: win:Error: Error 0x4: win:Informational: Information {12E3DA5B-14E4-4F76-8E35-C540763EF300} Manifest Microsoft-Windows-Globalization - channel: 0x10: Windows.Globalization/Analytic: Microsoft Windows.Globalization API Analytic Channel - keyword: 0x8000000000000000: Windows.Globalization/Analytic: Microsoft Windows.Globalization API Analytic Channel - level: 0x4: win:Informational: Information {13480A22-D79F-4334-9D32-AA239398AD3C} Manifest Microsoft-Windows-Speech-UserExperience - channel: 0x10: Microsoft-Windows-Speech-UserExperience/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Speech-UserExperience/Diagnostic - level: 0x4: win:Informational: Information {134EA407-755D-4A93-B8A6-F290CD155023} Manifest Microsoft-Windows-HomeGroup-ControlPanel - channel: 0x10: Microsoft-Windows-HomeGroup Control Panel/Operational: Microsoft-Windows-HomeGroup Control Panel/Operational 0x11: Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic - keyword: 0x10000: HomeGroup 0x8000000000000000: Microsoft-Windows-HomeGroup Control Panel/Operational: Microsoft-Windows-HomeGroup Control Panel/Operational 0x4000000000000000: Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {13B197BD-7CEE-4B4E-8DD0-59314CE374CE} Manifest Microsoft-Windows-Perflib - keyword: 0x80000000000000: win:EventlogClassic: Classic {13BC4371-4E21-4E46-A84F-8C0FFB548CED} Manifest Microsoft-Windows-DataIntegrityScan - channel: 0x10: Microsoft-Windows-DataIntegrityScan/Admin 0x11: Microsoft-Windows-DataIntegrityScan/CrashRecovery - keyword: 0x8000000000000000: Microsoft-Windows-DataIntegrityScan/Admin 0x4000000000000000: Microsoft-Windows-DataIntegrityScan/CrashRecovery - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1418EF04-B0B4-4623-BF7E-D74AB47BBDAA} Manifest Microsoft-Windows-WMI-Activity - channel: 0x10: Microsoft-Windows-WMI-Activity/Trace 0x11: Microsoft-Windows-WMI-Activity/Operational 0x12: Microsoft-Windows-WMI-Activity/Debug - keyword: 0x8000000000000000: Microsoft-Windows-WMI-Activity/Trace 0x4000000000000000: Microsoft-Windows-WMI-Activity/Operational 0x2000000000000000: Microsoft-Windows-WMI-Activity/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {14371053-1813-471A-9510-1CF1D0A055A8} Manifest Microsoft-Windows-IME-JPSetting - channel: 0x10: Microsoft-Windows-IME-JPSetting/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-JPSetting/Analytic - level: 0x4: win:Informational: Information {152FBE4B-C7AD-4F68-BADA-A4FCC1464F6C} Manifest Microsoft-Windows-Hyper-V-Netvsc - channel: 0x8: System: System 0x10: Microsoft-Windows-Hyper-V-NETVSC/Diagnostic - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Hyper-V-NETVSC/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {152FDB2B-6E9D-4B60-B317-815D5F174C4A} Manifest Microsoft-Windows-Crypto-RSAEnh - channel: 0x10: Microsoft-Windows-Crypto-RSAEnh/Analytic: Microsoft-Windows-Crypto-RSAEnh/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Crypto-RSAEnh/Analytic: Microsoft-Windows-Crypto-RSAEnh/Analytic {155CB334-3D7F-4FF1-B107-DF8AFC3C0363} Manifest Microsoft-Windows-MSDTC Client 2 - keyword: 0x80000000000000: win:EventlogClassic: Classic {15A7A4F8-0072-4EAB-ABAD-F98A4D666AED} Manifest Microsoft-Windows-Dhcp-Client - channel: 0x10: Microsoft-Windows-Dhcp-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational 0x11: Microsoft-Windows-Dhcp-Client/Admin: Microsoft-Windows-DHCP Client Events/Admin 0x8: System: System - keyword: 0x1: DHCP_AOAC 0x200000000000: ms:Telemetry 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Dhcp-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational 0x4000000000000000: Microsoft-Windows-Dhcp-Client/Admin: Microsoft-Windows-DHCP Client Events/Admin 0x2000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {15CA44FF-4D7A-4BAA-BBA5-0998955E531E} Manifest Microsoft-Windows-Kernel-Boot - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-Boot/Analytic 0x11: Microsoft-Windows-Kernel-Boot/Operational - keyword: 0x1: SoftRestart 0x2: MemoryPreservation 0x4: MemoryBlockRundown 0x8: PhysicalMemory 0x10: MemoryMapRundown 0x20: MemoryPartitions 0x40: EfiVariables 0x80000000000: LOG_TO_BOOTSTAT 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-Boot/Analytic 0x2000000000000000: Microsoft-Windows-Kernel-Boot/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {16A1ADC1-9B7F-4CD9-94B3-D8296AB1B130} Manifest Microsoft-Windows-Kernel-AppCompat - channel: 0x10: Microsoft-Windows-Kernel-AppCompat/General 0x11: Microsoft-Windows-Kernel-AppCompat/Performance - keyword: 0x8: RegWrpAccessDenied 0x8000000000000000: Microsoft-Windows-Kernel-AppCompat/General 0x4000000000000000: Microsoft-Windows-Kernel-AppCompat/Performance - level: 0x4: win:Informational: Information {16C6501A-FF2D-46EA-868D-8F96CB0CB52D} Manifest Microsoft-Windows-SEC - keyword: 0x1: Event1 0x2: Event22 0x4: Event19 0x8: Event18 0x10: Event23 0x20: Event20 0x40: Event4 0x80: Event7 0x100: Event6 0x200: Event5 0x400: Event8 0x800: Event10 0x1000: Event11 0x2000: Event12 0x4000: Event9 0x8000: Event13 0x10000: Event16 0x40000: Event21 0x80000: IHs 0x100000: Event17 0x200000: Event24 0x400000: Event25 0x1000000: Event27 0x2000000: Event28 0x4000000: Event29 0x8000000: Event30 0x10000000: Event31 0x20000000: Event32 0x40000000: Event33 0x80000000: Event34 0x100000000: KEID 0x200000000: KSTD 0x400000000: X86AE 0x1000000000: Event36 0x2000000000: Event37 0x4000000000: Event35 0x8000000000: KIC 0x10000000000: Event38 0x20000000000: Event39 - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {178DADAF-7AC4-4593-AB3E-A45FDA6D0D55} Manifest Microsoft-Windows-Diagnosis-AdvancedTaskManager - channel: 0x10: Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic - keyword: 0x200: memory 0x400: list 0x800: error 0x1000: dashboard 0x2000: ui 0x4000: datamonitor 0x200000000000: ms:Telemetry 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {17D6E590-F5FE-11DC-95FF-0800200C9A66} Manifest Microsoft-Windows-ApplicationExperience-SwitchBack - level: 0x4: win:Informational: Information {17E92E2A-3D08-413E-BAEB-A79A262BF486} Manifest Microsoft-Windows-MsiServer - keyword: 0x80000000000000: win:EventlogClassic: Classic - level: 0x5: win:Verbose: Verbose {17F14A23-551D-40CC-A086-E4194D64ED4C} Manifest Microsoft-Windows-WABSyncProvider - channel: 0x10: Microsoft-Windows-WABSyncProvider/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WABSyncProvider/Analytic - level: 0x4: win:Informational: Information {18F4A5FD-FD3B-40A5-8FC2-E5D261C5D02E} Manifest Microsoft-Windows-ApplicationExperience-LookupServiceTrigger - level: 0x4: win:Informational: Information {192EDE41-9175-4C86-AC02-9D003C9D43AB} Manifest Microsoft-Windows-DisplaySwitch - channel: 0x10: Microsoft-Windows-DisplaySwitch/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DisplaySwitch/Diagnostic - level: 0x4: win:Informational: Information {199FE037-2B82-40A9-82AC-E1D46C792B99} Manifest LsaSrv - channel: 0x8: System: System 0x10: Microsoft-Windows-LSA/Performance 0x11: Microsoft-Windows-LSA/Operational: Operational 0x12: Microsoft-Windows-LSA/Diagnostic: Diagnostic - keyword: 0x1: WPDBusEnumStartTrigger 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-LSA/Performance 0x2000000000000000: Microsoft-Windows-LSA/Operational: Operational 0x1000000000000000: Microsoft-Windows-LSA/Diagnostic: Diagnostic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {19A4C69A-28EB-4D4B-8D94-5F19055A1B5C} Manifest Microsoft-Windows-AsynchronousCausality - channel: 0x10: Microsoft-Windows-AsynchronousCausality/Causality - keyword: 0x1: AsynchronousOperation: Identifies events for asynchronous operations. 0x2: SynchronousWorkItem: Identifies events for synchronous work items. 0x4: Relation: Identifies events relating synchronous work items to asynchronous operations. 0x10: OperationWork: Identifies events for work done by asynchronous operations. 0x100: SystemOperation: Identifies events orginated by system components. 0x200: LibraryOperation: Identifies events originated by libraries and language projections. 0x400: ApplicationOperation: Identifies events originated by an application. 0x800: OperationCreate: Identifies events originated by the creation of an asynchronous operation. 0x8000000000000000: Microsoft-Windows-AsynchronousCausality/Causality - level: 0x1: win:Critical: Critical 0x3: win:Warning: Warning 0x5: win:Verbose: Verbose {19D2C934-EE9B-49E5-AAEB-9CCE721D2C65} Manifest Microsoft-Windows-OLEACC - channel: 0x10: Microsoft-Windows-OLEACC/Diagnostic 0x12: Microsoft-Windows-OLEACC/Debug - keyword: 0x8000000000000000: Microsoft-Windows-OLEACC/Diagnostic 0x4000000000000000: Microsoft-Windows-OLEACC/Debug - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {1A396961-5F3C-4C71-8310-44C653C0BF8A} Manifest Microsoft-Windows-DiagCpl - channel: 0x10: Microsoft-Windows-DiagCpl/Debug: Microsoft-Windows-DiagCpl/Debug - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DiagCpl/Debug: Microsoft-Windows-DiagCpl/Debug - level: 0x4: win:Informational: Information {1A772F65-BE1E-4FC6-96BB-248E03FA60F5} Manifest Microsoft-Windows-EnergyEfficiencyWizard - channel: 0x10: Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic - level: 0x4: win:Informational: Information {1A870028-F191-4699-8473-6FCD299EAB77} Manifest Microsoft-Windows-Remotefs-Rdbss - channel: 0x10: Microsoft-Windows-Remotefs-Rdbss/Diagnostic: Microsoft-Windows-Remotefs-Rdbss/Diagnostic 0x11: Microsoft-Windows-Remotefs-Rdbss/Operational: Microsoft-Windows-Remotefs-Rdbss/Operational - keyword: 0x1: Rdbss_Perf 0x2: Rdbss_Info 0x400000000000: ut:Diagnostic 0x8000000000000000: Microsoft-Windows-Remotefs-Rdbss/Diagnostic: Microsoft-Windows-Remotefs-Rdbss/Diagnostic 0x4000000000000000: Microsoft-Windows-Remotefs-Rdbss/Operational: Microsoft-Windows-Remotefs-Rdbss/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {1A9443D4-B099-44D6-8EB1-829B9C2FE290} Manifest Microsoft-Windows-PCI - channel: 0x10: Microsoft-Windows-PCI/Diagnostic - keyword: 0x1: Diag 0x8000000000000000: Microsoft-Windows-PCI/Diagnostic - level: 0x4: win:Informational: Information {1B562E86-B7AA-4131-BADC-B6F3A001407E} Manifest Microsoft-Windows-DistributedCOM - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System - level: 0x2: win:Error: Error {1B6B0772-251B-4D42-917D-FACA166BC059} Manifest TPM - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {1B734B40-A458-4B81-954F-AD7C9461BED8} Manifest Microsoft-Windows-IME-CustomerFeedbackManagerUI - channel: 0x10: Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic - level: 0x4: win:Informational: Information {1B8B402D-78DC-46FB-BF71-46E64AEDF165} Manifest Microsoft-Windows-RemoteApp and Desktop Connections - channel: 0x9: Application: Application 0x10: Microsoft-Windows-RemoteApp and Desktop Connections/Admin 0x11: Microsoft-Windows-RemoteApp and Desktop Connections/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-RemoteApp and Desktop Connections/Admin 0x2000000000000000: Microsoft-Windows-RemoteApp and Desktop Connections/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1BDA2AB1-BBC1-4ACB-A849-C0EF2B249672} Manifest Microsoft-Windows-Spellchecking-Host - channel: 0x10: Microsoft-Windows-Spellchecking-Host/Analytic: Microsoft Windows Spell Checking Host Analytic Channel 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-Spellchecking-Host/Analytic: Microsoft Windows Spell Checking Host Analytic Channel 0x4000000000000000: Application: Application - level: 0x2: win:Error: Error 0x4: win:Informational: Information {1BE1A88D-8E34-4170-9123-F503375BBCEF} Manifest Microsoft-Windows-StorSqm - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {1C95126E-7EEA-49A9-A3FE-A378B03DDB4D} Manifest Microsoft-Windows-DNS-Client - channel: 0x10: Microsoft-Windows-DNS-Client/Operational: Microsoft-Windows-DNS Client Events/Operational 0x8: System: System - keyword: 0x100: ut:GenericEvent 0x10000000: ut:DnsAutoLogKeyword 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:PolicyTable 0x400000000000: ut:PerfCheckPoints 0x800000000000: ut:RegistrationEvent 0x8000000000000000: Microsoft-Windows-DNS-Client/Operational: Microsoft-Windows-DNS Client Events/Operational 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1D5990C1-EC62-49F0-9E37-1F4DB12DB41E} Manifest Microsoft-Windows-DeviceConfidence - channel: 0x10: Microsoft-Windows-DeviceConfidence/Analytic - keyword: 0x1: Default 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DeviceConfidence/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {1D5E499D-739C-45A6-A3E1-8CBE0A352BEB} Manifest Microsoft-Windows-Deduplication-Change - level: 0x4: win:Informational: Information {1D75856D-36A7-4ECB-A3F5-B13152222D29} Manifest Microsoft-Windows-MSPaint - channel: 0x10: Microsoft-Windows-MSPaint/Admin 0x11: Microsoft-Windows-MSPaint/Diagnostic 0x12: Microsoft-Windows-MSPaint/Debug - keyword: 0x8000000000000000: Microsoft-Windows-MSPaint/Admin 0x4000000000000000: Microsoft-Windows-MSPaint/Diagnostic 0x2000000000000000: Microsoft-Windows-MSPaint/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {1DB28F2E-8F80-4027-8C5A-A11F7F10F62D} Manifest Microsoft-Windows-Backup - channel: 0x9: Application: Application 0x10: Microsoft-Windows-Backup: Microsoft-Windows-Backup/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-Backup: Microsoft-Windows-Backup/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1DB8DAD0-7CA6-4F18-B357-43BFDD8C9806} Manifest Microsoft-Windows-Telephony-PhoneProviders {1DE130E1-C026-4CBF-BA0F-AB608E40AEEA} Manifest Microsoft-Windows-BitLocker-Driver-Performance - channel: 0x10: Microsoft-Windows-BitLocker-Driver-Performance/Operational - keyword: 0x20: fve:Performance 0x40: fve:CryptoPerformance 0x8000000000000000: Microsoft-Windows-BitLocker-Driver-Performance/Operational - level: 0x4: win:Informational: Information {1E2462BE-B025-48DA-8C1F-7B60B8CCAE53} Manifest Microsoft-Windows-AppModel-MessagingDataModel {1E39B4CE-D1E6-46CE-B65B-5AB05D6CC266} Manifest Microsoft-Windows-Networking-RealTimeCommunication - channel: 0x10: Microsoft-Windows-Networking-RealTimeCommunication/Tracing - keyword: 0x1: Aoac: Aoac 0x8000000000000000: Microsoft-Windows-Networking-RealTimeCommunication/Tracing - level: 0x4: win:Informational: Information {1E9A4978-78C2-441E-8858-75B5D1326BC5} Manifest Microsoft-Windows-NetworkProvider - channel: 0x10: Microsoft-Windows-NetworkProvider/Operational: Microsoft-Windows-NetworkProvider/Operational - keyword: 0x100: UncHardening: UNC Hardening 0x8000000000000000: Microsoft-Windows-NetworkProvider/Operational: Microsoft-Windows-NetworkProvider/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {1ED6976A-4171-4764-B415-7EA08BC46C51} Manifest Microsoft-User Experience Virtualization-App Agent - channel: 0x10: Microsoft-User Experience Virtualization-App Agent/Operational: Operational 0x11: Microsoft-User Experience Virtualization-App Agent/Debug 0x12: Microsoft-User Experience Virtualization-App Agent/Analytic: Analytic - keyword: 0x1: DebugTrace: Debug Out Messages. 0x8000000000000000: Microsoft-User Experience Virtualization-App Agent/Operational: Operational 0x4000000000000000: Microsoft-User Experience Virtualization-App Agent/Debug 0x2000000000000000: Microsoft-User Experience Virtualization-App Agent/Analytic: Analytic - level: 0x0: win:LogAlways: Log Always 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {1EDEEE53-0AFE-4609-B846-D8C0B2075B1F} Manifest Microsoft-Windows-WMI - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1EE3ABDB-C1FC-4B43-9E56-11064ABBA866} Manifest Microsoft-Windows-XAudio2 - channel: 0x10: Microsoft-Windows-XAudio2/Debug: Microsoft Windows XAudio2 debug logging 0x11: Microsoft-Windows-XAudio2/Performance: Microsoft Windows XAudio2 performance metrics - keyword: 0x8000000000000000: Microsoft-Windows-XAudio2/Debug: Microsoft Windows XAudio2 debug logging 0x4000000000000000: Microsoft-Windows-XAudio2/Performance: Microsoft Windows XAudio2 performance metrics - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: Performance: Performance measurements {1F678132-5938-4686-9FDC-C8FF68F15C85} Manifest Schannel - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {1F84007D-19CE-4B15-9E81-8A3DD8EB9ECB} Manifest Microsoft-Windows-Shell-ZipFolder - channel: 0x10: Microsoft-Windows-Shell-ZipFolder/Diagnostic - keyword: 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-Shell-ZipFolder/Diagnostic - level: 0x4: win:Informational: Information {206F6DEA-D3C5-4D10-BC72-989F03C8B84B} Manifest Microsoft-Windows-Wininit - channel: 0x10: Microsoft-Windows-Wininit/Diagnostic 0x8: System: System - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-Wininit/Diagnostic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {21B7C16E-C5AF-4A69-A74A-7245481C1B97} Manifest Microsoft-Windows-WPD-MTPClassDriver - channel: 0x10: Microsoft-Windows-WPD-MTPClassDriver/Operational: Operational 0x11: Microsoft-Windows-WPD-MTPClassDriver/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-MTPClassDriver/Operational: Operational 0x4000000000000000: Microsoft-Windows-WPD-MTPClassDriver/Analytic: Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {21D79DB0-8E03-41CD-9589-F3EF7001A92A} Manifest Microsoft-User Experience Virtualization-IPC - channel: 0x10: Microsoft-User Experience Virtualization-IPC/Operational: Operational - keyword: 0x8000000000000000: Microsoft-User Experience Virtualization-IPC/Operational: Operational - level: 0x4: win:Informational: Information {22B6D684-FA63-4578-87C9-EFFCBE6643C7} Manifest Microsoft-Windows-WebdavClient-LookupServiceTrigger {22FB2CD6-0E7B-422B-A0C7-2FAD1FD0E716} Manifest Microsoft-Windows-Kernel-Process - channel: 0x10: Microsoft-Windows-Kernel-Process/Analytic - keyword: 0x10: WINEVENT_KEYWORD_PROCESS 0x20: WINEVENT_KEYWORD_THREAD 0x40: WINEVENT_KEYWORD_IMAGE 0x80: WINEVENT_KEYWORD_CPU_PRIORITY 0x100: WINEVENT_KEYWORD_OTHER_PRIORITY 0x200: WINEVENT_KEYWORD_PROCESS_FREEZE 0x400: WINEVENT_KEYWORD_JOB 0x800: WINEVENT_KEYWORD_ENABLE_PROCESS_TRACING_CALLBACKS 0x1000: WINEVENT_KEYWORD_JOB_IO 0x2000: WINEVENT_KEYWORD_WORK_ON_BEHALF 0x4000: WINEVENT_KEYWORD_JOB_SILO 0x8000000000000000: Microsoft-Windows-Kernel-Process/Analytic - level: 0x4: win:Informational: Information {239CFB83-CBB7-4BBC-A02E-9BDB496AA7C2} Manifest Microsoft-Windows-WlanConn - channel: 0x10: Microsoft-Windows-WLANConnectionFlow/Diagnostic: Microsoft-Windows-WlanConn/Diagnostic - keyword: 0x1: WlanCfe-Performance 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WLANConnectionFlow/Diagnostic: Microsoft-Windows-WlanConn/Diagnostic - level: 0x4: win:Informational: Information {23B8D46B-67DD-40A3-B636-D43E50552C6D} Manifest Microsoft-Windows-User Device Registration - channel: 0x10: Microsoft-Windows-User Device Registration/Admin 0x11: Microsoft-Windows-User Device Registration/Debug - keyword: 0x8000000000000000: Microsoft-Windows-User Device Registration/Admin 0x4000000000000000: Microsoft-Windows-User Device Registration/Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {245F975D-909D-49ED-B8F9-9A75691D6B6B} Manifest Microsoft-Windows-URLMon - channel: 0x10: Microsoft-Windows-WinURLMon/Analytic - keyword: 0x1: URLMON_KEYWORD: Flagged on all URLMon IE events 0x8000000000000000: Microsoft-Windows-WinURLMon/Analytic - level: 0x4: win:Informational: Information {24989972-0967-4E21-A926-93854033638E} Manifest Microsoft-Windows-RRAS - channel: 0x10: Microsoft-Windows-RRAS/Debug: Notification Channel 0x11: Microsoft-Windows-RRAS/Operational: Admin Channel - keyword: 0x1: ut:RrasAdmin 0x2: ut:Mprdim 0x4: ut:Rtrmgr 0x8: ut:Vpnike 0x10: ut:Vpnikeapi 0x20: ut:Rtm 0x40: ut:Mprapi 0x80: ut:SstpSvc 0x100: ut:Rasppp 0x200: ut:Mprddm 0x400: ut:RasGre 0x8000000000000000: Microsoft-Windows-RRAS/Debug: Notification Channel 0x4000000000000000: Microsoft-Windows-RRAS/Operational: Admin Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {25B99A4C-2F80-4FCD-982D-69CD1F77BADF} Manifest Microsoft-Windows-MCCS-NetworkHelper - keyword: 0x1: Error 0x2: Performance 0x4: Debug 0x4000000000: Warning 0x8000000000: StateTransition: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {2683B597-3CCA-410A-97FE-6F7EE3D09B94} Manifest Microsoft-Windows-UserAccountControl - channel: 0x10: Microsoft-Windows-UserAccountControl/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-UserAccountControl/Diagnostic - level: 0x4: win:Informational: Information {271C5228-C3FE-4E47-831F-48C3652CE5AC} Manifest Microsoft-Windows-DxpTaskSyncProvider - channel: 0x10: Microsoft-Windows-DxpTaskSyncProvider/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DxpTaskSyncProvider/Analytic - level: 0x4: win:Informational: Information {272A979B-34B5-48EC-94F5-7225A59C85A0} Manifest Microsoft-Windows-RPC-Proxy-LBS - channel: 0x10: Microsoft-Windows-RPC-Proxy/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-RPC-Proxy/Debug: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {27A8C1E2-EB19-463E-8424-B399DF27A216} Manifest Microsoft-Windows-TerminalServices-PnPDevices - channel: 0x10: Microsoft-Windows-TerminalServices-PnPDevices/Admin: Admin 0x11: Microsoft-Windows-TerminalServices-PnPDevices/Analytic: Analytic 0x12: Microsoft-Windows-TerminalServices-PnPDevices/Operational: Operational 0x13: Microsoft-Windows-TerminalServices-PnPDevices/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Admin: Admin 0x4000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Analytic: Analytic 0x2000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Operational: Operational 0x1000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {28058203-D394-4AFC-B2A6-2F9155A3BB95} Manifest Microsoft-Windows-Proximity-Common - channel: 0x10: Microsoft-Windows-Proximity-Common/Informational 0x11: Microsoft-Windows-Proximity-Common/Performance 0x12: Microsoft-Windows-Proximity-Common/Diagnostic - keyword: 0x1: ProximityAssociation 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Proximity-Common/Informational 0x4000000000000000: Microsoft-Windows-Proximity-Common/Performance 0x2000000000000000: Microsoft-Windows-Proximity-Common/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {287D59B6-79BA-4741-A08B-2FEDEEDE6435} Manifest Microsoft-Windows-EDP-Audit-TCB - channel: 0x10: Microsoft-Windows-EDP-Audit-TCB/Admin: Microsoft Windows Information Protection Audit TCB Channel - keyword: 0x10: EDP-Audit-Keyword-ProtectionRemoved: Windows Information Protection Audit Protection Removed Keyword 0x8000000000000000: Microsoft-Windows-EDP-Audit-TCB/Admin: Microsoft Windows Information Protection Audit TCB Channel - level: 0x4: win:Informational: Information {28AA95BB-D444-4719-A36F-40462168127E} Manifest Microsoft-Windows-TerminalServices-ClientActiveXCore - channel: 0x9: Application: Application 0x10: Microsoft-Windows-TerminalServices-RDPClient/Operational 0x11: Microsoft-Windows-TerminalServices-RDPClient/Analytic 0x12: Microsoft-Windows-TerminalServices-RDPClient/Debug - keyword: 0x100: AccessDenied: Access Denied 0x200: Disconnected: Client has disconnected 0x400: AuthFailed: Authentication Failure 0x800: LicenseError: Failed to get a license 0x1000: TimedOut: Operation has timed out 0x2000: InvalidState: Invalid State 0x4000: GatewayConnectFailed: Connection to gateway server failed 0x8000: NetworkUnAvailable: Network Unavailable 0x10000: DnsResolutionFailure: DNS resolution failure 0x20000: SignVerifFailed: Sign verification failed 0x40000: ResourceFailure: Resource check failed 0x80000: LogonFailed: Logon failed 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Operational 0x2000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Analytic 0x1000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {28CB46C7-4003-4E50-8BD9-442086762D12} Manifest Microsoft-AppV-Client-StreamingUX - channel: 0x10: Microsoft-AppV-Client-Streamingux/Debug - keyword: 0x8000000000000000: Microsoft-AppV-Client-Streamingux/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {28E25B07-C47F-473D-8B24-2E171CCA808A} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task - channel: 0x10: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Analytic 0x11: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Analytic 0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {292A52C4-FA27-4461-B526-54A46430BD54} Manifest Microsoft-Windows-Dwm-Api - channel: 0x10: Microsoft-Windows-Dwm-API/Diagnostic - keyword: 0x1: DwmApi 0x8000000000000000: Microsoft-Windows-Dwm-API/Diagnostic - level: 0x4: win:Informational: Information {2957313D-FCAA-5D4A-2F69-32CE5F0AC44E} Manifest Microsoft-Windows-COM-RundownInstrumentation - channel: 0x10: Microsoft-Windows-COM/RundownInstrumentation - keyword: 0x1: RundownInstrumentation 0x8000000000000000: Microsoft-Windows-COM/RundownInstrumentation - level: 0x4: win:Informational: Information {2992E9CF-4F99-48F5-A0B6-B99B11CD387D} Manifest Microsoft-Windows-P2PIMSvc - keyword: 0x80000000000000: win:EventlogClassic: Classic {29D13147-1C2E-48EC-9994-E29DFE496EB3} Manifest Microsoft-Windows-RasServer - keyword: 0x80000000000000: win:EventlogClassic: Classic {2A274310-42D5-4019-B816-E4B8C7ABE95C} Manifest Microsoft-Windows-ReadyBoostDriver - channel: 0x10: Microsoft-Windows-ReadyBoostDriver/Analytic 0x11: Microsoft-Windows-ReadyBoostDriver/Operational: Microsoft-Windows-ReadyBoostDriver/Operational - keyword: 0x10: StoreOps 0x20: ReadyBoot 0x40: StoreDiag 0x80: StoreContentsRundown 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-ReadyBoostDriver/Analytic 0x4000000000000000: Microsoft-Windows-ReadyBoostDriver/Operational: Microsoft-Windows-ReadyBoostDriver/Operational - level: 0x4: win:Informational: Information {2A45D52E-BBF3-4843-8E18-B356ED5F6A65} Manifest Microsoft-Windows-IPMIProvider - channel: 0x10: HardwareEvents - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: HardwareEvents {2A49DE31-8A5B-4D3A-A904-7FC7409AE90D} Manifest Microsoft-Windows-MFH264Enc - channel: 0x10: WINDOWS_MFH264Enc_CHANNEL - keyword: 0x8000000000000000: WINDOWS_MFH264Enc_CHANNEL - level: 0x4: win:Informational: Information {2A576B87-09A7-520E-C21A-4942F0271D67} Manifest Microsoft-Antimalware-Scan-Interface - channel: 0x10: AMSI/Operational - keyword: 0x1: Event1 0x8000000000000000: AMSI/Operational - level: 0x4: win:Informational: Information {2AABD03B-F48B-419A-B4CE-7A14403F4A46} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal - channel: 0x10: Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {2C3E6D9F-8298-450F-8E5D-49B724F1216F} Manifest Microsoft-Windows-TabletPC-Platform-Input-Ninput - level: 0x4: win:Informational: Information {2CD58181-0BB6-463E-828A-056FF837F966} Manifest Microsoft-Windows-Security-EnterpriseData-FileRevocationManager - channel: 0x10: Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational 0x4000000000000000: Application: Application - level: 0x4: win:Informational: Information {2D318B91-E6E7-4C46-BD04-BFE6DB412CF9} Manifest Microsoft-Windows-TZUtil - channel: 0x10: Microsoft-Windows-TZUtil/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-TZUtil/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {2D4C0C5E-6704-493A-A44B-F5ADD4FC9283} Manifest Microsoft-Windows-OOBE-FirstLogonAnim - channel: 0x10: Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic - keyword: 0x1: FirstLogonAnim 0x8000000000000000: Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic - level: 0x4: win:Informational: Information {2D4EBCA6-EA64-453F-A292-AE2EA0EE513B} Manifest Microsoft-Windows-Direct3DShaderCache - channel: 0x10: Microsoft-Windows-Direct3DShaderCache/Default - keyword: 0x1: Objects 0x2: APIs 0x4: Events 0x8: Profiling 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-Direct3DShaderCache/Default - level: 0x0: win:LogAlways: Log Always 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {2D7904D8-5C90-4209-BA6A-4C08F409934C} Manifest Microsoft-Windows-StartLmhosts - keyword: 0x1: Keyword_StartLmhosts - level: 0x4: win:Informational: Information {2E2BBB16-0C36-4B9B-A567-40924A199FD5} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Api - channel: 0x10: Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic - level: 0x2: win:Error: Error {2E35AAEB-857F-4BEB-A418-2E6C0E54D988} Manifest Microsoft-Windows-DriverFrameworks-UserMode - channel: 0x10: Microsoft-Windows-DriverFrameworks-UserMode/Operational: Operational 0x11: Microsoft-Windows-Kernel-Power/Diagnostic 0x8: System: System - keyword: 0x1: umdf:PowerTransition 0x8000000000000000: Microsoft-Windows-DriverFrameworks-UserMode/Operational: Operational 0x4000000000000000: Microsoft-Windows-Kernel-Power/Diagnostic 0x2000000000000000: System: System - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {2E6CB42E-161D-413B-A6C1-84CA4C1E5890} Manifest Microsoft-Windows-WindowsToGo-StartupOptions - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {2ED299D2-2F6B-411D-8D15-F4CC6FDE0C70} Manifest Microsoft-Windows-AllJoyn - channel: 0x10: Microsoft-Windows-AllJoyn/Operational: Operational 0x11: Microsoft-Windows-AllJoyn/Debug: Debug - keyword: 0x1: AJKeyword: AJ 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-AllJoyn/Operational: Operational 0x4000000000000000: Microsoft-Windows-AllJoyn/Debug: Debug - level: 0x2: win:Error: Error 0x5: win:Verbose: Verbose {2ED6006E-4729-4609-B423-3EE7BCD678EF} Manifest Microsoft-Windows-NDIS-PacketCapture - channel: 0x10: Microsoft-Windows-NDIS-PacketCapture/Diagnostic - keyword: 0x1: Ethernet802.3 0x200: WirelessWAN 0x8000: Tunnel 0x10000: Native802.11 0x1000000: VMSwitch 0x2000000: PacketTruncated 0x40000000: PacketStart 0x80000000: PacketEnd 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NDIS-PacketCapture/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {2F07E2EE-15DB-40F1-90EF-9D7BA282188A} Manifest Microsoft-Windows-TCPIP - channel: 0x10: Microsoft-Windows-TCPIP/Diagnostic 0x11: Microsoft-Windows-TCPIP/Operational: Operational - keyword: 0x1: ut:TcpipEndpoint 0x2: ut:TcpipListener 0x4: ut:TcpipTcb 0x8: ut:TcpipBind 0x10: ut:TcpipInterface 0x20: ut:TcpipRoute 0x40: ut:TcpipCtcp 0x80: ut:TcpipDiagnosis 0x100: ut:Transfer 0x200: ut:ProcessIdHint 0x400: ut:Endpoint 0x800: ut:Rss 0x1000: ut:TcpipNdkpi 0x2000: ut:TcpipCsDiag 0x4000: ut:Teredo 0x8000: ut:AleRemoteEndpoint 0x10000: ut:AleMemory 0x20000: ut:AlePartition 0x40000: ut:Ledbat 0x80000: ut:Nrt 0x100000: ut:NsiNotification 0x200000: ut:TcpipRouter 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:Summary 0x8000000000000000: Microsoft-Windows-TCPIP/Diagnostic 0x4000000000000000: Microsoft-Windows-TCPIP/Operational: Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: TcpSummary 0x11: TcpIpPerPacket {2F94E1CC-A8C5-4FE7-A1C3-53D7BDA8E73E} Manifest Microsoft-WindowsPhone-ConfigManager2 - channel: 0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Trace: Trace 0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {2F959466-24D4-4972-8729-0D5E3539EBC3} Manifest Microsoft-Windows-Dism-Cli - channel: 0x10: Microsoft-Windows-Dism-Cli/Analytic - keyword: 0x1: DismCliEvent 0x8000000000000000: Microsoft-Windows-Dism-Cli/Analytic - level: 0x4: win:Informational: Information {2FD7A9A5-B1A1-4FC7-B95C-C32FED818F30} Manifest Microsoft-Windows-TabletPC-Platform-Manipulations - level: 0x4: win:Informational: Information {2FF3E6B7-CB90-4700-9621-443F389734ED} Manifest Microsoft-Windows-Kernel-WDI - channel: 0x10: Microsoft-Windows-Kernel-WDI/Analytic: Microsoft-Windows-Kernel-WDI/Analytic 0x11: Microsoft-Windows-Kernel-WDI/Debug: Microsoft-Windows-Kernel-WDI/Debug 0x12: Microsoft-Windows-Kernel-WDI/Operational: Microsoft-Windows-Kernel-WDI/Operational - keyword: 0x100000000: context: Verbose context events 0x200000000: diag: Scenario trigger events 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-Kernel-WDI/Analytic: Microsoft-Windows-Kernel-WDI/Analytic 0x4000000000000000: Microsoft-Windows-Kernel-WDI/Debug: Microsoft-Windows-Kernel-WDI/Debug 0x2000000000000000: Microsoft-Windows-Kernel-WDI/Operational: Microsoft-Windows-Kernel-WDI/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {30336ED4-E327-447C-9DE0-51B652C86108} Manifest Microsoft-Windows-Shell-Core - channel: 0x10: Microsoft-Windows-Shell-Core/Diagnostic 0x11: Microsoft-Windows-Shell-Core/ActionCenter 0x12: Microsoft-Windows-Shell-Core/Operational 0x13: Microsoft-Windows-Shell-Core/AppDefaults 0x14: Microsoft-Windows-Shell-Core/LogonTasksChannel - keyword: 0x10000: Shell 0x20000: Properties 0x40000: FileClassStoreAndIconCache 0x80000: Controls 0x100000: APICalls 0x200000: InternetExplorer 0x400000: ShutdownUX 0x800000: CopyEngine 0x1000000: Tasks 0x2000000: WDI 0x4000000: StartupPerf 0x8000000: StructuredQuery 0x10000000: Grep 0x20000000: ItemCollection 0x40000000: SearchPerf 0x80000000: ActiveSetup 0x100000000: ExplorerPerf 0x200000000: LogonPerformance 0x400000000: ElizaPrototype: Eliza Prototype 0x800000000: CloudExperienceHost 0x1000000000: Restore 0x2000000000: OOBEHealth 0x200000000000: ms:Telemetry 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-Shell-Core/Diagnostic 0x4000000000000000: Microsoft-Windows-Shell-Core/ActionCenter 0x2000000000000000: Microsoft-Windows-Shell-Core/Operational 0x1000000000000000: Microsoft-Windows-Shell-Core/AppDefaults 0x800000000000000: Microsoft-Windows-Shell-Core/LogonTasksChannel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {305FC87B-002A-5E26-D297-60223012CA9C} Manifest Microsoft-Windows-User-Diagnostic - level: 0x3: win:Warning: Warning {306C4E0B-E148-543D-315B-C618EB93157C} Manifest Microsoft-Windows-Power-Meter-Polling - channel: 0x10: Microsoft-Windows-Power-Meter-Polling/Diagnostic 0x8: System: System - keyword: 0x1: Default 0x2: OneSecond 0x4: FiveSecond 0x8: ThirtySecond 0x10: FiveMinute 0x20: ThirtyMinute 0x8000000000000000: Microsoft-Windows-Power-Meter-Polling/Diagnostic 0x4000000000000000: System: System - level: 0x4: win:Informational: Information {30E1D284-5D88-459C-83FD-6345B39B19EC} Manifest Microsoft-Windows-USB-USBXHCI - channel: 0x8: System: System 0x10: Microsoft-Windows-USB-USBXHCI-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI driver are sent. 0x11: Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI trustlet are sent from VTL1. - keyword: 0x1: Default 0x2: USBError 0x4: IRP 0x8: Power 0x10: PnP 0x20: Performance 0x40: HeadersBusTrace 0x80: PartialDataBusTrace 0x100: FullDataBusTrace 0x200: StateMachine 0x400: Enumeration 0x800: VerifyDriver 0x1000: HWVerifyHost 0x2000: HWVerifyHub 0x4000: HWVerifyDevice 0x8000: Rundown 0x10000: Device 0x20000: Hub 0x40000: Compat 0x80000: ControllerCommand 0x400000000000: ms:Measures 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-USB-USBXHCI-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI driver are sent. 0x2000000000000000: Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI trustlet are sent from VTL1. - level: 0x2: win:Error: Error 0x4: win:Informational: Information {313B0545-BF9C-492E-9173-8DE4863B8573} Manifest Microsoft-Windows-WMVENCOD - channel: 0x10: WINDOWS_VC1ENC_CHANNEL - keyword: 0x8000000000000000: WINDOWS_VC1ENC_CHANNEL - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {314B2B0D-81EE-4474-B6E0-C2AAEC0DDBDE} Manifest Microsoft-Windows-VWiFi - channel: 0x10: Microsoft-Windows-VWiFi/Diagnostic: Microsoft-Windows-VWiFi/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-VWiFi/Diagnostic: Microsoft-Windows-VWiFi/Diagnostic - level: 0x4: win:Informational: Information {314DE49F-CE63-4779-BA2B-D616F6963A88} Manifest Microsoft-Windows-NCSI - channel: 0x10: Microsoft-Windows-NCSI/Analytic: Microsoft-Windows-NCSI/Analytic 0x11: Microsoft-Windows-NCSI/Operational: Microsoft-Windows-NCSI/Operational - keyword: 0x1: NlaDiagnostics 0x20: LwtDiagnostic 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NCSI/Analytic: Microsoft-Windows-NCSI/Analytic 0x4000000000000000: Microsoft-Windows-NCSI/Operational: Microsoft-Windows-NCSI/Operational - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {31569DCF-9C6F-4B8E-843A-B7C1CC7FFCBA} Manifest Microsoft-Windows-WPD-API - channel: 0x10: Microsoft-Windows-WPD-API/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-API/Analytic: Analytic - level: 0x4: win:Informational: Information {315A8872-923E-4EA2-9889-33CD4754BF64} Manifest Microsoft-Windows-Immersive-Shell - channel: 0x10: Microsoft-Windows-TWinUI/Diagnostic 0x11: Microsoft-Windows-TWinUI/Operational 0x9: Application: Application - keyword: 0x2: PLMComponent: Process Lifetime Manager 0x4: NotificationE2E: Notifications end-to-end 0x8: wpndebug_TileParsingErrors: Developer Debug: Debugging Tile or Badge XML Parsing Errors 0x10: wpndebug_LocalImageErrors: Developer Debug: Debugging Tile or Toast Local Image Rendering Errors 0x20: wpndebug_ToastParsingErrors: Developer Debug: Debugging Toast XML Parsing Errors 0x40: LwNetDiag 0x80: LockScreenCallBroker 0x100: PLMComponentCostly 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-TWinUI/Diagnostic 0x4000000000000000: Microsoft-Windows-TWinUI/Operational 0x2000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {319122A9-1485-4E48-AF35-7DB2D93B8AD2} Manifest Microsoft-Windows-User-ControlPanel - channel: 0x10: Microsoft-Windows-User Control Panel/Diagnostic 0x11: Microsoft-Windows-User Control Panel Performance/Diagnostic 0x12: Microsoft-Windows-User Control Panel Usage/Diagnostic 0x13: Microsoft-Windows-User Control Panel/Operational: Microsoft-Windows-User Control Panel/Operational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-User Control Panel/Diagnostic 0x4000000000000000: Microsoft-Windows-User Control Panel Performance/Diagnostic 0x2000000000000000: Microsoft-Windows-User Control Panel Usage/Diagnostic 0x1000000000000000: Microsoft-Windows-User Control Panel/Operational: Microsoft-Windows-User Control Panel/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {31BCAC7F-4AB8-47A1-B73A-A161EE68D585} Manifest Microsoft-Windows-IME-JPAPI - channel: 0x10: Microsoft-Windows-IME-JPAPI/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-JPAPI/Analytic - level: 0x4: win:Informational: Information {31F60101-3703-48EA-8143-451F8DE779D2} Manifest Microsoft-Windows-DesktopWindowManager-Diag - channel: 0x10: Microsoft-Windows-DesktopWindowManager-Diag/Diagnostic - keyword: 0x2000000: DesktopWindowManager-WDI 0x8000000000000000: Microsoft-Windows-DesktopWindowManager-Diag/Diagnostic - level: 0x4: win:Informational: Information {32254F6C-AA33-46F0-A5E3-1CBCC74BF683} Manifest Microsoft-Windows-SMBWitnessClient - channel: 0x10: Microsoft-Windows-SMBWitnessClient/Admin 0x11: Microsoft-Windows-SMBWitnessClient/Informational - keyword: 0x8000000000000000: Microsoft-Windows-SMBWitnessClient/Admin 0x4000000000000000: Microsoft-Windows-SMBWitnessClient/Informational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {3239EB6F-C7FC-4953-AA15-646829A4CA4C} Manifest Microsoft-Windows-DisplayColorCalibration - channel: 0x10: Microsoft-Windows-DisplayColorCalibration/Operational 0x11: Microsoft-Windows-DisplayColorCalibration/Debug - keyword: 0x8000000000000000: Microsoft-Windows-DisplayColorCalibration/Operational 0x4000000000000000: Microsoft-Windows-DisplayColorCalibration/Debug - level: 0x4: win:Informational: Information {323DAD74-D3EC-44A8-8B9D-CAFEB4999274} Manifest Microsoft-Windows-WLAN-MediaManager - channel: 0x10: Microsoft-Windows-WLAN-MediaManager/Diagnostic: Microsoft-Windows-WLAN-MediaManager/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WLAN-MediaManager/Diagnostic: Microsoft-Windows-WLAN-MediaManager/Diagnostic - level: 0x4: win:Informational: Information {32DD13DF-9C0B-4C3B-B854-EE76C050F5F4} Manifest Microsoft-Windows-DesktopActivityModerator - channel: 0x10: Microsoft-Windows-DesktopActivityModerator/Diagnostic - keyword: 0x1: StartStopDriver 0x2: Control 0x4: ProcessActivity 0x8: Policy 0x10: Pdc 0x20: IoTracking 0x40: PerfTrackContext 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DesktopActivityModerator/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {331C3B3A-2005-44C2-AC5E-77220C37D6B4} Manifest Microsoft-Windows-Kernel-Power - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-Power/Diagnostic 0x11: Microsoft-Windows-Kernel-Power/Thermal-Diagnostic 0x12: Microsoft-Windows-Kernel-Power/Thermal-Operational: Thermal-Operational - keyword: 0x1: po:Scenario 0x2: po:Simple 0x4: po:Diagnostic 0x8: po:Performance 0x10: po:Idle 0x20: po:Thermal 0x40: po:PerfTrackContext 0x80: po:PowerSetting 0x100: po:RuntimeFx 0x200: po:SleepStudy 0x400: po:DiagnosticLight 0x800: po:PerformanceLight 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-Power/Diagnostic 0x2000000000000000: Microsoft-Windows-Kernel-Power/Thermal-Diagnostic 0x1000000000000000: Microsoft-Windows-Kernel-Power/Thermal-Operational: Thermal-Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {33693E1D-246A-471B-83BE-3E75F47A832D} Manifest Microsoft-Windows-BTH-BTHUSB - channel: 0x10: Microsoft-Windows-BTH-BTHUSB/Diagnostic: Microsoft-Windows-BTH-BTHUSB/Operational 0x11: Microsoft-Windows-BTH-BTHUSB/Performance: Microsoft-Windows-BTH-BTHUSB/Operational - keyword: 0x1: Diagnostic 0x8000000000000000: Microsoft-Windows-BTH-BTHUSB/Diagnostic: Microsoft-Windows-BTH-BTHUSB/Operational 0x4000000000000000: Microsoft-Windows-BTH-BTHUSB/Performance: Microsoft-Windows-BTH-BTHUSB/Operational - level: 0x4: win:Informational: Information {3419DE6D-5D7F-4668-ACC8-F80566814D96} Manifest Microsoft-Windows-System-Profile-HardwareId - channel: 0x10: Microsoft-Windows-System-Profile-HardwareId/Diagnostic - keyword: 0x1: SYSTEMPROFILE_KEYWORD: Windows.System.Profile.HardwareId 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-System-Profile-HardwareId/Diagnostic - level: 0x4: win:Informational: Information {34A3697E-0F10-4E48-AF3C-F869B5BABEBB} Manifest Microsoft-Windows-WorkFolders - channel: 0x10: Microsoft-Windows-WorkFolders/Operational: Operational 0x11: Microsoft-Windows-WorkFolders/Debug: Debug 0x12: Microsoft-Windows-WorkFolders/Analytic: Analytic 0x13: Microsoft-Windows-WorkFolders/WHC: ManagementAgent - keyword: 0x1: SyncPartnership 0x8000000000000000: Microsoft-Windows-WorkFolders/Operational: Operational 0x4000000000000000: Microsoft-Windows-WorkFolders/Debug: Debug 0x2000000000000000: Microsoft-Windows-WorkFolders/Analytic: Analytic 0x1000000000000000: Microsoft-Windows-WorkFolders/WHC: ManagementAgent - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {3527CB55-1298-49D4-AB94-1243DB0FCAFF} Manifest Microsoft-Windows-TZSync - channel: 0x10: Microsoft-Windows-TZSync/Analytic: Analytic 0x11: Microsoft-Windows-TZSync/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-TZSync/Analytic: Analytic 0x4000000000000000: Microsoft-Windows-TZSync/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {355C44FE-0C8E-4BF8-BE28-8BC7B5A42720} Manifest Microsoft-Windows-WPD-CompositeClassDriver - channel: 0x10: Microsoft-Windows-WPD-CompositeClassDriver/Operational: Operational 0x11: Microsoft-Windows-WPD-CompositeClassDriver/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-CompositeClassDriver/Operational: Operational 0x4000000000000000: Microsoft-Windows-WPD-CompositeClassDriver/Analytic: Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x4: win:Informational: Information {35642CF5-DA5E-410B-9D9C-A45F3638042B} Manifest Microsoft-Windows-SendTo - channel: 0x10: Microsoft-Windows-SendTo/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-SendTo/Diagnostic - level: 0x4: win:Informational: Information {35AC6CE8-6104-411D-976C-877F183D2D32} Manifest Microsoft-Windows-EventLog-WMIProvider - channel: 0x10: Microsoft-Windows-EventLog-WMIProvider/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-EventLog-WMIProvider/Debug: Debug {36008301-E154-466C-ACEC-5F4CBD6B4694} Manifest Microsoft-Windows-MMCSS - level: 0x4: win:Informational: Information {3629DD4D-D6F1-4302-A623-0768B51501C7} Manifest Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {3635D4B6-77E3-4375-8124-D545B7149337} Manifest Microsoft-Windows-Kernel-WSService-StartServiceTrigger - level: 0x4: win:Informational: Information {3663A992-84BE-40EA-BBA9-90C7ED544222} Manifest Microsoft-Windows-EFS - channel: 0x10: Microsoft-Windows-EFS/Debug 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-EFS/Debug 0x4000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {36B6F488-AAD7-48C2-AFE3-D4EC2C8B46FA} Manifest Microsoft-Windows-Performance-Recorder-Control - channel: 0x10: Microsoft-Windows-Performance-Recorder-Control/Operational: Operational 0x11: Microsoft-Windows-Performance-Recorder-Control/Diagnostic - keyword: 0x1000: PerfStatusVerbose: Perf Status Verbose 0x10000: PerfStatus: Perf Status 0x20000: DebugStatus: Debug Status 0x40000: Informational: Informational 0x8000000000000000: Microsoft-Windows-Performance-Recorder-Control/Operational: Operational 0x4000000000000000: Microsoft-Windows-Performance-Recorder-Control/Diagnostic - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {36C23E18-0E66-11D9-BBEB-505054503030} Manifest Microsoft-Windows-Diagnostics-Networking - channel: 0x10: Microsoft-Windows-Diagnostics-Networking/Operational: Microsoft-Windows-Diagnostics-Networking/Operational 0x8: System: System 0x11: Microsoft-Windows-Diagnostics-Networking/Debug: Microsoft-Windows-Diagnostics-Networking/Debug - keyword: 0x1: ndf:NDFCoreEvents: Core Events 0x2: ndf:NDFHelperClassEvents: Helper Class Events 0x4: ndf:Performance: Performance Events 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x400000000000: ut:Diagnostic 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Diagnostics-Networking/Operational: Microsoft-Windows-Diagnostics-Networking/Operational 0x4000000000000000: System: System 0x2000000000000000: Microsoft-Windows-Diagnostics-Networking/Debug: Microsoft-Windows-Diagnostics-Networking/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {36DA592D-E43A-4E28-AF6F-4BC57C5A11E8} Manifest Microsoft-Windows-USB-UCX - channel: 0x10: Microsoft-Windows-USB-UCX-Analytic: This is the Analytic channel to which internal Analytic events from the UCX driver are sent. - keyword: 0x1: Default 0x2: USBError 0x4: IRP 0x8: Power 0x10: PnP 0x20: Performance 0x40: HeadersBusTrace 0x80: PartialDataBusTrace 0x100: FullDataBusTrace 0x200: StateMachine 0x400: Enumeration 0x800: VerifyDriver 0x1000: HWVerifyHost 0x2000: HWVerifyHub 0x4000: HWVerifyDevice 0x8000: Rundown 0x10000: Device 0x20000: Hub 0x40000: Compat 0x80000: ControllerCommand 0x8000000000000000: Microsoft-Windows-USB-UCX-Analytic: This is the Analytic channel to which internal Analytic events from the UCX driver are sent. - level: 0x4: win:Informational: Information {37945DC2-899B-44D1-B79C-DD4A9E57FF98} Manifest Microsoft-Windows-MPS-CLNT - channel: 0x10: Microsoft-Windows-MPS-CLNT/Diagnostic - keyword: 0x10000: Client 0x8000000000000000: Microsoft-Windows-MPS-CLNT/Diagnostic - level: 0x4: win:Informational: Information {3903D5B9-988D-4C31-9CCD-4022F96703F0} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc - channel: 0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin: Admin - keyword: 0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin: Admin - level: 0x4: win:Informational: Information {39A63500-7D76-49CD-994F-FFD796EF5A53} Manifest Microsoft-Windows-TextPredictionEngine - level: 0x4: win:Informational: Information {3A5BEF13-D0F7-4E7F-9EC8-5E707DF711D0} Manifest Microsoft-Windows-Mprddm - channel: 0x10: Microsoft-Windows-Mprddm/Operational: Notification Channel - keyword: 0x8000000000000000: Microsoft-Windows-Mprddm/Operational: Notification Channel - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information {3A718A68-6974-4075-ABD3-E8243CAEF398} Manifest Microsoft-Windows-Push-To-Install-Service - channel: 0x10: Microsoft-Windows-Store/Operational - keyword: 0x1: PushToInstallService 0x2: Messages 0x8000000000000000: Microsoft-Windows-Store/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3AA52B8B-6357-4C18-A92E-B53FB177853B} Manifest Microsoft-Windows-International - channel: 0x10: Microsoft-Windows-International/Operational: Microsoft-Windows-International/Operational - keyword: 0x8000000000000000: Microsoft-Windows-International/Operational: Microsoft-Windows-International/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3AD571F3-BDAE-4942-8733-4D1B85870A1E} Manifest Microsoft-Windows-IME-JPPRED - channel: 0x10: Microsoft-Windows-IME-JPPRED/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-JPPRED/Analytic - level: 0x4: win:Informational: Information {3AE1EA61-C002-47FB-B06C-4022A8C98929} Manifest Microsoft-Windows-WebAuthN - channel: 0x10: Microsoft-Windows-WebAuthN/Operational - keyword: 0x1: WebAuthN: WebAuthN 0x2: Ctap: Ctap 0x4: Cbor: Cbor 0x8: Usb: Usb 0x10: Nfc: Nfc 0x20: Test: Test 0x40: Ngc: Ngc 0x8000000000000000: Microsoft-Windows-WebAuthN/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: Success: Success {3C088E51-65BE-40D1-9B90-62BFEC076737} Manifest Microsoft-Windows-VPN-Client - channel: 0x10: Microsoft-Windows-VPN-Client/Operational: Microsoft-Windows-VPN-Client/Operational - keyword: 0x8000000000000000: Microsoft-Windows-VPN-Client/Operational: Microsoft-Windows-VPN-Client/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {3C6C422B-019B-4F48-B67B-F79A3FA8B4ED} Manifest Microsoft-Windows-Security-IdentityListener - channel: 0x10: Microsoft-Windows-Security-IdentityListener/Operational: Operation log - keyword: 0x8000000000000000: Microsoft-Windows-Security-IdentityListener/Operational: Operation log - level: 0x2: win:Error: Error 0x4: win:Informational: Information {3CB2A168-FE19-4A4E-BDAD-DCF422F13473} Manifest Microsoft-Windows-AppID - channel: 0x10: Microsoft-Windows-AppID/Operational: Microsoft-Windows-AppID/Operational - keyword: 0x8000000000000000: Microsoft-Windows-AppID/Operational: Microsoft-Windows-AppID/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {3CB2A168-FE34-4A4E-BDAD-DCF422F34473} Manifest Microsoft-Windows-SmartScreen - channel: 0x10: Microsoft-Windows-SmartScreen/Debug - keyword: 0x8000000000000000: Microsoft-Windows-SmartScreen/Debug - level: 0x4: win:Informational: Information {3CB40AAA-1145-4FB8-B27B-7E30F0454316} Manifest Microsoft-Windows-WWAN-SVC-EVENTS - channel: 0x10: Microsoft-Windows-WWAN-SVC-Events/Diagnostic: WWAN Diagnostic Channel 0x11: Microsoft-Windows-WWAN-SVC-Events/Operational: WWAN Operational Channel - keyword: 0x20: LwtDiagnostic 0x40: MbaeUpdater 0x100: WwanOid 0x1000: InterfaceEnum 0x2000: WwanUICC 0x4000: ContextLifeCycle 0x8000: ProfileManagement 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x4000000000: ut:Configuration 0x200000000000: ut:StateTransition 0x400000000000: HighLevelTriage 0x800000000000: WilFallbackError 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WWAN-SVC-Events/Diagnostic: WWAN Diagnostic Channel 0x4000000000000000: Microsoft-Windows-WWAN-SVC-Events/Operational: WWAN Operational Channel - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3CC2D4AF-DA5E-4ED4-BCBE-3CF995940483} Manifest Microsoft-Windows-DirectShow-KernelSupport - channel: 0x9: Application: Application 0x10: Microsoft-Windows-DirectShow-KernelSupport/Performance - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-DirectShow-KernelSupport/Performance - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3D42A67D-9CE8-4284-B755-2550672B0CE0} Manifest Microsoft-Windows-EapMethods-Sim - channel: 0x10: Microsoft-Windows-EapMethods-Sim/Operational: Operational Channel - keyword: 0x8000000000000000: Microsoft-Windows-EapMethods-Sim/Operational: Operational Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {3DA494E4-0FE2-415C-B895-FB5265C5C83B} Manifest Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider - channel: 0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin: Admin 0x11: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational: Operational 0x12: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug: Debug - keyword: 0x1: Error 0x2: Debug 0x4: Trace 0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin: Admin 0x4000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational: Operational 0x2000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3E59A529-B0B3-4A11-8129-9FFE6BB46EB9} Manifest Microsoft-Windows-Fat-SQM - channel: 0x8: System: System - keyword: 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {3EB875EB-8F4A-4800-A00B-E484C97D7551} Manifest Microsoft-Windows-Network-Connection-Broker - channel: 0x10: Microsoft-Windows-Network-Connection-Broker - keyword: 0x1: Aoac: Aoac 0x8000000000000000: Microsoft-Windows-Network-Connection-Broker - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43} Manifest Microsoft-Windows-AppXDeployment-Server - channel: 0x10: Microsoft-Windows-AppXDeploymentServer/Diagnostic: Microsoft-Windows-AppXDeploymentServer/Diagnostic 0x11: Microsoft-Windows-AppXDeploymentServer/Operational: Microsoft-Windows-AppXDeploymentServer/Operational 0x12: Microsoft-Windows-AppXDeploymentServer/Debug: Microsoft-Windows-AppXDeploymentServer/Debug 0x13: Microsoft-Windows-AppXDeploymentServer/Restricted: Microsoft-Windows-AppXDeploymentServer/Restricted - keyword: 0x1: APPXDEPLOYMENTSERVER_KEYWORD: AppXDeploymentServer Keyword 0x2: VISUALELEMENTS_EXTENSION_KEYWORD: VisualElements Extension Handler Keyword 0x4: OSIM_KEYWORD: OSIM Keyword 0x8: STATE_DEH_KEYWORD: State Extension Handler Keyword 0x10: AUTOPLAY_DEH_KEYWORD: AutoPlay Extension Handler Keyword 0x20: COLLECTOREXTENSION_DEH_KEYWORD: CollectorExtension Extension Handler Keyword 0x40: PACKAGED_COM_DEH_KEYWORD: PackagedCom Extension Handler Keyword 0x100: FILETYPE_DEH_KEYWORD: FileType Extension Handler Keyword 0x200: TRUST_DEH_KEYWORD: Trust Extension Handler Keyword 0x400: LICENSING_DEH_KEYWORD: Licensing Extension Handler Keyword 0x800: DATAPACKAGEHOST_DEH_KEYWORD: Data Package Host Extension Handler Keyword 0x1000: CERTIFICATES_DEH_KEYWORD: Certificates Extension Handler Keyword 0x2000: APPX_BASE_DEH_KEYWORD: AppX Base Extension Handler Keyword 0x4000: PROTOCOL_DEH_KEYWORD: Protocol Extension Handler Keyword 0x8000: MOCOM_HELPER_KEYWORD: MoCOM Extension Handler Keyword 0x10000: RUNTIME_DEH_KEYWORD: Runtime Extension Handler Keyword 0x20000: BACKGROUND_TASKS_DEH_KEYWORD: BackgroundTasks Extension Handler Keyword 0x40000: DOWNLOAD_DEH_KEYWORD: Download Extension Handler Keyword 0x80000: APPXDEPLOYMENTSERVER_PERF_KEYWORD: AppXDeploymentServerPerf Keyword 0x100000: MRT_DEH_KEYWORD: Mrt Extension Handler Keyword 0x200000: DSM_DEH_KEYWORD: DSM Extension Handler Keyword 0x400000: APPMODEL_RUNTIME_DMR_KEYWORD: Package Runtime Information Keyword 0x800000: RESTRICTED_LAUNCH_DEH_KEYWORD: RestrictedLaunch Extension Handler Keyword 0x1000000: DEVICEACCESS_DEH_KEYWORD: DeviceAccess Extension Handler Keyword 0x2000000: INDEXEDDB_DEH_KEYWORD: IndexedDB Extension Handler Keyword 0x4000000: MSAC_SIGNOUT_DEH_KEYWORD: MSAC SignOut Extension Handler Keyword 0x8000000: SEARCHINDEXER_EXTENSION_KEYWORD: SearchIndexer Extension Handler Keyword 0x10000000: APPSYNC_DEH_KEYWORD: AppSync Extension Handler Keyword 0x20000000: APPLYDATA_DEH_KEYWORD: Apply Data Extension Handler Keyword 0x40000000: ALARM_DEH_KEYWORD: Alarm Extension Handler Keyword 0x80000000: GEOLOCATION_DEH_KEYWORD: Geolocation Extension Handler Keyword 0x100000000: PREINSTALLED_CONFIG_TASK_DEH_KEYWORD: PreInstalledConfigTask Extension Handler Keyword 0x200000000: UPDATE_MIGRATION_TASK_DEH_KEYWORD: UpdateMigrationTask Extension Handler Keyword 0x400000000: WEB_ACCOUNT_PROVIDER_DEH_KEYWORD: WebAccountProvider Extension Handler Keyword 0x800000000: APPSERVICE_DEH_KEYWORD: AppService Extension Handler Keyword 0x1000000000: USERDATAACCESS_EXTENSION_KEYWORD: UserDataAccess Extension Handler Keyword 0x2000000000: DIALPROTOCOL_DEH_KEYWORD: DialProtocol Extension Handler Keyword 0x4000000000: AOWAPP_DEH_KEYWORD: AoW App Extension Handler Keyword 0x8000000000: COMMUNICATION_BLOCKING_APP_DEH_KEYWORD: CommunicationBlockingAppProvider Extension Handler Keyword 0x10000000000: PHONECALLORIGIN_DEH_KEYWORD: PhoneCallOriginProvider Extension Handler Keyword 0x20000000000: WMIPROVIDER_EXTENSION_KEYWORD: WmiProvider Extension Handler Keyword 0x40000000000: LXP_DEH_KEYWORD: Local Experience Pack Extension Handler Keyword 0x80000000000: SERVER_EXTENSION_KEYWORD: Server Common Extension Handler Keyword 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-AppXDeploymentServer/Diagnostic: Microsoft-Windows-AppXDeploymentServer/Diagnostic 0x4000000000000000: Microsoft-Windows-AppXDeploymentServer/Operational: Microsoft-Windows-AppXDeploymentServer/Operational 0x2000000000000000: Microsoft-Windows-AppXDeploymentServer/Debug: Microsoft-Windows-AppXDeploymentServer/Debug 0x1000000000000000: Microsoft-Windows-AppXDeploymentServer/Restricted: Microsoft-Windows-AppXDeploymentServer/Restricted - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {3F51786B-B787-4B2F-84FC-272B76348F6D} Manifest EsifUmdf2EtwProvider - keyword: 0x1: Default 0x2: DPTF 0x4: Shell 0x8: UF 0x10: Action 0x20: App 0x40: Conjure 0x80: Domain 0x100: DSP 0x200: Event 0x400: IPC 0x800: Participant 0x1000: Primitive 0x2000: Service 0x4000: Datavault 0x8000: Webserver 0x10000: Windows 0x20000: ACT 0x40000: UMDF 0x80000: ThermalAPI 0x100000: Linux 0x200000: Logging 0x400000: ApiTrace 0x800000: Power 0x1000000: Pnp 0x2000000: TableObject - level: 0x0: win:LogAlways: Log Always {3F7B2F99-B863-4045-AD05-F6AFB62E7AF1} Manifest Microsoft-Windows-TerminalServices-MediaRedirection - channel: 0x10: Microsoft-Windows-TerminalServices-MediaRedirection/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-MediaRedirection/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {3F9E07BD-0E26-4241-A5A5-28CAFA150A75} Manifest Microsoft-Windows-WMPDMCUI - channel: 0x10: Microsoft-Windows-WMPDMCUI/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-WMPDMCUI/Diagnostic - level: 0x4: win:Informational: Information {3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482} Manifest Microsoft-Windows-Ntfs - channel: 0x8: System: System 0x10: Microsoft-Windows-Ntfs/Operational 0x11: Microsoft-Windows-Ntfs/WHC 0x12: Microsoft-Windows-Ntfs/Performance - keyword: 0x1: GlobalCorruptionActionStateChange 0x2: VolumeCorruptionActionStateChange 0x4: SdsCompaction 0x8: LogFlushFailed 0x10: Rundown 0x20: VolumeMountDismount 0x40: TPMapBitNotSet 0x100: LogFileFull 0x200: Checkpoint 0x400: CleanCheckpoint 0x800: PeriodicCheckpoint 0x1000: MftRecordRead 0x2000: MftRecordWrite 0x10000: WorkItem 0x100000: DirectoryStream 0x200000: Statistics: Statistics 0x400000: FileMetadataOptimization 0x800000: EfsTest 0x1000000: BadClusterHotFix: BadClusterHotFix 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Ntfs/Operational 0x2000000000000000: Microsoft-Windows-Ntfs/WHC 0x1000000000000000: Microsoft-Windows-Ntfs/Performance - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {4025D192-273D-42EC-BDF8-940EC34EEDCA} Manifest Microsoft-Windows-MCCS-AccountAccessor - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition 0x80000000000: SyncSelfHost: SyncSelfHost - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {40783728-8921-45D0-B231-919037B4B4FD} Manifest Microsoft-Windows-Security-UserConsentVerifier - channel: 0x10: Microsoft-Windows-Security-UserConsentVerifier/Audit: Microsoft-Windows-Security-UserConsentVerifier/Audit - keyword: 0x1: UCV: User Consent Verification 0x2: Biometrics: Biometrics 0x4: Fingerprint: Fingerprint 0x10000000000000: win:AuditFailure: Audit Failure 0x20000000000000: win:AuditSuccess: Audit Success 0x8000000000000000: Microsoft-Windows-Security-UserConsentVerifier/Audit: Microsoft-Windows-Security-UserConsentVerifier/Audit - level: 0x2: win:Error: Error 0x4: win:Informational: Information {40AB57C2-1C53-4DF9-9324-FF7CF898A02C} Manifest Microsoft-Windows-Diagnosis-Scheduled - channel: 0x10: Microsoft-Windows-Diagnosis-Scheduled/Operational: Microsoft-Windows-Diagnosis-Scheduled/Operational - keyword: 0x400000000: notification: WHC Notification Keyword 0x800000000: lifecycle: Lifecycle Keyword 0x8000000000000000: Microsoft-Windows-Diagnosis-Scheduled/Operational: Microsoft-Windows-Diagnosis-Scheduled/Operational - level: 0x1: win:Critical: Critical 0x4: win:Informational: Information {40AE003C-6F3D-4590-AE1C-0E8BE526B50F} Manifest Microsoft-Windows-PeerToPeerDrtEventProvider - channel: 0x10: Microsoft-Windows-PeerToPeerDrtEventProvider/Diagnostic: Microsoft-Windows-PeerToPeerDrtEventProvider/DiagnosticChannel - keyword: 0x8000000000000000: Microsoft-Windows-PeerToPeerDrtEventProvider/Diagnostic: Microsoft-Windows-PeerToPeerDrtEventProvider/DiagnosticChannel - level: 0x4: win:Informational: Information {412BDFF2-A8C4-470D-8F33-63FE0D8C20E2} Manifest Microsoft-Windows-Partition - channel: 0x10: Microsoft-Windows-Partition/Diagnostic 0x11: Microsoft-Windows-Partition/Analytic - keyword: 0x1: power 0x8000000000000000: Microsoft-Windows-Partition/Diagnostic 0x4000000000000000: Microsoft-Windows-Partition/Analytic - level: 0x4: win:Informational: Information {4154A29C-40D9-445F-8D65-24DA473E8F65} Manifest Microsoft-Windows-UxInit - channel: 0x10: Microsoft-Windows-UxInit/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-UxInit/Diagnostic - level: 0x4: win:Informational: Information {4180C4F7-E238-5519-338F-EC214F0B49AA} Manifest Microsoft.Windows.ResourceManager {41862974-DA3B-4F0B-97D5-BB29FBB9B71E} Manifest Microsoft-OneCore-OnlineSetup - channel: 0x10: Microsoft-OneCore-Setup/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x2: keyDiagnostic: Diagnostic 0x8000000000000000: Microsoft-OneCore-Setup/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {41877CB4-11FC-4188-B590-712C143C881D} Manifest Microsoft-Windows-Runtime-Web-Http - channel: 0x10: Microsoft-Windows-Runtime-Web-Http/Tracing - keyword: 0x8000000000000000: Microsoft-Windows-Runtime-Web-Http/Tracing - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {4214DCD2-7C33-4F74-9898-719CCCEEC20F} Manifest Microsoft-Windows-TunnelDriver-SQM-Provider - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {422088E6-CD0C-4F99-BD0B-6985FA290BDF} Manifest Microsoft-Windows-UxTheme - channel: 0x10: Microsoft-Windows-UxTheme/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-UxTheme/Diagnostic - level: 0x4: win:Informational: Information {42D5F8CB-0D2B-4522-8059-C35A37C94A77} Manifest Microsoft-Windows-PortableWorkspaces-Creator-Tool - keyword: 0x1000000000000: win:ResponseTime: Response Time {435F8E4B-8CC4-430E-9796-28CAE4976576} Manifest Microsoft-Windows-StorageManagement-WSP-FS - channel: 0x10: Microsoft-Windows-StorageManagement/Debug - keyword: 0x8000000000000000: Microsoft-Windows-StorageManagement/Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {43D1A55C-76D6-4F7E-995C-64C711E5CAFE} Manifest Microsoft-Windows-WinINet - channel: 0x10: Microsoft-Windows-WinINet/Analytic 0x11: Microsoft-Windows-WinINet/UsageLog 0x12: Microsoft-Windows-WinINet/WebSocket - keyword: 0x1: WININET_KEYWORD_HANDLES: Flagged on all WinINet events dealing with creation or destruction of INTERNET handles 0x2: WININET_KEYWORD_HTTP: Flagged on all WinINet events dealing with processing of HTTP requests and responses 0x4: WININET_KEYWORD_CONNECTION: Flagged on all WinINet events dealing with network operations (TCP, DNS) 0x8: WININET_KEYWORD_AUTH: Flagged on all WinINet events dealing with authentication 0x10: WININET_KEYWORD_HTTPS: Flagged on all WinINet events dealing with HTTPS 0x20: WININET_KEYWORD_AUTOPROXY: Flagged on all WinINet events dealing with AUTOPROXY 0x40: WININET_KEYWORD_COOKIES: Flagged on all WinINet events dealing with Cookies 0x80: WININET_KEYWORD_IE: Flagged on all WinINet IE events 0x100: WININET_KEYWORD_AOAC 0x100000000: WININET_KEYWORD_SEND: Flagged on all WinINet events dealing with sending packet capture 0x200000000: WININET_KEYWORD_RECEIVE: Flagged on all WinINet events dealing with receiving packet capture 0x400000000: WININET_KEYWORD_MOBILE: Flagged on all WinINet events relevant only to Mobile SKUs 0x20000000000: WININET_KEYWORD_PII_PRESENT: Flagged on all WinINet events dealing with potential personally identifiable information 0x40000000000: WININET_KEYWORD_PACKET: Flagged on all WinINet events dealing with packet capture 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WinINet/Analytic 0x4000000000000000: Microsoft-Windows-WinINet/UsageLog 0x2000000000000000: Microsoft-Windows-WinINet/WebSocket - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {43DAD447-735F-4829-A6FF-9829A87419FF} Manifest Microsoft-Windows-Crypto-DSSEnh - channel: 0x10: Microsoft-Windows-Crypto-DSSEnh/Analytic: Microsoft-Windows-Crypto-DSSEnh/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Crypto-DSSEnh/Analytic: Microsoft-Windows-Crypto-DSSEnh/Analytic {43E63DA5-41D1-4FBF-ADED-1BBED98FDD1D} Manifest Microsoft-Windows-Subsys-SMSS - channel: 0x10: Microsoft-Windows-Subsys-SMSS/Operational 0x8: System: System - keyword: 0x10000: smss:Diagnostics 0x8000000000000000: Microsoft-Windows-Subsys-SMSS/Operational 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {442C11C5-304B-45A4-AE73-DC2194C4E876} Manifest Microsoft-Windows-Compat-Appraiser {45EEC9E5-4A1B-5446-7AD8-A4AB1313C437} Manifest Microsoft-Windows-Security-LessPrivilegedAppContainer - channel: 0x10: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational - level: 0x2: win:Error: Error {46098845-8A94-442D-9095-366A6BCFEFA9} Manifest Microsoft-Windows-WLGPA - channel: 0x10: Microsoft-Windows-WLAN-AutoConfig/Operational - keyword: 0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational - level: 0x4: win:Informational: Information {4637124C-1D40-4B4D-892F-2AAECF24FF06} Manifest Microsoft-Windows-WinJson - keyword: 0x1: Error 0x2: Debug 0x4: Trace - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {46C78E5C-A213-46A8-8A6B-622F6916201D} Manifest Microsoft-Windows-OverlayFilter - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x4: win:Informational: Information {478EA8A8-00BE-4BA6-8E75-8B9DC7DB9F78} Manifest Microsoft-Windows-ESE - channel: 0x10: Microsoft-Windows-ESE/Operational 0x11: Microsoft-Windows-ESE/IODiagnose - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Trace: Trace 0x8: Transaction: Transaction 0x10: Space: Space 0x20: BF: BF 0x40: IO: IO 0x80: LOG: LOG 0x100: Task: Task 0x200: Test: Test 0x400: BFRESMGR: BFRESMGR 0x800: StationId: StationId 0x1000: JETTraceTag: JETTraceTag 0x2000: StallLatencies: StallLatencies 0x4000: DataWorkingSet: DataWorkbccingSet 0x8000: IOEX: IOEX 0x100000000: CompressExp: CompressExp 0x8000000000000000: Microsoft-Windows-ESE/Operational 0x4000000000000000: Microsoft-Windows-ESE/IODiagnose - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {47BC9477-A8BA-452E-B951-4F2ED3593CF9} Manifest Microsoft-Windows-Serial-ClassExtension - channel: 0x10: Microsoft-Windows-Serial-ClassExtension/Analytic: Analytic 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-Serial-ClassExtension/Analytic: Analytic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {47BFA2B7-BD54-4FAC-B70B-29021084CA8F} Manifest Application Popup - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {486A5C7C-11CC-46C5-9DE7-43DFE0BB57C1} Manifest Microsoft-Windows-DriverFrameworks-KernelMode-Performance {48D445A8-2F64-4D49-B093-A5774D8DC531} Manifest Microsoft-Windows-SrumTelemetry - channel: 0x10: Microsoft-Windows-SrumTelemetry - keyword: 0x1000: E3Rundown1day 0x2000: E3Rundown3day 0x4000: E3Rundown7day 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-SrumTelemetry - level: 0x4: win:Informational: Information {494E7A3D-8DB9-4EC4-B43E-2844AF6E38D6} Manifest Microsoft-Windows-exFAT-SQM - channel: 0x8: System: System - keyword: 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {49C2C27C-FE2D-40BF-8C4E-C3FB518037E7} Manifest Microsoft-Windows-Search-Core - channel: 0x10: Microsoft-Windows-Search-Core/Diagnostic - keyword: 0x1: Performance: Flag for events used for performance measurements 0x2: GroupPolicy: Group Policy events, GP extension 0x4: Indexing: Indexing-related high level events 0x8: IndexingItem: Events reported per each item indexed 0x10: IndexingChunk: Events reported per each chunk 0x20: Querying: Query-related events 0x40: ReservedKeyword1 0x80: ReservedKeyword2 0x100: Common: Events in common functionality, such as data structures 0x200: Service: Search service high-level status change events, startup, shutdown and setup 0x400: Gatherer: Gathering manager, transaction queues, crawler, pusher 0x2000: CPL: Control Panel applet 0x4000: ProtocolHost: Events related to Protocol Host 0x8000: FilterHost: Events related to Filter Host 0x10000: Wordbreakers: Wordbreaker activity 0x20000: CSM: Crawl Scope Manager 0x40000: PropStorePI: Property Store plug-in 0x80000: PTypePI: Perceived Type plug-in 0x100000: IndexPI: Indexing plug-in 0x200000: USN: USN notifications 0x400000: Backoff: Backoff controller 0x800000: ReservedKeyword5 0x1000000: ReservedKeyword6 0x2000000: ReservedKeyword7 0x4000000: ReservedKeyword8 0x8000000: ReservedKeyword9 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Search-Core/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {49D6AD7B-52C4-4F79-A164-4DCD908391E4} Manifest NisDrvWFP Provider {4A104570-EC6D-4560-A40F-858FA955E84F} Manifest Microsoft-Windows-Storage-Tiering - channel: 0x10: Microsoft-Windows-Storage-Tiering/Admin - keyword: 0x8000000000000000: Microsoft-Windows-Storage-Tiering/Admin - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {4A155F10-25AD-47E6-ABA8-2C4F5EEE7846} Manifest Microsoft-Windows-MCCS-ActiveSyncProvider - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x1000000000: CommsService: CommsService 0x2000000000: PeopleSync: PeopleSync 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition 0x80000000000: SyncSelfHost: SyncSelfHost - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {4A933674-FB3D-4E8D-B01D-17EE14E91A3E} Manifest Microsoft-Windows-BranchCacheSMB - channel: 0x10: Microsoft-Windows-BranchCacheSMB/Operational: Microsoft-Windows-BranchCacheSMB/Operational 0x11: Microsoft-Windows-BranchCacheSMB/Analytic: Microsoft-Windows-BranchCacheSMB/Analytic - keyword: 0x800: CscEvtKeywd_SMBBranchCache: SMB BranchCache 0x8000000000000000: Microsoft-Windows-BranchCacheSMB/Operational: Microsoft-Windows-BranchCacheSMB/Operational 0x4000000000000000: Microsoft-Windows-BranchCacheSMB/Analytic: Microsoft-Windows-BranchCacheSMB/Analytic - level: 0x4: win:Informational: Information {4AF188AC-E9C4-4C11-B07B-1FABC07DFEB2} Manifest Microsoft-Windows-Bluetooth-BthLEPrepairing - channel: 0x10: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational 0x4000000000000000: System: System - level: 0x4: win:Informational: Information {4B7EAC67-FC53-448C-A49D-7CC6DB524DA7} Manifest Microsoft-Windows-MediaFoundation-MFReadWrite - channel: 0x10: Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader 0x11: Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter 0x12: Microsoft-Windows-MediaFoundation-MFReadWrite/Transform - keyword: 0x8000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader 0x4000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter 0x2000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/Transform - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {4BD2826E-54A1-4BA9-BF63-92B73EA1AC4A} Manifest Microsoft-Windows-Diagnostics-LoggingChannel - keyword: 0x1: K_LogMsg 0x2: K_LogPair 0x4: K_ActivityLogging - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {4CB314DF-C11F-47D7-9C04-65FB0051561B} Manifest Microsoft-Windows-Program-Compatibility-Assistant - channel: 0x10: Microsoft-Windows-Program-Compatibility-Assistant/Analytic: Analytic 0x11: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant 0x12: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic 0x13: Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade: Analytic - keyword: 0x100: WDI 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-Program-Compatibility-Assistant/Analytic: Analytic 0x4000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant 0x2000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic 0x1000000000000000: Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade: Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {4CEC9C95-A65F-4591-B5C4-30100E51D870} Manifest Microsoft-Windows-Kernel-Tm - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x3: win:Warning: Warning {4D13548F-C7B8-4174-BB7A-D7F64BF22D29} Manifest Microsoft-WindowsPhone-LocationServiceProvider - channel: 0x10: Microsoft-WindowsPhone-LocationServiceProvider/Debug: Debug - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Selfhost: Selfhost 0x8: WiFiTracing: WiFiTracing 0x10: Init: Init 0x20: Position: Position 0x40: FixSession: FixSession 0x80: CompositePe: CompositePe 0x100: Gnss: Gnss 0x200: CellPe: CellPe 0x400: WifiPe: WifiPe 0x800: ClientApi: ClientApi 0x1000: Orion: Orion 0x2000: Supl: Supl 0x4000: Crowdsource: Crowdsource 0x8000: ManagedApi: ManagedApi 0x10000: GeofenceTracking: GeofenceTracing 0x20000: GeofenceStore: GeofenceStore 0x8000000: WebproxyTracing: WebproxyTracing 0x20000000: CellPeAdvanceTracing : CellPeAdvanceTracing 0x40000000: SpeedEstimatorTracing: SpeedEstimatorTracing 0x80000000: VenuePE: VenuePE 0x8000000000000000: Microsoft-WindowsPhone-LocationServiceProvider/Debug: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {4D20DF22-E177-4514-A369-F1759FEEDEB3} Manifest Microsoft-Windows-VIRTDISK - channel: 0x10: Microsoft-Windows-VIRTDISK-Analytic: Microsoft-Windows-VIRTDISK-Analytic - keyword: 0x8000000000000000: Microsoft-Windows-VIRTDISK-Analytic: Microsoft-Windows-VIRTDISK-Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {4DD778B8-379C-4D8C-B659-517A43D6DF7D} Manifest Microsoft-Windows-TSF-UIManager - channel: 0x10: UIManager_Channel - keyword: 0x10000: TSF_UIManager 0x8000000000000000: UIManager_Channel - level: 0x4: win:Informational: Information {4DE9BC9C-B27A-43C9-8994-0915F1A5E24F} Manifest Microsoft-Windows-AAD - channel: 0x10: Microsoft-Windows-AAD/Analytic: Microsoft-Windows-AAD/Analytic 0x11: Microsoft-Windows-AAD/Operational: Microsoft-Windows-AAD/Operational - keyword: 0x1: Telemetry: Telemetry trigger events 0x2: Error: Error 0x4: Analytic: Analytic 0x8: Function: Function 0x10: Operational: Operational 0x20: Warning: Warning 0x40: Critical: Critical 0x100: AadCloudAPPlugin: AadCloudAPPlugin 0x200: AadCredProv: aadcredprov 0x8000000000000000: Microsoft-Windows-AAD/Analytic: Microsoft-Windows-AAD/Analytic 0x4000000000000000: Microsoft-Windows-AAD/Operational: Microsoft-Windows-AAD/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {4EACB4D0-263B-4B93-8CD6-778A278E5642} Manifest Microsoft-Windows-GenericRoaming - channel: 0x10: Microsoft-Windows-GenericRoaming/Admin: Microsoft-Windows-GenericRoaming/Admin - keyword: 0x8000000000000000: Microsoft-Windows-GenericRoaming/Admin: Microsoft-Windows-GenericRoaming/Admin - level: 0x2: win:Error: Error {4EDBE902-9ED3-4CF0-93E8-B8B5FA920299} Manifest Microsoft-Windows-TunnelDriver - channel: 0x10: Microsoft-Windows-TunnelDriver: Tunnel Driver Etw Channel - keyword: 0x8000000000000000: Microsoft-Windows-TunnelDriver: Tunnel Driver Etw Channel - level: 0x4: win:Informational: Information {4EE76BD8-3CF4-44A0-A0AC-3937643E37A3} Manifest Microsoft-Windows-CodeIntegrity - channel: 0x10: Microsoft-Windows-CodeIntegrity/Operational: Microsoft-Windows-CodeIntegrity/Operational 0x11: Microsoft-Windows-CodeIntegrity/Verbose: Microsoft-Windows-CodeIntegrity/Verbose - keyword: 0x8000000000000000: Microsoft-Windows-CodeIntegrity/Operational: Microsoft-Windows-CodeIntegrity/Operational 0x4000000000000000: Microsoft-Windows-CodeIntegrity/Verbose: Microsoft-Windows-CodeIntegrity/Verbose - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {4F768BE8-9C69-4BBC-87FC-95291D3F9D0C} Manifest Microsoft-Windows-osk - channel: 0x10: Microsoft-Windows-osk/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: Microsoft-Windows-osk/Diagnostic - level: 0x4: win:Informational: Information {4FBA1227-F606-4E5F-B9E8-FAB9AB5740F3} Manifest Microsoft-Windows-TSF-msctf - channel: 0x10: Microsoft-Windows-TSF-msctf/Diagnostic 0x11: Microsoft-Windows-TSF-msctf/Debug - keyword: 0x10000: Status 0x20000: Perf 0x40000: CUAS 0x80000: CiceroHook 0x100000: Focus 0x200000: ALPC 0x400000: Editing 0x800000: TSFAPI 0x1000000: TSFEvent 0x2000000: OOPIME 0x8000000000000000: Microsoft-Windows-TSF-msctf/Diagnostic 0x4000000000000000: Microsoft-Windows-TSF-msctf/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {4FCBF664-A33A-4652-B436-9D558983D955} Manifest Microsoft-Windows-Smartcard-Server - keyword: 0x80000000000000: win:EventlogClassic: Classic {50B3E73C-9370-461D-BB9F-26F32D68887D} Manifest Microsoft-Windows-WebIO - channel: 0x10: Microsoft-Windows-WebIO/Diagnostic 0x11: Microsoft-Windows-WebIO-NDF/Diagnostic - keyword: 0x1: Keyword.API: API 0x100000000: Keyword.SEND: SEND 0x200000000: Keyword.RECEIVE: RECEIVE 0x400000000: Keyword.L3_CONNECT: L3_CONNECT 0x1000000000: Keyword.CLOSE: CLOSE 0x2000000000: Keyword.SECURITY: SECURITY 0x4000000000: Keyword.CONFIGURATION: CONFIGURATION 0x8000000000: Keyword.GLOBAL: GLOBAL 0x10000000000: Keyword.DROPPED: DROPPED 0x20000000000: Keyword.PII_PRESENT: PII_PRESENT 0x40000000000: Keyword.PACKET: PACKET 0x80000000000: Keyword.ADDRESS: ADDRESS 0x100000000000: Keyword.CONTEXT_EVENT: CONTEXT_EVENT 0x200000000000: Keyword.STATE_TRANSITION: STATE_TRANSITION 0x8000000000000000: Microsoft-Windows-WebIO/Diagnostic 0x4000000000000000: Microsoft-Windows-WebIO-NDF/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {50B9E206-9D55-4092-92E8-F157A8235799} Manifest Microsoft-Windows-SmbWmiProvider - channel: 0x10: SmbWmiAnalytic - keyword: 0x8000000000000000: SmbWmiAnalytic - level: 0x2: win:Error: Error {50BD1BFD-936B-4DB3-86BE-E25B96C25898} Manifest Microsoft-Windows-MPS-DRV - channel: 0x10: Microsoft-Windows-MPS-DRV/Diagnostic - keyword: 0x20000: Driver 0x8000000000000000: Microsoft-Windows-MPS-DRV/Diagnostic - level: 0x4: win:Informational: Information {50DF9E12-A8C4-4939-B281-47E1325BA63E} Manifest Microsoft-Windows-DSC {50F99B2D-96D2-421F-BE4C-222C4140DA9F} Manifest Microsoft-Windows-EDP-Audit-Regular - channel: 0x10: Microsoft-Windows-EDP-Audit-Regular/Admin: Microsoft Windows Information Protection Audit Regular Channel - keyword: 0x10: EDP-Audit-Keyword-DataCopied: Windows Information Protection Audit Data Copied Keyword 0x20: EDP-Audit-Keyword-ApplicationGenerated: Windows Information Protection Audit Application Generated Keyword 0x8000000000000000: Microsoft-Windows-EDP-Audit-Regular/Admin: Microsoft Windows Information Protection Audit Regular Channel - level: 0x4: win:Informational: Information {51311DE3-D55E-454A-9C58-43DC7B4C01D2} Manifest Microsoft-Windows-MSMPEG2ADEC - channel: 0x10: WINDOWS_MSMPEG2ADEC_CHANNEL - keyword: 0x8000000000000000: WINDOWS_MSMPEG2ADEC_CHANNEL - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {51AEDB05-890B-4ADE-8BA1-0BA14B8E8973} Manifest Microsoft-Windows-ELS-Hyphenation - channel: 0x10: Els_Hyphenation/Analytic: Microsoft Windows ELS Hyphenation Analytic Channel 0x9: Application: Application - keyword: 0x8000000000000000: Els_Hyphenation/Analytic: Microsoft Windows ELS Hyphenation Analytic Channel 0x4000000000000000: Application: Application - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {52F82079-1974-4C67-81DA-807B892778BB} Manifest Microsoft-Windows-IE-SmartScreen - channel: 0x10: Microsoft-Windows-IE-SmartScreen - keyword: 0x1: functionality 0x2: info 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IE-SmartScreen - level: 0x4: win:Informational: Information {52FC89F8-995E-434C-A91E-199986449890} Manifest Microsoft-Windows-Hyper-V-Hypervisor - channel: 0x8: System: System 0x10: Microsoft-Windows-Hyper-V-Hypervisor-Admin 0x11: Microsoft-Windows-Hyper-V-Hypervisor-Operational 0x12: Microsoft-Windows-Hyper-V-Hypervisor-Analytic - keyword: 0x400000000000: ms:Measures 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Admin 0x2000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Operational 0x1000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {530FB9B9-C515-4472-9313-FB346F9255E3} Manifest Microsoft-Windows-SetupPlatform - channel: 0x10: Microsoft-Windows-SetupPlatform/Analytic 0x11: Setup 0x8: System: System - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-SetupPlatform/Analytic 0x4000000000000000: Setup 0x2000000000000000: System: System - level: 0x4: win:Informational: Information {531A35AB-63CE-4BCF-AA98-F88C7A89E455} Manifest Microsoft-Windows-XAML - channel: 0x10: Microsoft-Windows-XAML/Default - keyword: 0x1: Detailed 0x2: Temporary 0x4: Core 0x8: Managed 0x10: Parser 0x20: Text 0x40: Layout 0x80: Controls 0x100: Appmodel 0x200: Databinding 0x400: Templates 0x800: Media 0x1000: Rendering 0x2000: Animation 0x4000: CachedComposition 0x8000: Input 0x10000: DComp 0x20000: Images 0x40000: Stackwalk 0x80000: ApiCall 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-XAML/Default - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: Diagnostic: Diagnostic 0x64: Debugging: Debugging {5322D61A-9EFA-4BC3-A3F9-14BE95C144F8} Manifest Microsoft-Windows-Kernel-Prefetch - channel: 0x10: Microsoft-Windows-Kernel-Prefetch/Diagnostic - keyword: 0x20: BasicInformation 0x8000000000000000: Microsoft-Windows-Kernel-Prefetch/Diagnostic - level: 0x4: win:Informational: Information {538CBBAD-4877-4EB2-B26E-7CAEE8F0F8CB} Manifest Microsoft-Windows-FunctionDiscoveryHost - channel: 0x8: System: System - keyword: 0x40: core: Event originating from the fdphost service 0x8000000000000000: System: System - level: 0x2: win:Error: Error {5402E5EA-1BDD-4390-82BE-E108F1E634F5} Manifest Microsoft-Windows-WinINet-Config - channel: 0x10: Microsoft-Windows-WinINet-Config/ProxyConfigChanged - keyword: 0x8000000000000000: Microsoft-Windows-WinINet-Config/ProxyConfigChanged - level: 0x4: win:Informational: Information {5412704E-B2E1-4624-8FFD-55777B8F7373} Manifest Microsoft-Windows-Kernel-Pep - channel: 0x10: Microsoft-Windows-Kernel-Pep/Diagnostic - keyword: 0x1: popep:Power 0x8000000000000000: Microsoft-Windows-Kernel-Pep/Diagnostic - level: 0x4: win:Informational: Information {54164045-7C50-4905-963F-E5BC1EEF0CCA} Manifest Microsoft-Windows-CertificateServicesClient-CertEnroll - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {5444519F-2484-45A2-991E-953E4B54C8E0} Manifest Microsoft-Windows-MPS-SRV - channel: 0x10: Microsoft-Windows-MPS-SRV/Diagnostic - keyword: 0x10000: Service 0x8000000000000000: Microsoft-Windows-MPS-SRV/Diagnostic - level: 0x4: win:Informational: Information {546549BE-9D63-46AA-9154-4F6EB9526378} Manifest Microsoft-Windows-Firewall-CPL - channel: 0x10: Microsoft-Windows-Firewall-CPL/Diagnostic - keyword: 0x10000: FirewallCpl 0x8000000000000000: Microsoft-Windows-Firewall-CPL/Diagnostic - level: 0x4: win:Informational: Information {54732EE5-61CA-4727-9DA1-10BE5A4F773D} Manifest Microsoft-Windows-BfeTriggerProvider - keyword: 0x1: Keyword_FirewallPortOpenEvent 0x2: Keyword_FirewallPortCloseEvent - level: 0x4: win:Informational: Information {54849625-5478-4994-A5BA-3E3B0328C30D} Manifest Microsoft-Windows-Security-Auditing - channel: 0xa: Security: Security - keyword: 0x8000000000000000: Security: Security - level: 0x4: win:Informational: Information {548C4417-CE45-41FF-99DD-528F01CE0FE1} Manifest Microsoft-Windows-KernelStreaming - channel: 0x10: WINDOWS_KS_CHANNEL - keyword: 0x8000000000000000: WINDOWS_KS_CHANNEL - level: 0x4: win:Informational: Information {54CB22FF-26B4-4393-A8C2-6B0715912C5F} Manifest Microsoft-Windows-EQoS - channel: 0x10: Microsoft-Windows-Policy/Operational: Microsoft-Windows-Policy-based QoS/Operational 0x11: Microsoft-Windows-Policy/Analytic: Microsoft-Windows-Policy-based QoS/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Policy/Operational: Microsoft-Windows-Policy-based QoS/Operational 0x4000000000000000: Microsoft-Windows-Policy/Analytic: Microsoft-Windows-Policy-based QoS/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {54D5AC20-E14F-4FDA-92DA-EBF7556FF176} Manifest Microsoft-Windows-Crypto-RNG - channel: 0x10: Microsoft-Windows-Crypto-RNG/Analytic: Microsoft-Windows-Crypto-RNG/Analytic - keyword: 0x1: KEYWORD_SYSTEMRNG_ENTROPY_REGISTRATION: Source registration 0x2: KEYWORD_SYSTEMRNG_ENTROPY_DATA: Entropy data flow 0x4: KEYWORD_SYSTEMRNG_PRNG: PRNG 0x8000000000000000: Microsoft-Windows-Crypto-RNG/Analytic: Microsoft-Windows-Crypto-RNG/Analytic - level: 0x4: win:Informational: Information {54FFD262-99FE-4576-96E7-1ADB500370DC} Manifest Microsoft-Windows-Wordpad - channel: 0x10: Microsoft-Windows-Wordpad/Diagnostic 0x11: Microsoft-Windows-Wordpad/Debug 0x12: Microsoft-Windows-Wordpad/Admin - keyword: 0x8000000000000000: Microsoft-Windows-Wordpad/Diagnostic 0x4000000000000000: Microsoft-Windows-Wordpad/Debug 0x2000000000000000: Microsoft-Windows-Wordpad/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {55404E71-4DB9-4DEB-A5F5-8F86E46DDE56} Manifest Microsoft-Windows-Winsock-NameResolution - channel: 0x10: Microsoft-Windows-Winsock-NameResolution/Operational: Microsoft-Windows-Winsock NameResolution Event/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Winsock-NameResolution/Operational: Microsoft-Windows-Winsock NameResolution Event/Operational - level: 0x4: win:Informational: Information {555908D1-A6D7-4695-8E1E-26931D2012F4} Manifest Service Control Manager - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System {55AB77F6-FA04-43EF-AF45-688FBF500482} Manifest Microsoft-Windows-GPIO-ClassExtension - channel: 0x10: Microsoft-Windows-GPIO-ClassExtension/Analytic: Analytic 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-GPIO-ClassExtension/Analytic: Analytic 0x4000000000000000: System: System - level: 0x4: win:Informational: Information {55B24B1D-DD9C-44C0-BA77-4F749F1B6976} Manifest Microsoft-Windows-Minstore - channel: 0x10: Microsoft-Windows-Minstore/Analytic: Minstore Analytic Channel 0x11: Microsoft-Windows-Minstore/Debug: Minstore Debug Channel - keyword: 0x8000000000000000: Microsoft-Windows-Minstore/Analytic: Minstore Analytic Channel 0x4000000000000000: Microsoft-Windows-Minstore/Debug: Minstore Debug Channel - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {55BACC9F-9AC0-46F5-968A-A5A5DD024F8A} Manifest Microsoft-Windows-wmvdecod - channel: 0x10: WINDOWS_wmvdecod_CHANNEL - keyword: 0x8000000000000000: WINDOWS_wmvdecod_CHANNEL - level: 0x4: win:Informational: Information {56C71C31-CFBD-4CDD-8559-505E042BBBE1} Manifest Microsoft-Windows-DeviceAssociationService - channel: 0x10: Microsoft-Windows-DeviceAssociationService/Performance - keyword: 0x1: PerfTrackContext 0x2: DeviceAssociationService 0x4: query 0x8: association 0x100: DeviceAssociationClient 0x8000000000000000: Microsoft-Windows-DeviceAssociationService/Performance - level: 0x4: win:Informational: Information {56DC463B-97E8-4B59-E836-AB7C9BB96301} Manifest Microsoft-Windows-Diagtrack - channel: 0x10: Microsoft-Windows-DiagTrack/Diagnostic - keyword: 0x10000: DiagTrackStatus: DiagTrack Status 0x200000000: DiagTrackPerf: DiagTrack Windows Perf 0x8000000000000000: Microsoft-Windows-DiagTrack/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {56F519AB-9DF6-4345-8491-A4BA21AC825B} Manifest Microsoft-Windows-UserDataAccess-UnifiedStore - keyword: 0x1: Error 0x2: Performance 0x4: Unified_Store 0x8: Notification 0x10: RPC 0x20: ChangeTracking 0x100: debug: Debug 0x4000000000: Warning 0x8000000000: StateTransition 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {57003E21-269B-4BDC-8434-B3BF8D57D2D5} Manifest Microsoft-User Experience Virtualization-SQM Uploader - channel: 0x10: Microsoft-User Experience Virtualization-SQM Uploader/Operational: Operational 0x11: Microsoft-User Experience Virtualization-SQM Uploader/Debug: Debug 0x12: Microsoft-User Experience Virtualization-SQM Uploader/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Operational: Operational 0x4000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Debug: Debug 0x2000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Analytic: Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {57277741-3638-4A4B-BDBA-0AC6E45DA56C} Manifest Microsoft-JScript - keyword: 0x1: JScriptRuntime 0x2: JScriptStartRundown 0x4: JScriptEndRundown 0x8: JScriptGCBucketStats 0x10: JScriptProjection 0x20: JScriptFrontend 0x40: JScriptGarbageCollection 0x80: JScriptProfile 0x100: JscriptBackend 0x200: JscriptJit 0x400: JScriptMemoryTracing 0x800: JScriptObjectAllocation 0x1000: JScriptExternalReferenceAddRef 0x2000: JScriptObjectCleanup 0x4000: JScriptExternalReferenceRelease 0x8000: JScriptAsyncCausality 0x10000: JScriptByteCode 0x20000: JScriptHosting 0x40000: JScriptStackTrace 0x80000: JScriptAsyncCausality_V2 0x100000: JScriptSourceMapping 0x200000: MemProtectGarbageCollection 0x400000: MemProtectObjectAllocation 0x800000: MemProtectHeapSize 0x1000000: Internal 0x2000000: MemProtectGCBucketStats - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5770385F-C22A-43E0-BF4C-06F5698FFBD9} Manifest Microsoft-Windows-Sysmon - channel: 0x10: Microsoft-Windows-Sysmon/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Sysmon/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {5786E035-EF2D-4178-84F2-5A6BBEDBB947} Manifest Microsoft-Windows-DirectManipulation - channel: 0x10: Microsoft-Windows-DirectManipulation/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DirectManipulation/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {579402A2-883C-45D8-B70A-9BC856407751} Manifest Microsoft-Windows-SettingSync-Desktop - channel: 0x10: Microsoft-Windows-SettingSync/Operational 0x11: Microsoft-Windows-SettingSync/Debug 0x12: Microsoft-Windows-SettingSync/Analytic - keyword: 0x1: RoamingSettings 0x8000000000000000: Microsoft-Windows-SettingSync/Operational 0x4000000000000000: Microsoft-Windows-SettingSync/Debug 0x2000000000000000: Microsoft-Windows-SettingSync/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5857D6CA-9732-4454-809B-2A87B70881F8} Manifest Microsoft-Windows-WSC-SRV - channel: 0x10: Microsoft-Windows-WSC-SRV/Diagnostic - keyword: 0x10000: Service 0x20000: UI 0x8000000000000000: Microsoft-Windows-WSC-SRV/Diagnostic - level: 0x4: win:Informational: Information {585CAB4F-9351-436E-9D99-DC4B41A20DE0} Manifest Microsoft-Windows-Tethering-Station - channel: 0x10: Microsoft-Windows-Tethering-Station/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Tethering-Station/Analytic - level: 0x4: win:Informational: Information {5885720D-F086-4614-A17C-4770C2461AF2} Manifest DptfAcpiEtwProvider - keyword: 0x1: ApiTrace 0x2: Action_const 0x4: Action_msr 0x8: Action_mmio 0x10: Action_acpi 0x20: IPC 0x40: Command 0x80: Primitive 0x100: Action 0x200: Cpc 0x400: Power 0x800: Dsp 0x1000: Event 0x2000: Elf 0x4000: Pmg 0x8000: Queue 0x10000: Hash 0x20000: Pnp 0x40000: Action_code 0x80000: Domain 0x100000: Action_mbi 0x200000: Drvm 0x400000: Windows 0x800000: Linux 0x1000000: Action_delegate 0x2000000: Lp 0x4000000: KIoctl 0x100000000: Interrupt - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {588C5C5A-FFC5-44A2-9A7F-D5E8DBE6EFD7} Manifest Microsoft-Windows-HealthCenter - channel: 0x10: Microsoft-Windows-HealthCenter/Debug 0x11: Microsoft-Windows-HealthCenter/Performance - keyword: 0x1: WHC 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-HealthCenter/Debug 0x4000000000000000: Microsoft-Windows-HealthCenter/Performance - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {58980F4B-BD39-4A3E-B344-492ED2254A4E} Manifest Microsoft-Windows-EapMethods-RasChap - channel: 0x10: Microsoft-Windows-EapMethods-RasChap/Operational: Operational Channel - keyword: 0x8000000000000000: Microsoft-Windows-EapMethods-RasChap/Operational: Operational Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {595F33EA-D4AF-4F4D-B4DD-9DACDD17FC6E} Manifest Microsoft-Windows-StorageManagement-WSP-Host - channel: 0x10: Microsoft-Windows-StorageManagement/Operational 0x11: Microsoft-Windows-StorageManagement/Debug - keyword: 0x8000000000000000: Microsoft-Windows-StorageManagement/Operational 0x4000000000000000: Microsoft-Windows-StorageManagement/Debug - level: 0x1: win:Critical: Critical {595F7F52-C90A-4026-A125-8EB5E083F15E} Manifest Microsoft-Windows-StorageSpaces-Driver - channel: 0x10: Microsoft-Windows-StorageSpaces-Driver/Operational 0x11: Microsoft-Windows-StorageSpaces-Driver/Diagnostic 0x12: Microsoft-Windows-StorageSpaces-Driver/Performance - keyword: 0x1: Io 0x2: Flush 0x4: Dsm 0x8: Log 0x10: Destage 0x40: ReadCache 0x8000000000000000: Microsoft-Windows-StorageSpaces-Driver/Operational 0x4000000000000000: Microsoft-Windows-StorageSpaces-Driver/Diagnostic 0x2000000000000000: Microsoft-Windows-StorageSpaces-Driver/Performance - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {59819D0A-ADAF-46B2-8D7C-990BC39C7C15} Manifest Microsoft-Windows-Battery - channel: 0x10: Microsoft-Windows-Battery/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Battery/Diagnostic - level: 0x4: win:Informational: Information {59E7A714-73A4-4147-B47E-0957048C75C4} Manifest Microsoft-Windows-XAML-Diagnostics - channel: 0x10: Microsoft-Windows-XAML-Diagnostics/Default - keyword: 0x1: Input 0x2: DesignerAppManager 0x4: VisualDiagnostics 0x8000000000000000: Microsoft-Windows-XAML-Diagnostics/Default - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5A24FCDB-1CF3-477B-B422-EF4909D51223} Manifest Microsoft-Windows-CredUI - channel: 0x10: Microsoft-Windows-CredUI/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-CredUI/Diagnostic - level: 0x4: win:Informational: Information {5B004607-1087-4F16-B10E-979685A8D131} Manifest Microsoft-Windows-DomainJoinManagerTriggerProvider - keyword: 0x1: Keyword_DomainJoinEvent 0x2: Keyword_DomainUnjoinEvent - level: 0x4: win:Informational: Information {5B0A651A-8807-45CC-9656-7579815B6AF0} Manifest Microsoft-Windows-RemoteAssistance - channel: 0x10: Microsoft-Windows-RemoteAssistance/Operational 0x11: Microsoft-Windows-RemoteAssistance/Admin 0x12: Microsoft-Windows-RemoteAssistance/Tracing 0x9: Application: Application - keyword: 0x400000000000: ut:Diagnostic 0x8000000000000000: Microsoft-Windows-RemoteAssistance/Operational 0x4000000000000000: Microsoft-Windows-RemoteAssistance/Admin 0x2000000000000000: Microsoft-Windows-RemoteAssistance/Tracing 0x1000000000000000: Application: Application - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x5: win:Verbose: Verbose {5B5AB841-7D2E-4A95-BB4F-095CDF66D8F0} Manifest Microsoft-Windows-PackageStateRoaming - channel: 0x10: Microsoft-Windows-PackageStateRoaming/Operational: Microsoft-Windows-PackageStateRoaming/Operational 0x11: Microsoft-Windows-PackageStateRoaming/Debug: Microsoft-Windows-PackageStateRoaming/Debug 0x12: Microsoft-Windows-PackageStateRoaming/Analytic: Microsoft-Windows-PackageStateRoaming/Analytic - keyword: 0x1: PackageStateRoaming 0x8000000000000000: Microsoft-Windows-PackageStateRoaming/Operational: Microsoft-Windows-PackageStateRoaming/Operational 0x4000000000000000: Microsoft-Windows-PackageStateRoaming/Debug: Microsoft-Windows-PackageStateRoaming/Debug 0x2000000000000000: Microsoft-Windows-PackageStateRoaming/Analytic: Microsoft-Windows-PackageStateRoaming/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB} Manifest Microsoft-Windows-CAPI2 - channel: 0x9: Application: Application 0x10: Microsoft-Windows-CAPI2/Operational: Microsoft-Windows-CAPI2/Operational 0x11: Microsoft-Windows-CAPI2/Catalog Database Debug: Microsoft-Windows-CAPI2/Catalog Database Debug - keyword: 0x1: PathValidation: Path Validation 0x2: PathDiscovery: Path Discovery 0x4: Revocation: Revocation 0x8: Cache: Cache 0x10: Retrieval: Retrieval 0x20: AutoRootUpdate: Automatic Root Update 0x40: WinVerifyTrust: Trust Verification 0x80: PrivateKey: Private Key 0x100: CertificateStore: Certificate Store 0x200: CertificateDetails: Certificate Details 0x400: Catalog: Catalog 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-CAPI2/Operational: Microsoft-Windows-CAPI2/Operational 0x2000000000000000: Microsoft-Windows-CAPI2/Catalog Database Debug: Microsoft-Windows-CAPI2/Catalog Database Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5C1C9AB3-8689-4E41-90FA-85858306D7B7} Manifest Microsoft-Windows-Network-DataUsage - channel: 0x10: Microsoft-Windows-Network-DataUsage/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Network-DataUsage/Analytic - level: 0x4: win:Informational: Information {5C8BB950-959E-4309-8908-67961A1205D5} Manifest Microsoft-IEFRAME - channel: 0x10: Microsoft-IEFRAME/Diagnostic - keyword: 0x1: DIC 0x2: TravelLogScreenshotNav 0x4: LCIEDownloader 0x8: favicon 0x10: HistoryJournal 0x20: HUX 0x100: primarynav 0x200: subsystem 0x400: extended 0x800: verbose 0x1000: mshtml 0x2000: wininet 0x4000: shell 0x8000: jscript 0x10000: ap 0x20000: rss 0x40000: controlpanel 0x80000: notification 0x100000: pageloadbreakdown 0x200000: unifiedlistview 0x400000: immersive 0x800000: tabhydration 0x1000000: hang 0x2000000: imagestore 0x4000000: bingsuggestions 0x10000000: sharecharm 0x20000000: roaming 0x40000000: BFCache 0x80000000: DownloadWindow 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-IEFRAME/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5CAD3597-5FEC-4C62-9CE1-9D7ABC723D3A} Manifest Microsoft-Windows-PushNotifications-Developer - channel: 0x10: Microsoft-Windows-PushNotification-Developer/Debug: Microsoft-Windows-PushNotifications-Developer/Debug - keyword: 0x8000000000000000: Microsoft-Windows-PushNotification-Developer/Debug: Microsoft-Windows-PushNotifications-Developer/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {5CAD485A-210F-4C16-80C5-F892DE74E28D} Manifest Microsoft-Windows-OtpCredentialProviderEvt - channel: 0x10: Microsoft-Windows-OtpCredentialProvider/Operational: Microsoft-Windows-OtpCredentialProvider/Operational - keyword: 0x8000000000000000: Microsoft-Windows-OtpCredentialProvider/Operational: Microsoft-Windows-OtpCredentialProvider/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {5D674230-CA9F-11DA-A94D-0800200C9A66} Manifest Microsoft-Windows-BitLocker-API - channel: 0x8: System: System 0x10: Microsoft-Windows-BitLocker/BitLocker Management: Management 0x11: Microsoft-Windows-BitLocker/Tracing 0x12: Microsoft-Windows-BitLocker/BitLocker Operational: Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-BitLocker/BitLocker Management: Management 0x2000000000000000: Microsoft-Windows-BitLocker/Tracing 0x1000000000000000: Microsoft-Windows-BitLocker/BitLocker Operational: Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {5D8087DD-3A9B-4F56-90DF-49196CDC4F11} Manifest Microsoft-Windows-Direct3D12 - channel: 0x10: Microsoft-Windows-Direct3D12/Analytic 0x11: Microsoft-Windows-Direct3D12/Logging 0x12: Microsoft-Windows-Direct3D12/PerfTiming - keyword: 0x1: Names 0x2: Devices 0x4: Resources 0x8: Markers 0x10: RenderOperationMarkers 0x20: DriverCustomMarkers 0x40: BundleMarkers 0x80: ObjectLifetime 0x100: JournalEntries 0x8000000000000000: Microsoft-Windows-Direct3D12/Analytic 0x4000000000000000: Microsoft-Windows-Direct3D12/Logging 0x2000000000000000: Microsoft-Windows-Direct3D12/PerfTiming - level: 0x0: win:LogAlways: Log Always {5D86C4E2-8FCD-48D7-A713-9A04609C0189} Manifest Microsoft-Windows-MCCS-DavSyncProvider - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x1000000000: CommsService: CommsService 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {5D896912-022D-40AA-A3A8-4FA5515C76D7} Manifest Microsoft-Windows-TerminalServices-LocalSessionManager - channel: 0x8: System: System 0x10: Microsoft-Windows-TerminalServices-LocalSessionManager/Admin 0x11: Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic 0x12: Microsoft-Windows-TerminalServices-LocalSessionManager/Operational 0x13: Microsoft-Windows-TerminalServices-LocalSessionManager/Debug - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Admin 0x2000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic 0x1000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Operational 0x800000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {5D9E0020-3761-4F36-90C8-38CE6511BD12} Manifest Microsoft-Windows-MSDTC 2 - keyword: 0x80000000000000: win:EventlogClassic: Classic {5EC13D8E-4B3F-422E-A7E7-3121A1D90C7A} Manifest Microsoft-Windows-ApplicationExperienceInfrastructure - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x1: win:Critical: Critical 0x3: win:Warning: Warning 0x4: win:Informational: Information {5F0E257F-C224-43E5-9555-2ADCB8540A58} Manifest Microsoft-Windows-Immersive-Shell-API - channel: 0x10: Microsoft-Windows-TWinAPI/Diagnostic 0x11: Microsoft-Windows-CoreApplication/Diagnostic 0x12: Microsoft-Windows-CoreApplication/Tracing 0x13: Microsoft-Windows-CoreApplication/Operational - keyword: 0x2: Deferral: Suspending Deferral 0x4: ElizaPrototype: ElizaPrototype 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-TWinAPI/Diagnostic 0x4000000000000000: Microsoft-Windows-CoreApplication/Diagnostic 0x2000000000000000: Microsoft-Windows-CoreApplication/Tracing 0x1000000000000000: Microsoft-Windows-CoreApplication/Operational - level: 0x4: win:Informational: Information {5F92BC59-248F-4111-86A9-E393E12C6139} Manifest Microsoft-Windows-MemoryDiagnostics-Results - channel: 0x8: System: System 0x10: Microsoft-Windows-MemoryDiagnostics-Results/Debug: Microsoft-Windows-MemoryDiagnostics-Results/Debug - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-MemoryDiagnostics-Results/Debug: Microsoft-Windows-MemoryDiagnostics-Results/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {602A0873-9BDE-48B3-B6B7-277035293458} Manifest Microsoft-Windows-MCCS-ActiveSyncCsp {606A6A38-70EC-4309-B3A3-82FF86F73329} Manifest Microsoft-Windows-ServiceReportingApi - channel: 0x10: Microsoft-Windows-ServiceReportingApi/Debug: Microsoft-Windows-Service Reporting API/Debug - keyword: 0x1: SVCAPI_BASELINE_KEYWORD_DEBUG: This keyword is for debug messages 0x8000000000000000: Microsoft-Windows-ServiceReportingApi/Debug: Microsoft-Windows-Service Reporting API/Debug - level: 0x2: win:Error: Error {606C6FE0-A9DC-4A9D-BDEA-830AFF6716E7} Manifest Microsoft-Windows-Shell-Search-UriHandler - channel: 0x10: Microsoft-Windows-Shell-Search-UriHandler - keyword: 0x8000000000000000: Microsoft-Windows-Shell-Search-UriHandler - level: 0x4: win:Informational: Information {614696C9-85AF-4E64-B389-D2C0DB4FF87B} Manifest Microsoft-Windows-WMPNSS-PublicAPI - channel: 0x10: Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic - level: 0x4: win:Informational: Information {617853D6-728B-4B59-8A78-C3A9A5EADE92} Manifest WINSATAPI_ETW_PROVIDER - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information {618473BC-8EEF-4868-ADFF-A1B640B06411} Manifest Microsoft-Windows-MCCS-InternetMail {61BC445E-7A8D-420E-AB36-9C7143881B98} Manifest Microsoft-User Experience Virtualization-Admin - channel: 0x10: Microsoft-User Experience Virtualization-Admin/Debug - keyword: 0x8000000000000000: Microsoft-User Experience Virtualization-Admin/Debug - level: 0x5: win:Verbose: Verbose {61F044AF-9104-4CA5-81EE-CB6C51BB01AB} Manifest Microsoft-Windows-ThemeCPL - channel: 0x10: Microsoft-Windows-ThemeCPL/Diagnostic - keyword: 0x10000: ThemeCPL 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-ThemeCPL/Diagnostic - level: 0x4: win:Informational: Information {62DE9E48-90C6-4755-8813-6A7D655B0802} Manifest Microsoft-Windows-NdisImPlatformSysEvtProvider - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System {632F767E-0EC3-47B9-BA1C-A0E62A74728A} Manifest Microsoft-Windows-BitLocker-DrivePreparationTool - channel: 0x10: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin 0x11: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational - keyword: 0x8000000000000000: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin 0x4000000000000000: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {63848CFF-3EC7-4DDF-8072-5F95E8C8EB98} Manifest Intel-iaLPSS2-GPIO2 - channel: 0x10: Intel-iaLPSS2-GPIO2/Debug: iaLPSS_GPIO2 Debug channel 0x11: Intel-iaLPSS2-GPIO2/Performance: iaLPSS_GPIO2 Performance channel - keyword: 0x8000000000000000: Intel-iaLPSS2-GPIO2/Debug: iaLPSS_GPIO2 Debug channel 0x4000000000000000: Intel-iaLPSS2-GPIO2/Performance: iaLPSS_GPIO2 Performance channel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {63B530F8-29C9-4880-A5B4-B8179096E7B8} Manifest Microsoft-Windows-NlaSvc - channel: 0x10: Microsoft-Windows-NlaSvc/Diagnostic: Microsoft-Windows-NlaSvc/Diagnostic 0x11: Microsoft-Windows-NlaSvc/Operational: Microsoft-Windows-NlaSvc/Operational - keyword: 0x1: Identification 0x2: Resolver 0x4: Intranet 0x8: Trigger 0x10: Plugin 0x20: LwtDiagnostic 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NlaSvc/Diagnostic: Microsoft-Windows-NlaSvc/Diagnostic 0x4000000000000000: Microsoft-Windows-NlaSvc/Operational: Microsoft-Windows-NlaSvc/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {63D1E632-95CC-4443-9312-AF927761D52A} Manifest Microsoft-Windows-HAL - channel: 0x8: System: System 0x10: Microsoft-Windows-HAL/Debug: Microsoft-Windows-HAL/Debug - keyword: 0x1: halDiagnostic 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-HAL/Debug: Microsoft-Windows-HAL/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {63D2BB1D-E39A-41B8-9A3D-52DD06677588} Manifest Microsoft-Windows-Shell-AuthUI - channel: 0x10: Microsoft-Windows-Authentication User Interface/Operational: Microsoft-Windows-Authentication User Interface/Operational 0x11: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic 0x12: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic 0x13: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic 0x14: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic 0x15: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic 0x16: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic 0x17: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic - keyword: 0x200000000000: ms:Telemetry 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Authentication User Interface/Operational: Microsoft-Windows-Authentication User Interface/Operational 0x4000000000000000: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic 0x2000000000000000: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic 0x1000000000000000: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic 0x800000000000000: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic 0x400000000000000: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic 0x200000000000000: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic 0x100000000000000: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {6465DA78-E7A0-4F39-B084-8F53C7C30DC6} Manifest Microsoft-Windows-Input-HIDCLASS - channel: 0x10: Microsoft-Windows-Input-HIDCLASS-Analytic: This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent. - keyword: 0x1: Default 0x8000000000000000: Microsoft-Windows-Input-HIDCLASS-Analytic: This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent. - level: 0x4: win:Informational: Information {6489B27F-7C43-5886-1D00-0A61BB2A375B} Manifest Microsoft-Windows-UniversalTelemetryClient - channel: 0x10: Microsoft-Windows-UniversalTelemetryClient/Operational - keyword: 0x10000: Tenant 0x20000: Upload 0x40000: Service 0x80000: Agent 0x8000000000000000: Microsoft-Windows-UniversalTelemetryClient/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {648A0644-7D62-4FD3-8841-440064762F95} Manifest Microsoft-Windows-BackgroundTransfer-ContentPrefetcher - channel: 0x10: Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational - keyword: 0x8000000000000000: Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {64A98C25-9E00-404E-84AD-6700DFE02529} Manifest Microsoft-Windows-WDAG-PolicyEvaluator-CSP - channel: 0x10: Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {64EF2B1C-4AE1-4E64-8599-1636E441EC88} Manifest Microsoft-Windows-Devices-Background - channel: 0x8: System: System 0x10: Microsoft-Windows-Devices-Background/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Devices-Background/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {651DF93B-5053-4D1E-94C5-F6E6D25908D0} Manifest Microsoft-Windows-BitLocker-Driver - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {651E0E5C-0946-43FF-B70F-AECD299B29B4} Manifest DptfCpuEtwProvider - keyword: 0x1: ApiTrace 0x2: Action_const 0x4: Action_msr 0x8: Action_mmio 0x10: Action_acpi 0x20: IPC 0x40: Command 0x80: Primitive 0x100: Action 0x200: Cpc 0x400: Power 0x800: Dsp 0x1000: Event 0x2000: Elf 0x4000: Pmg 0x8000: Queue 0x10000: Hash 0x20000: Pnp 0x40000: Action_code 0x80000: Domain 0x100000: Action_mbi 0x200000: Drvm 0x400000: Windows 0x800000: Linux 0x1000000: Action_delegate 0x2000000: Lp 0x4000000: KIoctl 0x100000000: Interrupt - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {6545939F-3398-411A-88B7-6A8914B8CEC7} Manifest Microsoft-Windows-ServiceTriggerPerfEventProvider - level: 0x4: win:Informational: Information {65D99466-7A8E-489C-B8E1-962BC945031E} Manifest Microsoft-Windows-Shell-DefaultPrograms - channel: 0x10: Microsoft-Windows-Shell-DefaultPrograms/Diagnostic - keyword: 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-Shell-DefaultPrograms/Diagnostic - level: 0x4: win:Informational: Information {6600E712-C3B6-44A2-8A48-935C511F28C8} Manifest Microsoft-Windows-Iphlpsvc-Trace - channel: 0x10: Microsoft-Windows-Iphlpsvc/Trace: Iphlpsvc Etw Channel 0x11: Microsoft-Windows-Iphlpsvc/Debug: Iphlpsvc Etw Debug Channel - keyword: 0x1: isatap 0x2: sixto4 0x4: iphttps 0x8: teredo 0x10: teredoVerbose 0x20: teredoStart 0x40: teredoEnd 0x80: teredoFailures 0x100: dns64 0x200: CPVerbose 0x400: CPStart 0x800: CPEnd 0x1000: CPFailures 0x2000: CP 0x4000: HA 0x8000: PROXYMGR 0x10000: damultisite 0x20000: common 0x40000: functionentry 0x80000: servicefsm 0x100000: portproxy 0x200000: refcount 0x8000000000000000: Microsoft-Windows-Iphlpsvc/Trace: Iphlpsvc Etw Channel 0x4000000000000000: Microsoft-Windows-Iphlpsvc/Debug: Iphlpsvc Etw Debug Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {66A5C15C-4F8E-4044-BF6E-71D896038977} Manifest Microsoft-Windows-Iphlpsvc - channel: 0x8: System: System 0x10: Microsoft-Windows-Iphlpsvc/Operational: Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Iphlpsvc/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {66C07ECD-6667-43FC-93F8-05CF07F446EC} Manifest Microsoft-Windows-WinNat - channel: 0x10: Microsoft-Windows-WinNat/Trace 0x11: Microsoft-Windows-WinNat/Oper: Operational - keyword: 0x1: ut:Session 0x2: ut:Binding 0x4: ut:Translation 0x8: ut:Configuration 0x10: ut:NatDrop 0x20: ut:NatSkip 0x40: ut:NatForward 0x80: ut:NatGeneralError 0x100: ut:NatGeneric 0x10000000000: ut:Dropped 0x8000000000000000: Microsoft-Windows-WinNat/Trace 0x4000000000000000: Microsoft-Windows-WinNat/Oper: Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {676F167F-F72C-446E-A498-EDA43319A5E3} Manifest Microsoft-Windows-ntshrui - channel: 0x10: Microsoft-Windows-ntshrui 0x11: Microsoft-Windows-ntshrui-perf - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-ntshrui 0x4000000000000000: Microsoft-Windows-ntshrui-perf - level: 0x4: win:Informational: Information {67D07935-283A-4791-8F8D-FA9117F3E6F2} Manifest Microsoft-Windows-Wcmsvc - channel: 0x10: Microsoft-Windows-Wcmsvc/Operational: Operational 0x11: Microsoft-Windows-Wcmsvc/Diagnostic: Diagnostic - keyword: 0x20: LwtDiagnostic 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Wcmsvc/Operational: Operational 0x4000000000000000: Microsoft-Windows-Wcmsvc/Diagnostic: Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {67D781BD-CBD2-4BD2-AD1F-6152FB891246} Manifest Microsoft-Windows-BootUX - level: 0x4: win:Informational: Information {67FE2216-727A-40CB-94B2-C02211EDB34A} Manifest Microsoft-Windows-VolumeSnapshot-Driver - channel: 0x10: Microsoft-Windows-VolumeSnapshot-Driver/Analytic 0x11: Microsoft-Windows-VolumeSnapshot-Driver/Operational - keyword: 0x8000000000000000: Microsoft-Windows-VolumeSnapshot-Driver/Analytic 0x4000000000000000: Microsoft-Windows-VolumeSnapshot-Driver/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {699E309C-E782-4400-98C8-E21D162D7B7B} Manifest Microsoft-Windows-Forwarding - channel: 0x10: Microsoft-Windows-Forwarding/Operational: Operational 0x11: Microsoft-Windows-Forwarding/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-Forwarding/Operational: Operational 0x4000000000000000: Microsoft-Windows-Forwarding/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {69C8CA7E-1ADF-472B-BA4C-A0485986B9F6} Manifest Microsoft-Windows-StorageSpaces-SpaceManager - channel: 0x10: Microsoft-Windows-StorageSpaces-SpaceManager/Operational 0x11: Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-StorageSpaces-SpaceManager/Operational 0x4000000000000000: Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic - level: 0x4: win:Informational: Information {6A1F2B00-6A90-4C38-95A5-5CAB3B056778} Manifest Microsoft-Windows-DHCPv6-Client - channel: 0x10: Microsoft-Windows-Dhcpv6-Client/Admin: Microsoft-Windows-DHCPv6 Client Events/Admin 0x11: Microsoft-Windows-Dhcpv6-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational 0x8: System: System - keyword: 0x1: DHCPV6_AOAC 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Dhcpv6-Client/Admin: Microsoft-Windows-DHCPv6 Client Events/Admin 0x4000000000000000: Microsoft-Windows-Dhcpv6-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational 0x2000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C} Manifest Microsoft-Windows-WMPNSS-Service - channel: 0x10: Microsoft-Windows-WMPNSS-Service/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-WMPNSS-Service/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6A502821-AB44-40C8-B32F-37315D9D52E0} Manifest Microsoft-Windows-Network-and-Sharing-Center - channel: 0x10: Microsoft-Windows-Network-and-Sharing-Center/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Network-and-Sharing-Center/Diagnostic - level: 0x4: win:Informational: Information {6AD52B32-D609-4BE9-AE07-CE8DAE937E39} Manifest Microsoft-Windows-RPC - channel: 0x10: Microsoft-Windows-RPC/EEInfo: EEInfo 0x11: Microsoft-Windows-RPC/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-RPC/EEInfo: EEInfo 0x4000000000000000: Microsoft-Windows-RPC/Debug: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6ADDABF4-8C54-4EAB-BF4F-FBEF61B62EB0} Manifest Microsoft-Windows-AIT - level: 0x4: win:Informational: Information {6B1FFE48-5B1E-4793-9F7F-AE926454499D} Manifest Microsoft-Windows-DiskDiagnosticResolver - channel: 0x10: Microsoft-Windows-DiskDiagnosticResolver/Operational: Microsoft-Windows-DiskDiagnosticResolver/Operational - keyword: 0x8000000000000000: Microsoft-Windows-DiskDiagnosticResolver/Operational: Microsoft-Windows-DiskDiagnosticResolver/Operational - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {6B4DB0BC-9A3D-467D-81B9-A84C6F2F3D40} Manifest Microsoft-Windows-Disk - channel: 0x10: Microsoft-Windows-Disk/Operational 0x11: Microsoft-Windows-Storage-Disk/Diagnose 0x12: Microsoft-Windows-Storage-Disk/Debug 0x13: Microsoft-Windows-Storage-Disk/Analytic 0x14: Microsoft-Windows-Storage-Disk/Operational 0x15: Microsoft-Windows-Storage-Disk/Admin - keyword: 0x1: DiskCache 0x100000: IO_Performance: IO Performance measurement 0x200000: Read: Read request 0x400000: Write: Write request 0x800000: PagingRead: Paging Read request 0x1000000: PagingWrite: Paging Write request 0x2000000: LowMemoryRead: Low memory Read request 0x4000000: LowMemoryWrite: Low memory write request 0x8000000: NonReadWrite: Non-Read/Write request 0x10000000: PassThrough: Pass-Through request 0x20000000: Flush: Flush request 0x40000000: IOCTL: Device I/O control request 0x80000000: WMI: WMI request 0x100000000: Power: Power request 0x200000000: PnP: PnP request 0x400000000: Enum: Device enumeration handling 0x800000000: Queue: Queue-related operation 0x1000000000: ISR: Interrupt Service Routine processing 0x2000000000: DPC: Deferred Procedure Call handling 0x4000000000: Timer: Timer-related operation 0x8000000000: Protocol: Bus protocol specific operation 0x10000000000: Target: Target-related operation 0x20000000000: Adapter: Controller or Host Bus Adapter related operation 0x40000000000: Retry: Retry handling 0x80000000000: Timeout: Timeout handling 0x100000000000: ReSet: Reset handling 0x200000000000: MiniportInterface: Activity between port and miniport 0x800000000000: Test: Testing-specific processing 0x8000000000000000: Microsoft-Windows-Disk/Operational 0x4000000000000000: Microsoft-Windows-Storage-Disk/Diagnose 0x2000000000000000: Microsoft-Windows-Storage-Disk/Debug 0x1000000000000000: Microsoft-Windows-Storage-Disk/Analytic 0x800000000000000: Microsoft-Windows-Storage-Disk/Operational 0x400000000000000: Microsoft-Windows-Storage-Disk/Admin - level: 0x4: win:Informational: Information {6B7B5E3A-F4DE-42D9-9545-BAE12852D778} Manifest Microsoft-WindowsPhone-Net-Cellcore-CellularAPI - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Information: Information 0x8: Trace: Trace 0x10: UICC: UICC 0x20: RefCntTrace: Reference Count Trace 0x40: FunctionTrace: Function Trace 0x80: OEM: OEM configuration - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6B93BF66-A922-4C11-A617-CF60D95C133D} Manifest Microsoft-Windows-Fault-Tolerant-Heap - channel: 0x8: System: System 0x10: Microsoft-Windows-Fault-Tolerant-Heap/Operational: Microsoft-Windows-Fault-Tolerant-Heap/Operational - keyword: 0x10000000: FTH_EVENT_KEYWORD_LIFECYCLE: Events related to lifecycle of FTH (Fault tolerant heap) service. 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Fault-Tolerant-Heap/Operational: Microsoft-Windows-Fault-Tolerant-Heap/Operational - level: 0x4: win:Informational: Information {6BA132C4-DA49-415B-A7F4-31870DC9FE25} Manifest Microsoft-Windows-QoS-qWAVE - channel: 0x10: Microsoft-Windows-QoS-qWAVE/Debug - keyword: 0x8000000000000000: Microsoft-Windows-QoS-qWAVE/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {6BBA3851-2C7E-4DEA-8F54-31E5AFD029E3} Manifest Microsoft-Windows-Diagnosis-DPS - channel: 0x10: Microsoft-Windows-Diagnosis-DPS/Debug: Microsoft-Windows-Diagnosis-DPS/Debug 0x11: Microsoft-Windows-Diagnosis-DPS/Operational: Microsoft-Windows-Diagnosis-DPS/Operational 0x12: Microsoft-Windows-Diagnosis-DPS/Analytic: Microsoft-Windows-Diagnosis-DPS/Analytic - keyword: 0x200: memory: Memory tracing events 0x100000000: perf: Timing Events 0x200000000: scenario: Scenario trigger events 0x400000000: debug: Debug events 0x800000000: lifecycle: Scenario lifecycle events 0x1000000000: notification: Diagnostic Module notification events 0x8000000000000000: Microsoft-Windows-Diagnosis-DPS/Debug: Microsoft-Windows-Diagnosis-DPS/Debug 0x4000000000000000: Microsoft-Windows-Diagnosis-DPS/Operational: Microsoft-Windows-Diagnosis-DPS/Operational 0x2000000000000000: Microsoft-Windows-Diagnosis-DPS/Analytic: Microsoft-Windows-Diagnosis-DPS/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6BD96334-DC49-441A-B9C4-41425BA628D8} Manifest Microsoft-Windows-Runtime-WebAPI - channel: 0x10: Microsoft-Windows-Runtime-WebAPI/Tracing - keyword: 0x1: keywords.API: API 0x2: keywords.AtomPub: AtomPub 0x4: keywords.Json: JSON 0x8: keywords.Format: Format 0x10: keywords.AsyncOperation: AsyncOperation 0x20: keywords.Http: HTTP 0x8000000000000000: Microsoft-Windows-Runtime-WebAPI/Tracing - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6BDADC96-673E-468C-9F5B-F382F95B2832} Manifest Microsoft-Windows-Security-SPP-UX - channel: 0x10: Microsoft-Windows-Security-SPP-UX/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Security-SPP-UX/Analytic - level: 0x4: win:Informational: Information {6C260F2C-049A-43D8-BF4D-D350A4E6611A} Manifest Microsoft-Windows-RasSstp - keyword: 0x80000000000000: win:EventlogClassic: Classic {6D7662A9-034E-4B1F-A167-67819C401632} Manifest Microsoft-Windows-IdCtrls - channel: 0x10: Microsoft-Windows-IdCtrls/Operational: Microsoft-Windows-IdCtrls/Operational 0x11: Microsoft-Windows-IdCtrls/Analytic: Microsoft-Windows-IdCtrls/Analytic - keyword: 0x1: IdentityWizard 0x8000000000000000: Microsoft-Windows-IdCtrls/Operational: Microsoft-Windows-IdCtrls/Operational 0x4000000000000000: Microsoft-Windows-IdCtrls/Analytic: Microsoft-Windows-IdCtrls/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {6D8A3A60-40AF-445A-98CA-99359E500146} Manifest Microsoft-Windows-ApplicationExperience-Cache - channel: 0x10: Microsoft-Windows-Kernel-ApphelpCache/Operational 0x11: Microsoft-Windows-Kernel-ApphelpCache/Debug 0x12: Microsoft-Windows-Kernel-ApphelpCache/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Operational 0x4000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Debug 0x2000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {6DF57621-E7E4-410F-A7E9-E43EEB61B11F} Manifest Microsoft-Windows-Shell-ConnectedAccountState - channel: 0x10: Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter - keyword: 0x8000000000000000: Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter - level: 0x4: win:Informational: Information {6E400999-5B82-475F-B800-CEF6FE361539} Manifest Microsoft-Windows-TerminalServices-ClientUSBDevices - channel: 0x10: Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin: Admin 0x11: Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic: Analytic 0x12: Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational: Operational 0x13: Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin: Admin 0x4000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic: Analytic 0x2000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational: Operational 0x1000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6EB875EB-8F4A-4800-A00B-E484C97D7561} Manifest Microsoft-Windows-Runtime-Networking - channel: 0x10: Microsoft-Windows-Runtime-Networking/Tracing - keyword: 0x1: keywords.API: API 0x2: keywords.AsyncOperation: AsyncOperation 0x4: keywords.Socket: Socket 0x8: keywords.WebSocket: WebSocket 0x10: keywords.Http: Http 0x20: keywords.Rtc: Rtc 0x8000000000000000: Microsoft-Windows-Runtime-Networking/Tracing - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {6EB8DB94-FE96-443F-A366-5FE0CEE7FB1C} Manifest Microsoft-Windows-EapHost - channel: 0x9: Application: Application 0x10: Microsoft-Windows-EapHost/Operational: Microsoft-Windows-EapHost/Operational 0x11: Microsoft-Windows-EapHost/Analytic: Microsoft-Windows-EapHost/Analytic 0x12: Microsoft-Windows-EapHost/Debug: Microsoft-Windows-EapHost/Debug - keyword: 0x1: Reg: Registry 0x2: COM: COM 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-EapHost/Operational: Microsoft-Windows-EapHost/Operational 0x2000000000000000: Microsoft-Windows-EapHost/Analytic: Microsoft-Windows-EapHost/Analytic 0x1000000000000000: Microsoft-Windows-EapHost/Debug: Microsoft-Windows-EapHost/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {6ECE3302-FEE1-4EA9-8B88-086D459ED976} Manifest Microsoft-Windows-Display - keyword: 0x10000: DisplayCPL - level: 0x4: win:Informational: Information {6ED11B00-C1B5-48CB-AECC-FF72EBEFBAE8} Manifest Microsoft-Windows-Wallet - keyword: 0x1: Error 0x2: Performance - level: 0x4: win:Informational: Information {6EF4653A-71F9-4AD3-B093-61C38C9C299F} Manifest Microsoft-Pef-WebProxy - channel: 0x10: Microsoft-Pef-WebProxy/Analytic - keyword: 0x40000000: PacketStart 0x80000000: PacketEnd 0x40000000000: ut:Packet 0x8000000000000000: Microsoft-Pef-WebProxy/Analytic - level: 0x4: win:Informational: Information {6F789161-D86F-4063-9E66-41F26B5DA238} Manifest Intel-SST-OED - channel: 0x8: System: System 0x10: Intel-SST-OED/IntcOED_ETW_Debug: Debug Information for Intel Offload Engine Driver - keyword: 0x8000000000000000: System: System 0x4000000000000000: Intel-SST-OED/IntcOED_ETW_Debug: Debug Information for Intel Offload Engine Driver - level: 0x2: win:Error: Error 0x4: win:Informational: Information {70EB4F03-C1DE-4F73-A051-33D13D5413BD} Manifest Microsoft-Windows-Kernel-Registry - channel: 0x10: Microsoft-Windows-Kernel-Registry/Analytic 0x11: Microsoft-Windows-Kernel-Registry/Performance - keyword: 0x1: CloseKey 0x2: QuerySecurityKey 0x4: SetSecurityKey 0x10: EnumerateValueKey 0x20: QueryMultipleValueKey 0x40: SetInformationKey 0x80: FlushKey 0x100: SetValueKey 0x200: DeleteValueKey 0x400: QueryValueKey 0x800: EnumerateKey 0x1000: CreateKey 0x2000: OpenKey 0x4000: DeleteKey 0x8000: QueryKey 0x8000000000000000: Microsoft-Windows-Kernel-Registry/Analytic 0x4000000000000000: Microsoft-Windows-Kernel-Registry/Performance - level: 0x4: win:Informational: Information {712880E9-7813-41A3-8E4C-E4E0C4F6580A} Manifest Microsoft-Windows-WiFiDisplay - channel: 0x10: Microsoft-Windows-WiFiDisplay/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WiFiDisplay/Analytic - level: 0x4: win:Informational: Information {712ABB2D-D806-4B42-9682-26DA01D8B307} Manifest Microsoft-Windows-Video-For-Windows - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x3: win:Warning: Warning {719BE4ED-E9BC-4DD8-A7CF-C85CE8E4975D} Manifest Microsoft-Windows-MSDTC - keyword: 0x80000000000000: win:EventlogClassic: Classic {71C993B8-1E28-4543-9886-FB219B63FDB3} Manifest Microsoft-Windows-WWAN-CFE - channel: 0x10: Microsoft-Windows-WWAN-CFE/Diagnostic: Microsoft-Windows-WWAN-CFE/Diagnostic - keyword: 0x1: Wwan-Performance 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WWAN-CFE/Diagnostic: Microsoft-Windows-WWAN-CFE/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {7237FFF9-A08A-4804-9C79-4A8704B70B87} Manifest Microsoft-Windows-LanguagePackSetup - channel: 0x8: System: System 0x10: Microsoft-Windows-LanguagePackSetup/Operational: Microsoft-Windows-LanguagePackSetup/Operational 0x11: Microsoft-Windows-LanguagePackSetup/Analytic: Microsoft-Windows-LanguagePackSetup/Analytic 0x12: Microsoft-Windows-LanguagePackSetup/Debug: Microsoft-Windows-LanguagePackSetup/Debug - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-LanguagePackSetup/Operational: Microsoft-Windows-LanguagePackSetup/Operational 0x2000000000000000: Microsoft-Windows-LanguagePackSetup/Analytic: Microsoft-Windows-LanguagePackSetup/Analytic 0x1000000000000000: Microsoft-Windows-LanguagePackSetup/Debug: Microsoft-Windows-LanguagePackSetup/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {72561CF0-C85C-4F78-9E8D-CBA9093DF62D} Manifest Microsoft-Windows-OneBackup - channel: 0x10: Microsoft-Windows-OneBackup/Debug: Microsoft-Windows-OneBackup/Debug - keyword: 0x8000000000000000: Microsoft-Windows-OneBackup/Debug: Microsoft-Windows-OneBackup/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x5: win:Verbose: Verbose {7288C9F8-D63C-4932-A345-89D6B060174D} Manifest Microsoft-Windows-ADSI - channel: 0x10: Microsoft-Windows-ADSI/Debug - keyword: 0x1: schema 0x2: changepwd 0x4: setpwd 0x8: bindcache 0x8000000000000000: Microsoft-Windows-ADSI/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {728B02D9-BF21-49F6-BE3F-91BC06F7467E} Manifest Microsoft-Windows-WDAG-Service {728B8C72-0F0F-4071-9BCC-27CB3B6DACBE} Manifest Microsoft-Windows-DXP - channel: 0x10: Microsoft-Windows-DXP/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DXP/Analytic - level: 0x4: win:Informational: Information {72CD9FF7-4AF8-4B89-AEDE-5F26FDA13567} Manifest Microsoft-Windows-SPB-ClassExtension - channel: 0x10: Microsoft-Windows-SPB-ClassExtension/Analytic: Analytic 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-SPB-ClassExtension/Analytic: Analytic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {72D211E1-4C54-4A93-9520-4901681B2271} Manifest Microsoft-Windows-PerfProc - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {73370BD6-85E5-430B-B60A-FEA1285808A7} Manifest Microsoft-Windows-CertificateServicesClient - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {739D66D8-76C4-4004-873F-169AE5C6EACA} Manifest Microsoft-Windows-DevMgmt-UefiCsp - keyword: 0x1: Api: API 0x2: Error: Error - level: 0x2: win:Error: Error 0x4: win:Informational: Information {73A33AB2-1966-4999-8ADD-868C41415269} Manifest Microsoft-Windows-IsolatedUserMode - channel: 0x8: System: System - keyword: 0x400000000000: ms:Measures 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {73AA0094-FACB-4AEB-BD1D-A7B98DD5C799} Manifest Microsoft-Windows-LimitsManagement - channel: 0x10: Microsoft-Windows-LimitsManagement/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-LimitsManagement/Diagnostic - level: 0x4: win:Informational: Information {73E9C9DE-A148-41F7-B1DB-4DA051FDC327} Manifest Microsoft-Windows-MemoryDiagnostics-Schedule - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {741BB90C-A7A3-49D6-BD82-1E6B858403F7} Manifest Microsoft-Windows-CloudStore - channel: 0x10: Microsoft-Windows-CloudStore/Operational: Microsoft-Windows-CloudStore/Operational 0x11: Microsoft-Windows-CloudStore/Debug: Microsoft-Windows-CloudStore/Debug - keyword: 0x8000000000000000: Microsoft-Windows-CloudStore/Operational: Microsoft-Windows-CloudStore/Operational 0x4000000000000000: Microsoft-Windows-CloudStore/Debug: Microsoft-Windows-CloudStore/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {741C6BE3-F74B-4E4D-88E7-5CE3A35FAEB3} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport - channel: 0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug - keyword: 0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug - level: 0x4: win:Informational: Information {741FC222-44ED-4BA7-98E3-F405B2D2C4B4} Manifest Microsoft-Windows-DateTimeControlPanel - channel: 0x10: Microsoft-Windows-DateTimeControlPanel/Operational: Operational 0x11: Microsoft-Windows-DateTimeControlPanel/Analytic: Analytical 0x12: Microsoft-Windows-DateTimeControlPanel/Debug: Debug - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DateTimeControlPanel/Operational: Operational 0x4000000000000000: Microsoft-Windows-DateTimeControlPanel/Analytic: Analytical 0x2000000000000000: Microsoft-Windows-DateTimeControlPanel/Debug: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {7426A56B-E2D5-4B30-BDEF-B31815C1A74A} Manifest Microsoft-Windows-USB-USBHUB - channel: 0x10: Microsoft-Windows-USB-USBHUB/Diagnostic - keyword: 0x1: Diagnostics 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-USB-USBHUB/Diagnostic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {747EF6FD-E535-4D16-B510-42C90F6873A1} Manifest Microsoft-Windows-PrintService - channel: 0x10: Microsoft-Windows-PrintService/Admin: Admin 0x11: Microsoft-Windows-PrintService/Operational: Operational 0x12: Microsoft-Windows-PrintService/Debug: Debug - keyword: 0x1: SPOOLER_KEYWORD_LOCALSPL: Local Spooler 0x2: SPOOLER_KEYWORD_WIN32SPL: Remote Spooler 0x20: SPOOLER_KEYWORD_PRINTER: Printer 0x40: SPOOLER_KEYWORD_JOB: Document Print Job 0x80: SPOOLER_KEYWORD_CONNECTION: Spooler Connection 0x100: SPOOLER_KEYWORD_DRIVER: Print Driver 0x200: SPOOLER_KEYWORD_SETUP: Printer Setup 0x400: SPOOLER_KEYWORD_TRACE: Spooler Trace 0x800: SPOOLER_KEYWORD_CLASSIC: Classic Spooler Event 0x1000: SPOOLER_KEYWORD_ACTIVE_DIR: Active Directory 0x2000: SPOOLER_KEYWORD_ROUTER: Router 0x8000: SPOOLER_KEYWORD_CSR: Client Side Rendering (CSR) 0x10000: SPOOLER_KEYWORD_PIPELINE: Print Filter Pipeline 0x20000: SPOOLER_KEYWORD: Print Spooler 0x40000: SPOOLER_KEYWORD_PRINT_DRIVER_SANDBOX: Print Driver Sandbox 0x80000: XPS_PRINT_API_KEYWORD: XPS Print API 0x100000: XPS_PRINT_API_KEYWORD_PERFORMANCE: XPS Print API performance 0x200000: SPOOLER_KEYWORD_BRANCH_OFFICE_PRINTING: Branch Office Printing 0x400000: SETUP_WFS_KEYWORD: Service Windows Fax and Scan 0x800000: SPOOLER_KEYWORD_WSDMON: WS-Print Port Monitor 0x1000000000000: win:ResponseTime: Response Time 0x4000000000000: win:WDIDiag: WDI Diag 0x8000000000000000: Microsoft-Windows-PrintService/Admin: Admin 0x4000000000000000: Microsoft-Windows-PrintService/Operational: Operational 0x2000000000000000: Microsoft-Windows-PrintService/Debug: Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {74827CBB-1E0F-45A2-8523-C605866D2F22} Manifest Microsoft-Windows-WindowsUIImmersive - channel: 0x10: Microsoft-Windows-WindowsUIImmersive/Diagnostic 0x11: Microsoft-Windows-WindowsUIImmersive/Operational - keyword: 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WindowsUIImmersive/Diagnostic 0x4000000000000000: Microsoft-Windows-WindowsUIImmersive/Operational - level: 0x4: win:Informational: Information {74B4A4B1-2302-4768-AC5B-9773DD456B08} Manifest Microsoft-Windows-EaseOfAccess - channel: 0x10: Microsoft-Windows-EaseOfAccess/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: Microsoft-Windows-EaseOfAccess/Diagnostic - level: 0x4: win:Informational: Information {74B655A2-8958-410E-80E2-3457051B8DFF} Manifest Microsoft-Windows-TSF-msutb - channel: 0x10: Microsoft-Windows-TSF-msutb/Diagnostic 0x11: Microsoft-Windows-TSF-msutb/Debug - keyword: 0x10000: Status 0x20000: Perf 0x100000: Focus 0x8000000000000000: Microsoft-Windows-TSF-msutb/Diagnostic 0x4000000000000000: Microsoft-Windows-TSF-msutb/Debug - level: 0x4: win:Informational: Information {74C2135F-CC76-45C3-879A-EF3BB1EEAF86} Manifest Microsoft-Windows-ResourcePublication - channel: 0x8: System: System 0x10: Microsoft-Windows-ResourcePublication/Tracing - keyword: 0x40: core: Event originating from the fdrespub service 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-ResourcePublication/Tracing - level: 0x2: win:Error: Error 0x4: win:Informational: Information {74DCC47A-846E-4C98-9E2C-80043ED82B15} Manifest Microsoft-Windows-Speech-TTS - channel: 0x10: Microsoft-Windows-TTS/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: Microsoft-Windows-TTS/Diagnostic - level: 0x4: win:Informational: Information {75051C9D-2833-4A29-8923-046DB7A432CA} Manifest Microsoft-Windows-DDisplay - channel: 0x10: Microsoft-Windows-DDisplay/Analytic 0x11: Microsoft-Windows-DDisplay/Logging - keyword: 0x1: Objects 0x2: Events 0x8000000000000000: Microsoft-Windows-DDisplay/Analytic 0x4000000000000000: Microsoft-Windows-DDisplay/Logging - level: 0x0: win:LogAlways: Log Always {751EF305-6C6E-4FED-B847-02EF79D26AEF} Manifest Microsoft-Antimalware-Service - level: 0x4: win:Informational: Information {7562948E-2671-4DDA-8F8F-BF945EF984A1} Manifest Microsoft-Windows-IME-KRAPI - channel: 0x10: Microsoft-Windows-IME-KRAPI/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-KRAPI/Analytic - level: 0x4: win:Informational: Information {75B0DA21-8B50-42EB-9448-EC48B1729B57} Manifest Microsoft-Windows-Dism-Api - channel: 0x10: Microsoft-Windows-Dism-Api/Analytic 0x11: Microsoft-Windows-Dism-Api/InternalAnalytic 0x12: Microsoft-Windows-Dism-Api/ExternalAnalytic - keyword: 0x1: DismApiEvent 0x2: DismApiCommandThreadEvent 0x4: DismApiCommandObjectEvent 0x8: DismApiCommandQueueEvent 0x10: DismApiSessionTableEvent 0x8000000000000000: Microsoft-Windows-Dism-Api/Analytic 0x4000000000000000: Microsoft-Windows-Dism-Api/InternalAnalytic 0x2000000000000000: Microsoft-Windows-Dism-Api/ExternalAnalytic - level: 0x4: win:Informational: Information {75EBC33E-0870-49E5-BDCE-9D7028279489} Manifest Microsoft-Windows-SetupUGC - channel: 0x10: Microsoft-Windows-SetupUGC/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-SetupUGC/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-0936-4A55-9D26-5F298F3180BF} Manifest Microsoft-Windows-Audit - channel: 0x10: Microsoft-Windows-Audit/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x2: keyDiagnostic: Diagnostic 0x8000000000000000: Microsoft-Windows-Audit/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-0CC6-49DA-8CD9-8903A5222AA0} Manifest Microsoft-Windows-CmiSetup - channel: 0x10: Microsoft-Windows-CmiSetup/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-CmiSetup/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-77B8-4BA8-9474-4F4A9DB2F5C6} Manifest Microsoft-Windows-Sysprep - channel: 0x10: Microsoft-Windows-Sysprep/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x2: keySysprep: Sysprep 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-Sysprep/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-8670-4EB6-B535-3B9D6BB222FD} Manifest Microsoft-Windows-OobeLdr - channel: 0x10: Microsoft-Windows-OobeLdr/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x2: keyDiagnostic: Diagnostic 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-OobeLdr/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-997F-49CF-B49F-ECC50184B75D} Manifest Microsoft-Windows-Setup - channel: 0x10: Microsoft-Windows-Setup/Analytic 0x11: Setup 0x8: System: System - keyword: 0x1: keyPerformance: Performance 0x2: keySysprep: Sysprep 0x400000000000: ms:Measures 0x800000000000: ms:CriticalData 0x8000000000000000: Microsoft-Windows-Setup/Analytic 0x4000000000000000: Setup 0x2000000000000000: System: System - level: 0x4: win:Informational: Information {75EBC33E-C8AE-4F93-9CA1-683A53E20CB6} Manifest Microsoft-Windows-Windeploy - channel: 0x10: Microsoft-Windows-Windeploy/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-Windeploy/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {75EBC33E-D017-4D0F-93AB-0B4F86579164} Manifest Microsoft-Windows-SetupCl - channel: 0x10: Microsoft-Windows-SetupCl/Analytic - keyword: 0x1: keyPerformance 0x2: keyDiagnostic 0x8000000000000000: Microsoft-Windows-SetupCl/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {76AB12D5-C986-4E60-9D7C-2A092B284CDD} Manifest Microsoft-Windows-Workplace Join - channel: 0x10: Microsoft-Windows-Workplace Join/Admin - keyword: 0x8000000000000000: Microsoft-Windows-Workplace Join/Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {76CFA528-B26E-B773-62D0-9588270442A6} Manifest Microsoft-Windows-PhotoAcq - channel: 0x10: Microsoft-Windows-PhotoAcq/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-PhotoAcq/Analytic - level: 0x4: win:Informational: Information {770CA594-B467-4811-B355-28F5E5706987} Manifest Microsoft-Windows-ApplicationResourceManagementSystem - channel: 0x10: Microsoft-Windows-ApplicationResourceManagementSystem/Diagnostic 0x11: Microsoft-Windows-ApplicationResourceManagementSystem/Operational - keyword: 0x8000000000000000: Microsoft-Windows-ApplicationResourceManagementSystem/Diagnostic 0x4000000000000000: Microsoft-Windows-ApplicationResourceManagementSystem/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7725B5F9-1F2E-4E21-BAEB-B2AF4690BC87} Manifest Microsoft-Windows-USB-MAUSBHOST - channel: 0x8: System: System 0x10: Microsoft-Windows-USB-MAUSBHOST-Analytic: This is the Analytic channel to which internal Analytic events from the MAUSB driver are sent. - keyword: 0x1: Default 0x2: USBError 0x4: IRP 0x8: Power 0x10: PnP 0x20: Performance 0x40: HeadersBusTrace 0x80: PartialDataBusTrace 0x100: FullDataBusTrace 0x200: StateMachine 0x400: Enumeration 0x800: VerifyDriver 0x1000: HWVerifyHost 0x2000: HWVerifyHub 0x4000: HWVerifyDevice 0x8000: Rundown 0x10000: Device 0x20000: Hub 0x40000: Compat 0x80000: MAUSBTraffic 0x400000000000: ms:Measures 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-USB-MAUSBHOST-Analytic: This is the Analytic channel to which internal Analytic events from the MAUSB driver are sent. - level: 0x2: win:Error: Error 0x4: win:Informational: Information {77549803-7BB1-418B-A98E-F2E22F35A873} Manifest Microsoft-Windows-WinMDE - channel: 0x10: Microsoft-Windows-WinMDE/MDE - keyword: 0x8000000000000000: Microsoft-Windows-WinMDE/MDE - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {777BA8FE-2498-4875-933A-3067DE883070} Manifest Microsoft-Windows-XWizards - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7839BB2A-2EA3-4ECA-A00F-B558BA678BEC} Manifest Microsoft-Windows-WWAN-MM-EVENTS - channel: 0x10: Microsoft-Windows-WWAN-MM-Events/Diagnostic: WWAN MM Diagnose Channel - keyword: 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x4000000000: ut:Configuration 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WWAN-MM-Events/Diagnostic: WWAN MM Diagnose Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {783ACA0A-790E-4D7F-8451-AA850511C6B9} Manifest Microsoft-Windows-D3D9 - channel: 0x10: Microsoft-Windows-Direct3D9/Analytic - keyword: 0x2: Events 0x8000000000000000: Microsoft-Windows-Direct3D9/Analytic - level: 0x0: win:LogAlways: Log Always {7868B0D4-1423-4681-AFDF-27913575441E} Manifest Microsoft-Windows-NetworkStatus - channel: 0x10: Microsoft-Windows-NetworkStatus/Analytic - keyword: 0x1: Aoac 0x8000000000000000: Microsoft-Windows-NetworkStatus/Analytic - level: 0x4: win:Informational: Information {7A67066E-193F-4D3A-82D3-322FEE5259DE} Manifest Microsoft-Windows-MSDTC Client - keyword: 0x80000000000000: win:EventlogClassic: Classic {7B563579-53C8-44E7-8236-0F87B9FE6594} Manifest Microsoft-Windows-Kernel-WHEA - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-WHEA/Errors 0x11: Microsoft-Windows-Kernel-WHEA/Operational - keyword: 0x800: WheaError: WHEA Error Events 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-WHEA/Errors 0x2000000000000000: Microsoft-Windows-Kernel-WHEA/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7B6BC78C-898B-4170-BBF8-1A469EA43FC5} Manifest Microsoft-Windows-HttpEvent - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System {7B702970-90BC-4584-8B20-C0799086EE5A} Manifest Microsoft-Windows-NetworkSecurity - channel: 0x10: Microsoft-Windows-NetworkSecurity/Debug - keyword: 0x8000000000000000: Microsoft-Windows-NetworkSecurity/Debug - level: 0x5: win:Verbose: Verbose {7C314E58-8246-47D1-8F7A-4049DC543E0B} Manifest Microsoft-Windows-WMPNSSUI - channel: 0x10: Microsoft-Windows-WMPNSSUI/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-WMPNSSUI/Diagnostic - level: 0x4: win:Informational: Information {7C4117B1-ED82-4F47-B2CA-29E4E25719C7} Manifest Microsoft-Windows-IME-CandidateUI - channel: 0x10: Microsoft-Windows-IME-CandidateUI/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-CandidateUI/Analytic - level: 0x4: win:Informational: Information {7D29D58A-931A-40AC-8743-48C733045548} Manifest Microsoft-Windows-SoftwareRestrictionPolicies - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {7D44233D-3055-4B9C-BA64-0D47CA40A232} Manifest Microsoft-Windows-WinHttp - channel: 0x10: Microsoft-Windows-WinHttp/Diagnostic 0x11: Microsoft-Windows-WinHTTP-NDF/Diagnostic - keyword: 0x1: Keyword.API: API 0x20: WINHTTP_KEYWORD_AUTOPROXY: Flagged on all WinHTTP events dealing with AUTOPROXY 0x100000000: Keyword.SEND: SEND 0x200000000: Keyword.RECEIVE: RECEIVE 0x400000000: Keyword.L3_CONNECT: L3_CONNECT 0x1000000000: Keyword.CLOSE: CLOSE 0x2000000000: Keyword.SECURITY: SECURITY 0x4000000000: Keyword.CONFIGURATION: CONFIGURATION 0x8000000000: Keyword.GLOBAL: GLOBAL 0x10000000000: Keyword.DROPPED: DROPPED 0x20000000000: Keyword.PII_PRESENT: PII_PRESENT 0x40000000000: Keyword.PACKET: PACKET 0x80000000000: Keyword.ADDRESS: ADDRESS 0x100000000000: Keyword.CONTEXT_EVENT: CONTEXT_EVENT 0x200000000000: Keyword.STATE_TRANSITION: STATE_TRANSITION 0x1000000000000: win:ResponseTime: Response Time 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-WinHttp/Diagnostic 0x4000000000000000: Microsoft-Windows-WinHTTP-NDF/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {7D5387B0-CBE0-11DA-A94D-0800200C9A66} Manifest Microsoft-Windows-TPM-WMI - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7D7B0C39-93F6-4100-BD96-4DDA859652C5} Manifest Microsoft-Windows-Folder Redirection - channel: 0x9: Application: Application 0x10: Microsoft-Windows-Folder Redirection/Operational: Microsoft-Windows-Folder Redirection/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-Folder Redirection/Operational: Microsoft-Windows-Folder Redirection/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7D99F6A4-1BEC-4C09-9703-3AAA8148347F} Manifest Microsoft-Windows-Dwm-Redir - channel: 0x10: Microsoft-Windows-Dwm-Redir/Diagnostic - keyword: 0x1: DwmRedir 0x8000000000000000: Microsoft-Windows-Dwm-Redir/Diagnostic - level: 0x4: win:Informational: Information {7DA4FE0E-FD42-4708-9AA5-89B77A224885} Manifest Microsoft-Windows-DfsSvc - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System {7DD42A49-5329-4832-8DFD-43D979153A88} Manifest Microsoft-Windows-Kernel-Network - channel: 0x10: Microsoft-Windows-Kernel-Network/Analytic - keyword: 0x10: KERNEL_NETWORK_KEYWORD_IPV4 0x20: KERNEL_NETWORK_KEYWORD_IPV6 0x8000000000000000: Microsoft-Windows-Kernel-Network/Analytic - level: 0x4: win:Informational: Information {7E58E69A-E361-4F06-B880-AD2F4B64C944} Manifest Microsoft-Windows-StorageManagement - channel: 0x10: Microsoft-Windows-StorageManagement/Operational 0x11: Microsoft-Windows-StorageManagement/Debug - keyword: 0x1: EnterExit 0x8000000000000000: Microsoft-Windows-StorageManagement/Operational 0x4000000000000000: Microsoft-Windows-StorageManagement/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {7E7D3382-023C-43CB-95D2-6F0CA6D70381} Manifest Microsoft-Windows-D3D10Level9 - channel: 0x10: Microsoft-Windows-D3D10Level9/Analytic 0x11: Microsoft-Windows-D3D10Level9/PerfTiming - keyword: 0x1: Resources 0x2: Devices 0x8000000000000000: Microsoft-Windows-D3D10Level9/Analytic 0x4000000000000000: Microsoft-Windows-D3D10Level9/PerfTiming - level: 0x0: win:LogAlways: Log Always {7E87506F-BACE-4BF1-BC09-3A1F37045C71} Manifest Microsoft-Windows-DAL-Provider - channel: 0x10: Microsoft-Windows-DAL-Provider/Operational 0x11: Microsoft-Windows-DAL-Provider/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-DAL-Provider/Operational 0x4000000000000000: Microsoft-Windows-DAL-Provider/Analytic - level: 0x4: win:Informational: Information {7EAFCF79-06A7-460B-8A55-BD0A0C9248AA} Manifest Microsoft-Windows-BranchCache - channel: 0x10: Microsoft-Windows-BranchCache/Operational: Microsoft-Windows-BranchCache/Operational - keyword: 0x8000000000000000: Microsoft-Windows-BranchCache/Operational: Microsoft-Windows-BranchCache/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {7EB5F4CF-A4F6-4E92-AA8F-A8E7EF937745} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport - channel: 0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug - keyword: 0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug - level: 0x4: win:Informational: Information {7F2BD991-AE93-454A-B219-0BC23F02262A} Manifest Microsoft-Windows-MP4SDECD - channel: 0x10: WINDOWS_MP4SDECD_CHANNEL - keyword: 0x8000000000000000: WINDOWS_MP4SDECD_CHANNEL - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {7F812073-B28D-4AFC-9CED-B8010F914EF6} Manifest Microsoft-Windows-PrintService-USBMon - channel: 0x10: Microsoft-Windows-PrintService-USBMon/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-PrintService-USBMon/Debug: Debug - level: 0x4: win:Informational: Information {7F8E35CA-68E8-41B9-86FE-D6ADC5B327E7} Manifest Microsoft-IE-JSDumpHeap - channel: 0x10: Microsoft-JSDumpHeap/Diagnostic - keyword: 0x20: jsdumpheap 0x80000000: jsdumpheapEnvelopeOnly 0x8000000000000000: Microsoft-JSDumpHeap/Diagnostic {7F912B92-21AD-496E-B97A-88622A72BC42} Manifest Microsoft-Windows-ComDlg32 - channel: 0x10: Microsoft-Windows-ComDlg32/Debug: Debug 0x11: Microsoft-Windows-ComDlg32/Analytic: Analytical - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-ComDlg32/Debug: Debug 0x4000000000000000: Microsoft-Windows-ComDlg32/Analytic: Analytical - level: 0x4: win:Informational: Information {7F9D83DE-8ABB-457F-98E8-4AD161449ECC} Manifest Microsoft-Windows-PerfDisk - keyword: 0x80000000000000: win:EventlogClassic: Classic {7FA514B5-A023-4B62-A6AB-2946A483E065} Manifest Microsoft-Windows-ResetEng-Trace - channel: 0x10: Microsoft-Windows-ResetEng-Trace/Diagnostic - keyword: 0x100000: ResetEngTrace 0x8000000000000000: Microsoft-Windows-ResetEng-Trace/Diagnostic - level: 0x4: win:Informational: Information {7FCB9791-F481-46D1-846E-2EB6F003C4D3} Manifest Microsoft-Windows-MCCS-SyncController - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: State: State 0x1000000000: CommsService: CommsService 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {802EC45A-1E99-4B83-9920-87C98277BA9D} Manifest Microsoft-Windows-DxgKrnl - channel: 0x10: Microsoft-Windows-DxgKrnl/Diagnostic 0x11: Microsoft-Windows-DxgKrnl/Performance 0x12: Microsoft-Windows-DxgKrnl/Power 0x13: Microsoft-Windows-DxgKrnl/Contention - keyword: 0x1: Base 0x2: Profiler 0x4: References 0x8: ForceVsync 0x10: Patch 0x20: Cdd 0x40: Resource 0x80: Memory 0x100: Dxgkrnl_StatusChangeNotify 0x200: DxgKrnl_Power 0x400: DriverEvents 0x800: LongHaul 0x1000: StablePower 0x2000: DefaultOverride 0x4000: HistoryBuffer 0x8000: GPUScheduler 0x10000: DxgKrnl 0x20000: DxgKrnl_WDI 0x40000: Miracast 0x80000: IndirectSwapChain 0x100000: GPUVA 0x200000: VidMmWorkerThread 0x400000: Diagnostics 0x800000: VirtualGpu 0x1000000: AdapterLock 0x2000000: MixedReality 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DxgKrnl/Diagnostic 0x4000000000000000: Microsoft-Windows-DxgKrnl/Performance 0x2000000000000000: Microsoft-Windows-DxgKrnl/Power 0x1000000000000000: Microsoft-Windows-DxgKrnl/Contention - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information {8127F6D4-59F9-4ABF-8952-3E3A02073D5F} Manifest Microsoft-Windows-AppXDeployment - channel: 0x10: Microsoft-Windows-AppXDeployment/Diagnostic 0x11: Microsoft-Windows-AppXDeployment/Operational - keyword: 0x1: APPXDEPLOYMENT_KEYWORD: AppXDeployment 0x2: APPMODEL_RUNTIME_DMR_KEYWORD: DMR 0x10000: AppXDeployment 0x20000: DMR 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-AppXDeployment/Diagnostic 0x4000000000000000: Microsoft-Windows-AppXDeployment/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {814182FE-58F7-11E1-853C-78E7D1CA7337} Manifest Microsoft-Windows-WiFiHotspotService - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: APIs: APIs 0x8: Status: Status 0x10: Verbose: Verbose 0x4000: MyKeyword: MyKeyword 0x8000: Memory: Memory - level: 0x4: win:Informational: Information {815A1F4A-3F8D-4B37-9B31-5142F9D724A5} Manifest Microsoft-Windows-PushNotifications-InProc - channel: 0x10: Microsoft-Windows-PushNotification-InProc/Debug: Microsoft-Windows-PushNotifications-InProc/Debug - keyword: 0x8000000000000000: Microsoft-Windows-PushNotification-InProc/Debug: Microsoft-Windows-PushNotifications-InProc/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {820A42D8-38C4-465D-B64E-D7D56EA1D612} Manifest Microsoft-Windows-UIAutomationCore - channel: 0x10: Microsoft-Windows-UIAutomationCore/Diagnostic 0x11: Microsoft-Windows-UIAutomationCore/Perf 0x12: Microsoft-Windows-UIAutomationCore/Debug - keyword: 0x10000: PerfInstrumentation 0x8000000000000000: Microsoft-Windows-UIAutomationCore/Diagnostic 0x4000000000000000: Microsoft-Windows-UIAutomationCore/Perf 0x2000000000000000: Microsoft-Windows-UIAutomationCore/Debug - level: 0x4: win:Informational: Information {835B79E2-E76A-44C4-9885-26AD122D3B4D} Manifest Microsoft-Windows-Narrator - channel: 0x10: Microsoft-Windows-Narrator/Diagnostic - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x8000000000000000: Microsoft-Windows-Narrator/Diagnostic - level: 0x4: win:Informational: Information {8360BD0F-A7DC-4391-91A7-A457C5C381E4} Manifest Microsoft-Windows-DUI - channel: 0x10: Microsoft-Windows-DUI/Diagnostic - keyword: 0x1: Default 0x8000000000000000: Microsoft-Windows-DUI/Diagnostic - level: 0x4: win:Informational: Information {83A9277A-D2FC-4B34-BF81-8CEB4407824F} Manifest Microsoft-Windows-UserDataAccess-CEMAPI - keyword: 0x1: Error 0x2: Performance 0x4: CEMAPI 0x100: debug: Debug 0x4000000000: Warning: Warning - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {83D6E83B-900B-48A3-9835-57656B6F6474} Manifest Microsoft-Windows-SettingSync - channel: 0x10: Microsoft-Windows-SettingSync/Operational: Microsoft-Windows-SettingSync/Operational 0x11: Microsoft-Windows-SettingSync/Debug: Microsoft-Windows-SettingSync/Debug 0x12: Microsoft-Windows-SettingSync/Analytic: Microsoft-Windows-SettingSync/Analytic 0x13: Microsoft-Windows-SettingSync/VerboseDebug: Microsoft-Windows-SettingSync/VerboseDebug - keyword: 0x1: RoamingSettings 0x2: AppSync 0x4: OutOfQuotaDialog 0x8: CatastrophicRestoreFailureDialog 0x20: BackupTask 0x40: BootstrapRestore 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-SettingSync/Operational: Microsoft-Windows-SettingSync/Operational 0x4000000000000000: Microsoft-Windows-SettingSync/Debug: Microsoft-Windows-SettingSync/Debug 0x2000000000000000: Microsoft-Windows-SettingSync/Analytic: Microsoft-Windows-SettingSync/Analytic 0x1000000000000000: Microsoft-Windows-SettingSync/VerboseDebug: Microsoft-Windows-SettingSync/VerboseDebug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {83ED54F0-4D48-4E45-B16E-726FFD1FA4AF} Manifest Microsoft-Windows-Networking-Correlation - channel: 0x10: Microsoft-Windows-Networking-Correlation/Diagnostic: Microsoft-Windows-Networking-Correlation/Diagnostic - keyword: 0x1: ActivityTransfer 0x2: ActivityStart 0x4: ActivityStop 0x8: ActivityPayloadIncluded 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x400000000000: ut:Diagnostic 0x8000000000000000: Microsoft-Windows-Networking-Correlation/Diagnostic: Microsoft-Windows-Networking-Correlation/Diagnostic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {83FAAA86-63C8-4DD8-A2DA-FBADDDFC0655} Manifest Microsoft-Windows-RTWorkQueue-Extended - channel: 0x10: RTWorkQueueExtended: RTWorkQueue Extended - keyword: 0x8000000000000000: RTWorkQueueExtended: RTWorkQueue Extended - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {8429E243-345B-47C1-8A91-2C94CAF0DAAB} Manifest Microsoft-Windows-DUSER - channel: 0x10: Microsoft-Windows-DUSER/Diagnostic - keyword: 0x1: Default 0x2: DUserSurface 0x8000000000000000: Microsoft-Windows-DUSER/Diagnostic - level: 0x4: win:Informational: Information {8443CCB7-FEB0-4B8D-8E28-8D4C7CB814E8} Manifest Microsoft-Windows-TabletPC-MathInput - level: 0x4: win:Informational: Information {84958368-7DA7-49A0-B33D-07FABB879626} Manifest Microsoft-Windows-OLE-Perf - channel: 0x10: Microsoft-Windows-OLE/Clipboard-Performance - keyword: 0x8000000000000000: Microsoft-Windows-OLE/Clipboard-Performance - level: 0x4: win:Informational: Information {8530DB6E-51C0-43D6-9D02-A8C2088526CD} Manifest Microsoft-Windows-AssignedAccess - channel: 0x10: Microsoft-Windows-AssignedAccess/Operational 0x11: Microsoft-Windows-AssignedAccess/Admin - keyword: 0x8000000000000000: Microsoft-Windows-AssignedAccess/Operational 0x4000000000000000: Microsoft-Windows-AssignedAccess/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {85A62A0D-7E17-485F-9D4F-749A287193A6} Manifest Microsoft-Windows-Audit-CVE - channel: 0x9: Application: Application 0x8: System: System - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: System: System - level: 0x3: win:Warning: Warning {85BE49EA-38F1-4547-A604-80060202FB27} Manifest Microsoft-Windows-PerceptionSensorDataService - channel: 0x10: Microsoft-Windows-PerceptionSensorDataService/Operational - keyword: 0x8000000000000000: Microsoft-Windows-PerceptionSensorDataService/Operational {85C070E6-F9AE-481F-AACB-BC550BFD35A1} Manifest Microsoft-Windows-NFC-ClassExtension - channel: 0x10: Microsoft-Windows-NFC-Class-Extension/Analytical: Analytical - keyword: 0x1: Payload: Payload logging of different types of packets. 0x2: NCI: NCI packet events. 0x4: NFP: NFP interface events. 0x8: Power: Power interface events. 0x10: RF: RF interface events. 0x20: Device: General device events. 0x8000000000000000: Microsoft-Windows-NFC-Class-Extension/Analytical: Analytical - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {85FE7609-FF4A-48E9-9D50-12918E43E1DA} Manifest Microsoft-Windows-L2NACP - channel: 0x10: Microsoft-Windows-WLAN-AutoConfig/Operational 0x11: Microsoft-Windows-Wired-AutoConfig/Operational 0x12: Microsoft-Windows-L2NA/Diagnostic: Microsoft-Windows-L2NACP/Diagnostic - keyword: 0x1: Credential 0x2: Filter 0x2000000000: ut:Authentication 0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational 0x4000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational 0x2000000000000000: Microsoft-Windows-L2NA/Diagnostic: Microsoft-Windows-L2NACP/Diagnostic - level: 0x4: win:Informational: Information {86133982-63D7-4741-928E-EF1349B80219} Manifest Microsoft-Windows-stobject - channel: 0x10: Microsoft-Windows-stobject/Diagnostic - keyword: 0x10000: BatteryMeter 0x100000: Slideshow 0x200000: SSO 0x400000: BatteryCriticalSystemNotification 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-stobject/Diagnostic - level: 0x4: win:Informational: Information {869FB599-80AA-485D-BCA7-DB18D72B7219} Manifest Microsoft-Windows-ThemeUI - channel: 0x10: Microsoft-Windows-ThemeUI/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-ThemeUI/Diagnostic - level: 0x4: win:Informational: Information {86EFFF39-2BDD-4EFD-BD0B-853D71B2A9DC} Manifest Microsoft-Windows-MPEG2_DLNA-Encoder - channel: 0x10: muxencode - keyword: 0x8000000000000000: muxencode - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {8736922D-E8B2-47EB-8564-23E77E728CF3} Manifest Microsoft-Office-Events - channel: 0x10: OfficeChannel 0x11: OfficeDebugChannel - keyword: 0x1: CallStack: CallStack keyword 0x2: Budget: Budget keyword 0x4: CodeMarker: CodeMarker keyword 0x8: Sqm: Sqm keyword 0x10: PCX: PCX Keyword 0x20: PerfWatson: PerfWatson Keyword 0x40: Idle: idle 0x80: SecureReader: SecureReader Keyword 0x100: Synchronization: Synchronization Keyword 0x200: Met: Met Keyword 0x400: MSOLogging: MSO Logging Keyword 0x8000000000000000: OfficeChannel 0x4000000000000000: OfficeDebugChannel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: levelPlaceholder: Placeholder level {87D476FE-1A0F-4370-B785-60B028019693} Manifest Microsoft-Windows-UIRibbon - channel: 0x10: Microsoft-Windows-UIRibbon/Diagnostic - keyword: 0x1: Default 0x8000000000000000: Microsoft-Windows-UIRibbon/Diagnostic - level: 0x4: win:Informational: Information {88C09888-118D-48FC-8863-E1C6D39CA4DF} Manifest Microsoft-Windows-StorageManagement-WSP-Spaces - channel: 0x10: Microsoft-Windows-StorageManagement/Operational - keyword: 0x8000000000000000: Microsoft-Windows-StorageManagement/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {88CD9180-4491-4640-B571-E3BEE2527943} Manifest Microsoft-Windows-PushNotifications-Platform - channel: 0x10: Microsoft-Windows-PushNotification-Platform/Operational: Microsoft-Windows-PushNotifications-Platform/Operational 0x11: Microsoft-Windows-PushNotification-Platform/Debug: Microsoft-Windows-PushNotifications-Platform/Debug 0x12: Microsoft-Windows-PushNotification-Platform/Admin: Microsoft-Windows-PushNotifications-Platform/Admin - keyword: 0x1: wpndebug_cloudtoast_isolate: Developer Debug: Isolate Failures in Cloud Toast Notification Delivery 0x2: wpndebug_localtoast_isolate: Developer Debug: Isolate Failures in Local Toast Notification Delivery 0x4: wpndebug_raw_dropped: Developer Debug: Debugging Raw Notification Delivery Errors 0x8: wpndebug_raw_isolate: Developer Debug: Isolate Failures in Raw Notification Delivery 0x100: wpnconn: Connection Manager 0x200: wpnend: Endpoint Manager 0x400: wpntp: Threadpool 0x800: wpnui: Presentation Layer API 0x1000: wpnplat: Platform 0x2000: wpndbg: Debug 0x4000: wpnprv: Connection Provider 0x8000: wpnperf_FirstCloudNotification: Performance Scenario: First cloud notification 0x10000: wpnperf_FirstCloudNotificationWithCloudImage: Performance Scenario: First cloud notification with cloud image download 0x20000: wpnperf_NewCloudNotificationArrival: Performance Scenario: New cloud notification arrives 0x40000: wpnperf_NewCloudNotificationArrivalWithCloudImage: Performance Scenario: New cloud notification refering cloud images arrives 0x80000: wpnperf_MoGoPanning: Performance Scenario: MoGo is panning 0x100000: wpnperf_MoGoPanningWithCloudImage: Performance Scenario: MoGo is panning with downloading cloud images 0x200000: wpnperf_Shutdown: Performance Scenario: The Windows Push Notification shutdown 0x400000: wnptrans: WNP Transport Layer 0x800000: wpntroubleshoot: WNP Transport Layer 0x1000000: wpndebug_cloudtile_isolate: Developer Debug: Isolate Failures in Cloud Tile Notification Delivery 0x2000000: wpndebug_connectivity: Developer Debug: Debugging Cloud Connectivity 0x4000000: wpndebug_connectivity_isConnected: Developer Debug: Debugging Cloud Connectivity - Is device connected? 0x8000000: wpndebug_connectivity_error: Developer Debug: Debugging Cloud Connectivity - errors 0x10000000: wpndebug_platform_setting: Developer Debug: Debugging Platform Setting Changes 0x20000000: wpndebug_localtile_isolate: Developer Debug: Isolate Failures in Local Tile Notification Delivery 0x40000000: wpndebug_polling_error: Developer Debug: Debugging Polling Notification Delivery Errors 0x80000000: wpndev_NotificationE2E: Developer Support: End-to-End trace for new notification 0x200000000000: ms:Telemetry 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-PushNotification-Platform/Operational: Microsoft-Windows-PushNotifications-Platform/Operational 0x4000000000000000: Microsoft-Windows-PushNotification-Platform/Debug: Microsoft-Windows-PushNotifications-Platform/Debug 0x2000000000000000: Microsoft-Windows-PushNotification-Platform/Admin: Microsoft-Windows-PushNotifications-Platform/Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {89203471-D554-47D4-BDE4-7552EC219999} Manifest Microsoft-Windows-KdsSvc - channel: 0x10: Microsoft-Windows-KdsSvc/Operational: Microsoft-Windows-KdsSvc/Operational - keyword: 0x8000000000000000: Microsoft-Windows-KdsSvc/Operational: Microsoft-Windows-KdsSvc/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {8939299F-2315-4C5C-9B91-ABB86AA0627D} Manifest Microsoft-Windows-KnownFolders - channel: 0x10: Microsoft-Windows-Known Folders API Service: Microsoft-Windows-Known Folders/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Known Folders API Service: Microsoft-Windows-Known Folders/Operational - level: 0x3: win:Warning: Warning {89592015-D996-4636-8F61-066B5D4DD739} Manifest Microsoft-Windows-StateRepository - channel: 0x10: Microsoft-Windows-StateRepository/Diagnostic: Microsoft-Windows-StateRepository/Diagnostic 0x11: Microsoft-Windows-StateRepository/Operational: Microsoft-Windows-StateRepository/Operational 0x12: Microsoft-Windows-StateRepository/Debug: Microsoft-Windows-StateRepository/Debug 0x13: Microsoft-Windows-StateRepository/Restricted: Microsoft-Windows-StateRepository/Restricted - keyword: 0x1: STATEREPOSITORY_KEYWORD: StateRepository Keyword 0x2: STATEREPOSITORY_PERF_KEYWORD: StateRepositoryPerf Keyword 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-StateRepository/Diagnostic: Microsoft-Windows-StateRepository/Diagnostic 0x4000000000000000: Microsoft-Windows-StateRepository/Operational: Microsoft-Windows-StateRepository/Operational 0x2000000000000000: Microsoft-Windows-StateRepository/Debug: Microsoft-Windows-StateRepository/Debug 0x1000000000000000: Microsoft-Windows-StateRepository/Restricted: Microsoft-Windows-StateRepository/Restricted - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {899DAACE-4868-4295-AFCD-9EB8FB497561} Manifest Microsoft-Windows-EventSystem - keyword: 0x80000000000000: win:EventlogClassic: Classic {89A2278B-C662-4AFF-A06C-46AD3F220BCA} Manifest Microsoft-Windows-CertificateServicesClient-CredentialRoaming - channel: 0x9: Application: Application 0x10: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845} Manifest Microsoft-Windows-User Profiles Service - channel: 0x9: Application: Application 0x10: Microsoft-Windows-User Profile Service/Operational: Microsoft-Windows-User Profile Service/Operational 0x11: Microsoft-Windows-User Profile Service/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-User Profile Service/Operational: Microsoft-Windows-User Profile Service/Operational 0x2000000000000000: Microsoft-Windows-User Profile Service/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {89FE8F40-CDCE-464E-8217-15EF97D4C7C3} Manifest Microsoft-Windows-Crypto-DPAPI - channel: 0x10: Microsoft-Windows-Crypto-DPAPI/Operational: Microsoft-Windows-Crypto-DPAPI/Operational 0x11: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc 0x12: Microsoft-Windows-Crypto-DPAPI/Debug: Microsoft-Windows-Crypto-DPAPI/Debug - keyword: 0x1: ETW_TASK_BACKUPSERVICE_OPERATION: BackUp Service Operation 0x2: ETW_TASK_MASTERKEY_OPERATION: Master Key Operation 0x4: ETW_TASK_DATAPROTECTION_OPERATION: Data Protection Operation 0x8000000000000000: Microsoft-Windows-Crypto-DPAPI/Operational: Microsoft-Windows-Crypto-DPAPI/Operational 0x4000000000000000: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc 0x2000000000000000: Microsoft-Windows-Crypto-DPAPI/Debug: Microsoft-Windows-Crypto-DPAPI/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {8A1F9517-3A8C-4A9E-A018-4F17A200F277} Manifest Microsoft-Windows-BTH-BTHPORT - channel: 0x10: Microsoft-Windows-BTH-HCI/HCIRAW 0x11: Microsoft-Windows-BTH-BTHPORT/HCI 0x12: Microsoft-Windows-BTH-BTHPORT/L2CAP - keyword: 0x1: Performance 0x8000000000000000: Microsoft-Windows-BTH-HCI/HCIRAW 0x4000000000000000: Microsoft-Windows-BTH-BTHPORT/HCI 0x2000000000000000: Microsoft-Windows-BTH-BTHPORT/L2CAP - level: 0x4: win:Informational: Information {8A93B54B-C75A-49B5-A5BE-9060715B1A33} Manifest Microsoft-Windows-DirectSound - channel: 0x10: Microsoft-Windows-DirectSound/Debug - keyword: 0x8000000000000000: Microsoft-Windows-DirectSound/Debug - level: 0x4: win:Informational: Information {8BCDF442-3070-4118-8C94-E8843BE363B3} Manifest Microsoft-Windows-SystemSettingsThreshold {8C416C79-D49B-4F01-A467-E56D3AA8234C} Manifest Microsoft-Windows-Win32k - channel: 0x10: Microsoft-Windows-Win32k/Tracing 0x11: Microsoft-Windows-Win32k/UIPI 0x12: Microsoft-Windows-Win32k/Power 0x13: Microsoft-Windows-Win32k/Concurrency 0x14: Microsoft-Windows-Win32k/Render 0x15: Microsoft-Windows-Win32k/Messages 0x16: Microsoft-Windows-Win32k/Contention 0x17: Microsoft-Windows-Win32k/Operational - keyword: 0x400: AuditApiCalls 0x800: CompatImpact 0x1000: Updates 0x2000: Focus 0x4000: UIPI 0x8000: win32Power 0x10000: Concurrency 0x20000: UserActivity 0x40000: UIUnresponsiveness 0x80000: ThreadRundown 0x100000: Rendering 0x200000: ThreadInfo 0x400000: MessagePump 0x800000: MessagePumpInternalAndInput 0x1000000: TouchInput 0x2000000: TimerSurvey 0x4000000: PointerInput 0x8000000: AutoRotation 0x10000000: Contention 0x20000000: TimerInfo 0x40000000: ComponentHosting 0x80000000: TrappedACRendering 0x100000000: Fonts 0x200000000: NullMessages 0x400000000: Visualization 0x800000000: DCompDetails 0x1000000000: PrecisionTouchpad 0x2000000000: ContentionTelemetry 0x4000000000: ProcessInfo 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Win32k/Tracing 0x4000000000000000: Microsoft-Windows-Win32k/UIPI 0x2000000000000000: Microsoft-Windows-Win32k/Power 0x1000000000000000: Microsoft-Windows-Win32k/Concurrency 0x800000000000000: Microsoft-Windows-Win32k/Render 0x400000000000000: Microsoft-Windows-Win32k/Messages 0x200000000000000: Microsoft-Windows-Win32k/Contention 0x100000000000000: Microsoft-Windows-Win32k/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {8C63B5A5-B484-4381-892D-EDD424582DF7} Manifest Microsoft-Windows-PortableDeviceStatusProvider - channel: 0x10: Microsoft-Windows-PortableDeviceStatusProvider/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-PortableDeviceStatusProvider/Analytic - level: 0x4: win:Informational: Information {8C8A69AD-CC89-481F-BBAD-FD95B5006256} Manifest Microsoft-Windows-IME-JPTIP - channel: 0x10: Microsoft-Windows-IME-JPTIP/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IME-JPTIP/Analytic - level: 0x4: win:Informational: Information {8CE93926-BDAE-4409-9155-2FE4799EF4D3} Manifest Microsoft-Windows-PrimaryNetworkIcon - channel: 0x10: Microsoft-Windows-PrimaryNetworkIcon/Performance 0x11: Microsoft-Windows-NetworkLocationWizard/Operational: Microsoft-Windows-NetworkLocationWizard/Operational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-PrimaryNetworkIcon/Performance 0x4000000000000000: Microsoft-Windows-NetworkLocationWizard/Operational: Microsoft-Windows-NetworkLocationWizard/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {8E6A5303-A4CE-498F-AFDB-E03A8A82B077} Manifest Microsoft-Windows-Ntfs-UBPM - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {8E92DEEF-5E17-413B-B927-59B2F06A3CFC} Manifest Microsoft-Antimalware-RTP - level: 0x4: win:Informational: Information {8F0DB3A8-299B-4D64-A4ED-907B409D4584} Manifest Microsoft-Windows-Runtime-Media - channel: 0x10: Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine 0x11: Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode 0x12: Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource 0x13: Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource - keyword: 0x100000000000: WinRTAdaptiveMediaSource 0x200000000000: WinRTMediaStreamSource 0x400000000000: WinRTTranscode 0x800000000000: WinRTCaptureEngine 0x8000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine 0x4000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode 0x2000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource 0x1000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource - level: 0x2: win:Error: Error 0x4: win:Informational: Information {8F2048E0-F260-4F57-A8D1-932376291682} Manifest Microsoft-Windows-MediaEngine - channel: 0x10: MediaFoundationMediaEngine: Media Foundation MediaEngine - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: MediaFoundationMediaEngine: Media Foundation MediaEngine - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {901D2AFA-4FF6-46D7-8D0E-53645E1A47F5} Manifest Microsoft-Windows-Heap-Snapshot {906B8A99-63CE-58D7-86AB-10989BBD5567} Manifest Microsoft-Windows-HelloForBusiness - channel: 0x10: Microsoft-Windows-HelloForBusiness/Operational - keyword: 0x1: Internal 0x2: Component 0x8000000000000000: Microsoft-Windows-HelloForBusiness/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x10: Success: Success {911F2490-C3DB-4781-94E6-7A9C404803E5} Manifest Microsoft-Antimalware-UI - level: 0x4: win:Informational: Information {914ED502-B70D-4ADD-B758-95692854F8A3} Manifest Microsoft-Windows-QoS-Pacer - channel: 0x10: Microsoft-Windows-QoS-Pacer/Diagnostic - keyword: 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-QoS-Pacer/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {91CC1150-71AA-47E2-AE18-C96E61736B6F} Manifest Microsoft-Windows-Schannel-Events - channel: 0x10: Microsoft-Windows-Schannel-Events/Perf - keyword: 0x8000000000000000: Microsoft-Windows-Schannel-Events/Perf - level: 0x4: win:Informational: Information {91F42016-0B4E-4A4B-9BBB-825D06CBED35} Manifest Microsoft-Windows-MobilityCenter - channel: 0x10: Microsoft-Windows-MobilityCenter/Performance - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-MobilityCenter/Performance - level: 0x4: win:Informational: Information {91F5FB12-FDEA-4095-85D5-614B495CD9DE} Manifest Microsoft-Windows-Resource-Exhaustion-Resolver - channel: 0x10: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational - keyword: 0x1000: RDR_RES_KEYWORD_LIFECYCLE: Lifecycle 0x2000: RDR_RES_KEYWORD_MEMORY_EXHAUSTION: System Commit Limit (Virtual Memory) Exhaustion 0x4000: RDR_RES_KEYWORD_LEAK_DIAGNOSIS: Memory leak diagnosis 0x8000000000000000: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {92061E3D-21CD-45BC-A3DF-0E8AE5E8580A} Manifest Microsoft-Windows-RadioManager - channel: 0x10: Microsoft-Windows-RadioManager/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-RadioManager/Analytic - level: 0x4: win:Informational: Information {9213C3E1-0D6C-52DD-78EA-F3B082111406} Manifest Microsoft-Windows-PriResources-Deployment {922CDCF3-6123-42DA-A877-1A24F23E39C5} Manifest Microsoft-WindowsPhone-CoreMessaging - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x200000: CoreUIService: CoreMessaging CoreUIService 0x100000000: MessagingPerformance: CoreMessaging MessagingPerformance 0x200000000: Session: CoreMessaging Session 0x400000000: Dispatcher: CoreMessaging Dispatcher 0x800000000: RegistrarClient: CoreMessaging RegistrarClient 0x1000000000: Messaging: CoreMessaging Messaging 0x2000000000: Formatting: CoreMessaging Formatting 0x40000000000: SelfHostInfo: CoreMessaging SelfHostInfo 0x80000000000: SelfHostError: CoreMessaging SelfHostError - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {9249D0D0-F034-402F-A29B-92FA8853D9F3} Manifest Microsoft-Windows-Security-ExchangeActiveSyncProvisioning - channel: 0x10: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance 0x11: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance 0x4000000000000000: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational: Operational - level: 0x1: win:Critical: Critical 0x4: win:Informational: Information {92765247-03A9-4AE3-A575-B42264616E78} Manifest Microsoft-Windows-Base-Filtering-Engine-Resource-Flows - channel: 0x10: Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational: BFE IPsec Connections' Resource Flows Operational Log - keyword: 0x20000000000: ut:PiiPresent 0x8000000000000000: Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational: BFE IPsec Connections' Resource Flows Operational Log - level: 0x4: win:Informational: Information {92AAB24D-D9A9-4A60-9F94-201FED3E3E88} Manifest Microsoft-Windows-EndpointTriggerProvider - level: 0x4: win:Informational: Information {92AB58D3-F351-4AF5-9C72-D52F36EE2C92} Manifest Microsoft-Windows-WPD-MTPBT - channel: 0x10: Microsoft-Windows-WPD-MTPBT/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-MTPBT/Analytic: Analytic - level: 0x4: win:Informational: Information {9363CCD9-D429-4452-9ADB-2501E704B810} Manifest Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider - channel: 0x10: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational 0x11: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug - keyword: 0x100: search: Search 0x200: cancel: Cancel 0x400: errors: Errors 0x800: object: Object 0x8000000000000000: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational 0x4000000000000000: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {93A19AB3-FB2C-46EB-91EF-56B0A318B983} Manifest Microsoft-Windows-NetworkProvisioning - channel: 0x10: Microsoft-Windows-NetworkProvisioning/Analytic: Microsoft-Windows-NetworkProvisioning/Analytic 0x11: Microsoft-Windows-NetworkProvisioning/Operational: Microsoft-Windows-NetworkProvisioning/Operational - keyword: 0x1: XmlValidation 0x2: XmlProcessing 0x4: Purge 0x8: Diagnostics 0x10: Service 0x20: Profile 0x40: Metadata 0x80: ActivationTask 0x100: ProvisioningAgent 0x200: Notifications 0x400: PurgeTask 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NetworkProvisioning/Analytic: Microsoft-Windows-NetworkProvisioning/Analytic 0x4000000000000000: Microsoft-Windows-NetworkProvisioning/Operational: Microsoft-Windows-NetworkProvisioning/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {93C05D69-51A3-485E-877F-1806A8731346} Manifest Microsoft-Windows-LUA - channel: 0x10: Microsoft-Windows-LUA-ConsentUI/Diagnostic: Microsoft-Windows-LUA-ConsentUI/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-LUA-ConsentUI/Diagnostic: Microsoft-Windows-LUA-ConsentUI/Diagnostic - level: 0x4: win:Informational: Information {945A8954-C147-4ACD-923F-40C45405A658} Manifest Microsoft-Windows-WindowsUpdateClient - channel: 0x8: System: System 0x10: Microsoft-Windows-WindowsUpdateClient/Operational 0x11: Microsoft-Windows-WindowsUpdateClient/Analytic - keyword: 0x1: connection: Connection 0x2: detect: Check for Updates 0x4: download: Download 0x8: install: Installation 0x10: success: Success 0x20: failure: Failure 0x40: reboot: Reboot 0x80: state: State 0x100: selfupdate: SelfUpdate 0x200: service: Service 0x400: health: Health 0x800: Performance: Performance 0x1000: sleepstudy 0x2000: started: Started 0x4000: Revert: Revert 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-WindowsUpdateClient/Operational 0x2000000000000000: Microsoft-Windows-WindowsUpdateClient/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {9485FA1E-23CD-49A1-84E3-11D8BC550CB7} Manifest Microsoft-Windows-propsys - keyword: 0x80000000000000: win:EventlogClassic: Classic {951B41EA-C830-44DC-A671-E2C9958809B8} Manifest Microsoft-Windows-Kernel-Interrupt-Steering - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic - keyword: 0x1: IntSteer 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic - level: 0x4: win:Informational: Information {952773BF-C2B7-49BC-88F4-920744B82C43} Manifest Microsoft-Windows-TerminalServices-Printers - channel: 0x10: Microsoft-Windows-TerminalServices-Printers/Admin: Admin 0x11: Microsoft-Windows-TerminalServices-Printers/Analytic: Analytic 0x12: Microsoft-Windows-TerminalServices-Printers/Operational: Operational 0x13: Microsoft-Windows-TerminalServices-Printers/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-Printers/Admin: Admin 0x4000000000000000: Microsoft-Windows-TerminalServices-Printers/Analytic: Analytic 0x2000000000000000: Microsoft-Windows-TerminalServices-Printers/Operational: Operational 0x1000000000000000: Microsoft-Windows-TerminalServices-Printers/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {95353826-4FBE-41D4-9C42-F521C6E86360} Manifest Microsoft-Windows-OfflineFiles - channel: 0x8: System: System 0x10: Microsoft-Windows-OfflineFiles/Operational: Microsoft-Windows-OfflineFiles/Operational 0x11: Microsoft-Windows-OfflineFiles/Analytic: Microsoft-Windows-OfflineFiles/Analytic 0x12: Microsoft-Windows-OfflineFiles/Debug: Microsoft-Windows-OfflineFiles/Debug 0x13: Microsoft-Windows-OfflineFiles/SyncLog: Microsoft-Windows-OfflineFiles/SyncLog - keyword: 0x1: CscEvtKeywd_Agent: Background agent 0x2: CscEvtKeywd_Transition: Online/offline transitions 0x4: CscEvtKeywd_ItemStateChange: Cached item state changes 0x8: CscEvtKeywd_UserSessionChange: User logon/logoff 0x10: CscEvtKeywd_StartupShutdown: Service startup/shutdown 0x20: CscEvtKeywd_Setting: Settings activity 0x40: CscEvtKeywd_Sync: Cache item sync 0x80: CscEvtKeywd_SyncConflict: Cache item sync conflicts 0x100: CscEvtKeywd_Encrypt: Encryption/unencryption of cache 0x200: CscEvtKeywd_BGSync: Background sync 0x400: CscEvtKeywd_ExcludedFileType: Blocked excluded file extensions 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-OfflineFiles/Operational: Microsoft-Windows-OfflineFiles/Operational 0x2000000000000000: Microsoft-Windows-OfflineFiles/Analytic: Microsoft-Windows-OfflineFiles/Analytic 0x1000000000000000: Microsoft-Windows-OfflineFiles/Debug: Microsoft-Windows-OfflineFiles/Debug 0x800000000000000: Microsoft-Windows-OfflineFiles/SyncLog: Microsoft-Windows-OfflineFiles/SyncLog - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {9580D7DD-0379-4658-9870-D5BE7D52D6DE} Manifest Microsoft-Windows-WLAN-AutoConfig - channel: 0x10: Microsoft-Windows-WLAN-AutoConfig/Operational: Microsoft-Windows-WLAN-AutoConfig/Operational 0x8: System: System 0x11: Microsoft-Windows-WLAN-Autoconfig/Diagnostic: Microsoft-Windows-WLAN-AutoConfig/Diagnostic - keyword: 0x1: IntfContext 0x2: IntfMgr 0x4: State 0x8: Session 0x10: API 0x20: MSM 0x40: MSMSEC 0x80: SOFTAP 0x100: MSAM 0x200: WlanConnect 0x400: LwtDiagnostic 0x10000000: TelemetryReserved28 0x20000000: Telemetry 0x40000000: Measures 0x80000000: CriticalData 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x400000000000: ut:Scan 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational: Microsoft-Windows-WLAN-AutoConfig/Operational 0x4000000000000000: System: System 0x2000000000000000: Microsoft-Windows-WLAN-Autoconfig/Diagnostic: Microsoft-Windows-WLAN-AutoConfig/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {959F1FAC-7CA8-4ED1-89DC-CDFA7E093CB0} Manifest Microsoft-Windows-HealthCenterCPL - channel: 0x10: Microsoft-Windows-HealthCenterCPL/Performance - keyword: 0x10000: HealthCenterCPL 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-HealthCenterCPL/Performance - level: 0x4: win:Informational: Information {9640427C-7D03-4331-B8EE-FB77625BF381} Manifest Microsoft-Windows-MSFTEDIT - channel: 0x10: Microsoft-Windows-MSFTEDIT/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-MSFTEDIT/Diagnostic - level: 0x4: win:Informational: Information {966CD1C0-3F69-42AD-9877-517DCE8462B4} Manifest Microsoft-Windows-IndirectDisplays-ClassExtension-Events - channel: 0x10: Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic - keyword: 0x1: DdiCalls 0x2: DdiCallbacks 0x4: ObjectLifetime 0x8: FrameProcessing 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic - level: 0x4: win:Informational: Information {968F313B-097F-4E09-9CDD-BC62692D138B} Manifest Microsoft-Windows-DirectShow-Core - channel: 0x9: Application: Application 0x10: DirectShowPluginControl 0x11: DirectShowFilterGraph: DirectShow FilterGraph - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: DirectShowPluginControl 0x2000000000000000: DirectShowFilterGraph: DirectShow FilterGraph - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {96AC7637-5950-4A30-B8F7-E07E8E5734C1} Manifest Microsoft-Windows-Kernel-BootDiagnostics - channel: 0x10: Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic - level: 0x4: win:Informational: Information {96F4A050-7E31-453C-88BE-9634F4E02139} Manifest Microsoft-Windows-UserPnp - channel: 0x8: System: System 0x10: Microsoft-Windows-UserPnp/SchedulerOperations 0x11: Microsoft-Windows-UserPnp/Performance 0x12: Microsoft-Windows-UserPnp/DeviceMetadata/Debug 0x13: Microsoft-Windows-UserPnp/DeviceInstall 0x14: Microsoft-Windows-UserPnp/ActionCenter - keyword: 0x1: PerfTrackContext 0x2: UserPnp 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-UserPnp/SchedulerOperations 0x2000000000000000: Microsoft-Windows-UserPnp/Performance 0x1000000000000000: Microsoft-Windows-UserPnp/DeviceMetadata/Debug 0x800000000000000: Microsoft-Windows-UserPnp/DeviceInstall 0x400000000000000: Microsoft-Windows-UserPnp/ActionCenter - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {973143DD-F3C7-4EF5-B156-544AC38C39B6} Manifest Microsoft-Windows-PerfCtrs - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {9741FD4E-3757-479F-A3C6-FC49F6D5EDD0} Manifest NetJoin - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {97CA8142-10B1-4BAA-9FBB-70A7D11231C3} Manifest Microsoft-Windows-ShellCommon-StartLayoutPopulation - channel: 0x10: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic 0x11: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational - keyword: 0x10000: Shell 0x20000: Start 0x40000: Layout 0x8000000000000000: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic 0x4000000000000000: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {9803DAA0-81BA-483A-986C-F0E395B9F8D1} Manifest Microsoft-Windows-EDP-AppLearning - channel: 0x10: Microsoft-Windows-EDP-Application-Learning/Admin: Microsoft Windows Information Protection Application Learning Log Channel - keyword: 0x10: EDP-Audit-Keyword-AppLearning: Windows Information Protection Audit Application Learning Log Keyword 0x20: EDP-Audit-Keyword-SitesLearning: Windows Information Protection Audit Sites Learning Log Keyword 0x8000000000000000: Microsoft-Windows-EDP-Application-Learning/Admin: Microsoft Windows Information Protection Application Learning Log Channel - level: 0x4: win:Informational: Information {982824E5-E446-46AE-BC74-836401FFB7B6} Manifest Microsoft-Windows-Media-Streaming - channel: 0x10: Microsoft-Windows-Media-Streaming/DMC 0x11: Microsoft-Windows-Media-Streaming/DMR 0x12: Microsoft-Windows-Media-Streaming/MDE - keyword: 0x8000000000000000: Microsoft-Windows-Media-Streaming/DMC 0x4000000000000000: Microsoft-Windows-Media-Streaming/DMR 0x2000000000000000: Microsoft-Windows-Media-Streaming/MDE - level: 0x4: win:Informational: Information {988C59C5-0A1C-45B6-A555-0C62276E327D} Manifest Microsoft-Windows-SMBClient - channel: 0x10: Microsoft-Windows-SMBClient/HelperClassDiagnostic: Microsoft-Windows-SMBClient/HelperClassDiagnostic 0x11: Microsoft-Windows-SMBClient/ObjectStateDiagnostic: Microsoft-Windows-SMBClient/ObjectStateDiagnostic 0x12: Microsoft-Windows-SMBClient/Operational: Microsoft-Windows-SMBClient/Operational 0x13: Microsoft-Windows-SMBClient/Analytic: Microsoft-Windows-SMBClient/XPerfAnalytic 0x14: Microsoft-Windows-SmbClient/Diagnostic: Microsoft-Windows-SMBClient/Diagnostic 0x15: Microsoft-Windows-SmbClient/Connectivity: Microsoft-Windows-SMBClient/Connectivity 0x16: Microsoft-Windows-SmbClient/Security: Microsoft-Windows-SMBClient/Security 0x17: Microsoft-Windows-SmbClient/Audit: Microsoft-Windows-SMBClient/Audit - keyword: 0x1: Smb_Perf 0x2: Networking_Perf 0x4: Smb_Info 0x8: InfoCache_Info 0x10: Smb_TFO 0x20: Smb_MultiChannel 0x40: Smb_Connectivity 0x80: Smb_Authentication 0x100: Smb_Authorization 0x200: Smb_Security 0x40000000: PacketStart 0x80000000: PacketEnd 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x40000000000: ut:Packet 0x400000000000: ut:Diagnostic 0x800000000000: PduFull 0x8000000000000000: Microsoft-Windows-SMBClient/HelperClassDiagnostic: Microsoft-Windows-SMBClient/HelperClassDiagnostic 0x4000000000000000: Microsoft-Windows-SMBClient/ObjectStateDiagnostic: Microsoft-Windows-SMBClient/ObjectStateDiagnostic 0x2000000000000000: Microsoft-Windows-SMBClient/Operational: Microsoft-Windows-SMBClient/Operational 0x1000000000000000: Microsoft-Windows-SMBClient/Analytic: Microsoft-Windows-SMBClient/XPerfAnalytic 0x800000000000000: Microsoft-Windows-SmbClient/Diagnostic: Microsoft-Windows-SMBClient/Diagnostic 0x400000000000000: Microsoft-Windows-SmbClient/Connectivity: Microsoft-Windows-SMBClient/Connectivity 0x200000000000000: Microsoft-Windows-SmbClient/Security: Microsoft-Windows-SMBClient/Security 0x100000000000000: Microsoft-Windows-SmbClient/Audit: Microsoft-Windows-SMBClient/Audit - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {98BF1CD3-583E-4926-95EE-A61BF3F46470} Manifest Microsoft-Windows-CertificationAuthorityClient-CertCli - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {98E0765D-8C42-44A3-A57B-760D7F93225A} Manifest Microsoft-Windows-AppHost - channel: 0x10: Microsoft-Windows-AppHost/Admin: Admin 0x11: Microsoft-Windows-AppHost/Internal 0x12: Microsoft-Windows-AppHost/Diagnostic 0x13: Microsoft-Windows-AppHost/ApplicationTracing: AppTracing - keyword: 0x1: WWAHOST_KEYWORD: AppHost 0x2: WWAHOST_APPLICATION_KEYWORD: AppHostApplication 0x4: WWAHOST_DIAGNOSTIC_KEYWORD: AppHostDiagnostic 0x10000: WwaHost 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-AppHost/Admin: Admin 0x4000000000000000: Microsoft-Windows-AppHost/Internal 0x2000000000000000: Microsoft-Windows-AppHost/Diagnostic 0x1000000000000000: Microsoft-Windows-AppHost/ApplicationTracing: AppTracing - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1} Manifest Microsoft-Windows-Security-Kerberos - channel: 0x10: Microsoft-Windows-Kerberos/Operational: Operational - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-Kerberos/Operational: Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {990C55FC-2662-47F6-B7D7-EB3C027CB13F} Manifest Microsoft-Windows-Storage-Tiering-IoHeat - channel: 0x10: Microsoft-Windows-Storage-Tiering-IoHeat/Heat: Tiering Heat Measurement Channel - keyword: 0x10: STORAGE_TIERING_KEYWORD_INIT 0x20: STORAGE_TIERING_KEYWORD_DATA 0x40: STORAGE_TIERING_KEYWORD_READ 0x80: STORAGE_TIERING_KEYWORD_WRITE 0x100: STORAGE_TIERING_KEYWORD_DELETE 0x200: STORAGE_TIERING_KEYWORD_TIERMOVE 0x8000000000000000: Microsoft-Windows-Storage-Tiering-IoHeat/Heat: Tiering Heat Measurement Channel - level: 0x4: win:Informational: Information {991F8FE6-249D-44D6-B93D-5A3060C1DEDB} Manifest Microsoft-Windows-SPB-HIDI2C - channel: 0x10: Microsoft-Windows-SPB-HIDI2C/Analytic: Analytic 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-SPB-HIDI2C/Analytic: Analytic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {99806515-9F51-4C2F-B918-1EAE407AA8CB} Manifest Microsoft-Windows-Superfetch - channel: 0x10: Microsoft-Windows-Superfetch/Main: Main 0x11: Microsoft-Windows-Superfetch/StoreLog: StoreLog 0x12: Microsoft-Windows-Superfetch/PfApLog - keyword: 0x1: Prefetch 0x2: Store 0x4: StoreLog 0x10: PfAp 0x20: Combine 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Superfetch/Main: Main 0x4000000000000000: Microsoft-Windows-Superfetch/StoreLog: StoreLog 0x2000000000000000: Microsoft-Windows-Superfetch/PfApLog - level: 0x4: win:Informational: Information {9988748E-C2E8-4054-85F6-0C3E1CAD2470} Manifest Microsoft-Windows-Resource-Exhaustion-Detector - channel: 0x8: System: System 0x10: Microsoft-Windows-Resource-Exhaustion-Detector/Operational: Microsoft-Windows-Resource-Exhaustion-Detector/Operational - keyword: 0x10000000: RDR_DET_KEYWORD_LIFECYCLE: Events related to lifecycle of resource exhaustion detector. 0x20000000: RDR_DET_KEYWORD_MEMORY_EXHAUSTION: Events related to exhaustion of system commit limit (virtual memory). 0x40000000: RDR_DET_KEYWORD_HEAP_LEAK_DETECTION: Event generated when heap leak detection is about to be started on a process. 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Resource-Exhaustion-Detector/Operational: Microsoft-Windows-Resource-Exhaustion-Detector/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {99C66BA7-5A97-40D5-AA01-8A07FB3DB292} Manifest Microsoft-Windows-UserDataAccess-PimIndexMaintenance {9A6615A6-902A-4705-804B-57B8813089B8} Manifest Microsoft-WindowsPhone-Net-Cellcore-CellManager - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Trace: Trace 0x8: StateChange: StateChange - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {9B307223-4E4D-4BF5-9BE8-995CD8E7420B} Manifest Microsoft-Windows-NetworkManagerTriggerProvider - keyword: 0x1: Keyword_FirstAddressArrivalEvent 0x2: Keyword_LastAddressRemovalEvent - level: 0x4: win:Informational: Information {9B6123DC-9AF6-4430-80D7-7D36F054FB9F} Manifest Microsoft-Windows-CDROM - channel: 0x10: Microsoft-Windows-CDROM/Operational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-CDROM/Operational - level: 0x4: win:Informational: Information {9B7E4C0F-342C-4106-A19F-4F2704F689F0} Manifest Microsoft-Windows-Direct3D10 - channel: 0x10: Microsoft-Windows-Direct3D10/Analytic - keyword: 0x1: Names 0x2: Devices 0x4: Resources 0x8000000000000000: Microsoft-Windows-Direct3D10/Analytic - level: 0x0: win:LogAlways: Log Always {9B7E4C8F-342C-4106-A19F-4F2704F689F0} Manifest Microsoft-Windows-Direct3D10_1 - channel: 0x10: Microsoft-Windows-Direct3D10_1/Analytic - keyword: 0x1: Names 0x2: Devices 0x4: Resources 0x8000000000000000: Microsoft-Windows-Direct3D10_1/Analytic - level: 0x0: win:LogAlways: Log Always {9C205A39-1250-487D-ABD7-E831C6290539} Manifest Microsoft-Windows-Kernel-PnP - channel: 0x8: System: System 0x10: Microsoft-Windows-Kernel-PnP/Configuration: Device Configuration 0x11: Microsoft-Windows-Kernel-PnP/Boot Diagnostic: Boot Diagnostic Channel 0x12: Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic: Device Enumeration Diagnostic Channel 0x13: Microsoft-Windows-Kernel-PnP/Configuration Diagnostic: Configuration Diagnostic Channel 0x14: Microsoft-Windows-Kernel-PnP/Driver Diagnostic: Driver Diagnostic Channel - keyword: 0x20: Performance 0x1000: BootInit 0x2000: DriverLoad 0x4000: DriverUnload 0x8000: DeviceStart 0x10000: DeviceEnum 0x20000: DriverInit 0x40000: DeviceEject 0x80000: DeviceConfig 0x100000: DriverDatabase 0x200000: DevQuery 0x400000: CfgMgr 0x800000: Enumeration 0x1000000: ObjectLists 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Kernel-PnP/Configuration: Device Configuration 0x2000000000000000: Microsoft-Windows-Kernel-PnP/Boot Diagnostic: Boot Diagnostic Channel 0x1000000000000000: Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic: Device Enumeration Diagnostic Channel 0x800000000000000: Microsoft-Windows-Kernel-PnP/Configuration Diagnostic: Configuration Diagnostic Channel 0x400000000000000: Microsoft-Windows-Kernel-PnP/Driver Diagnostic: Driver Diagnostic Channel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {9C2A37F3-E5FD-5CAE-BCD1-43DAFEEE1FF0} Manifest Microsoft-Windows-Store - channel: 0x10: Microsoft-Windows-Store/Operational - keyword: 0x100000000000: Messages 0x200000000000: StateMachine 0x8000000000000000: Microsoft-Windows-Store/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {9CC0413E-5717-4AF5-82EB-6103D8707B45} Manifest Microsoft-Windows-EapMethods-RasTls - channel: 0x10: Microsoft-Windows-EapMethods-RasTls/Operational: Operational Channel - keyword: 0x8000000000000000: Microsoft-Windows-EapMethods-RasTls/Operational: Operational Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {9CC69D1C-7917-4ACD-8066-6BF8B63E551B} Manifest Microsoft-AppV-ServiceLog - channel: 0x10: Microsoft-AppV-Client/Debug - keyword: 0x1: DebugTrace: Debug Out Messages. 0x8000000000000000: Microsoft-AppV-Client/Debug - level: 0x5: win:Verbose: Verbose {9D55B53D-449B-4824-A637-24F9D69AA02F} Manifest Microsoft-Windows-Winsrv - channel: 0x9: Application: Application 0x10: Microsoft-Windows-Winsrv/Analytic - keyword: 0x100: Perf 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-Winsrv/Analytic - level: 0x4: win:Informational: Information {9DB0FDB5-3B21-440E-A94B-63738A4BE5DE} Manifest Microsoft-Windows-FunctionDiscovery - channel: 0x10: Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Analytic - level: 0x4: win:Informational: Information {9E03F75A-BCBE-428A-8F3C-D46F2A444935} Manifest Microsoft-Windows-IdleTriggerProvider - keyword: 0x1: Keyword_IdleTriggerEvent - level: 0x4: win:Informational: Information {9E12CEB1-E3FF-46AD-A0AA-11738B122D20} Manifest Microsoft-Windows-WebcamExperience - channel: 0x10: Microsoft-Windows-WebcamProvider/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WebcamProvider/Analytic - level: 0x4: win:Informational: Information {9E3B3947-CA5D-4614-91A2-7B624E0E7244} Manifest Microsoft-IE - channel: 0x10: Microsoft-IE/Diagnostic 0x11: Microsoft-Windows-WebPlatStorage-Server - keyword: 0x1: element_rundown 0x2: webocevents 0x4: draganddrop 0x8: gwnd 0x10: eventsandtimers 0x20: generaltracing 0x40: selfhost 0x80: scheduler_api 0x100: primarynav 0x200: subsystem 0x400: extended 0x800: verbose 0x1000: mshtml 0x2000: marshalling 0x4000: DDT 0x8000: jscript 0x10000: ap 0x20000: canvas 0x40000: controlpanel 0x80000: privacie 0x100000: pagemark 0x200000: scroll 0x400000: jscript_verbose 0x800000: paintbeat 0x1000000: mediaengine 0x2000000: invalidation 0x4000000: pageloadbreakdown 0x8000000: touch 0x10000000: composition 0x20000000: animation 0x40000000: flipahead 0x80000000: composition_verbose 0x100000000: privaterefcount 0x200000000: internalrefcount 0x400000000: subrefcount 0x800000000: extensions 0x1000000000: containers 0x8000000000000000: Microsoft-IE/Diagnostic 0x4000000000000000: Microsoft-Windows-WebPlatStorage-Server - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {9E9BBA3C-2E38-40CB-99F4-9E8281425164} Manifest Microsoft-Windows-Dwm-Core - channel: 0x10: Microsoft-Windows-Dwm-Core/Diagnostic - keyword: 0x1: DwmCore 0x2: DetailedFrameInformation 0x4: FrameDrawInconsistencyInformation 0x8: DwmFrameRate 0x10: AnimationScreenOff 0x20: ProcessAttribution 0x10000: FrameVisualization 0x20000: LowOverheadSmoothnessTracking 0x40000: FrameVisualizationExtra 0x80000: DwmHolographic 0x100000: WorkPerFrame 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Dwm-Core/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {9F0C4EA8-EC01-4200-A00D-B9701CBEA5D8} Manifest Microsoft-Windows-PowerCfg - channel: 0x10: Microsoft-Windows-PowerCfg/Diagnostic - keyword: 0x10000: PowerCpl 0x8000000000000000: Microsoft-Windows-PowerCfg/Diagnostic - level: 0x4: win:Informational: Information {9F650C63-9409-453C-A652-83D7185A2E83} Manifest Microsoft-Windows-SCPNP - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {9F7B5DF4-B902-48BC-BC94-95068C6C7D26} Manifest Microsoft-Windows-Volume - channel: 0x10: Microsoft-Windows-Volume/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Volume/Diagnostic - level: 0x4: win:Informational: Information {9F973C1D-D056-4E38-84A5-7BE81CDD6AB6} Manifest Microsoft-Windows-SettingSync-Azure - channel: 0x10: Microsoft-Windows-SettingSync-Azure/Operational: Microsoft-Windows-SettingSync-Azure/Operational 0x11: Microsoft-Windows-SettingSync-Azure/Debug: Microsoft-Windows-SettingSync-Azure/Debug - keyword: 0x1: RoamingSettings 0x8000000000000000: Microsoft-Windows-SettingSync-Azure/Operational: Microsoft-Windows-SettingSync-Azure/Operational 0x4000000000000000: Microsoft-Windows-SettingSync-Azure/Debug: Microsoft-Windows-SettingSync-Azure/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {9FA5DD5D-999E-466A-8CA9-7B3A66F8882F} Manifest Microsoft-Windows-DriverFrameworks-UserMode-Performance {9FC66DD7-98C7-4B83-8293-46A18439B03B} Manifest Microsoft-Windows-CloudStorageWizard - channel: 0x10: Microsoft-Windows-CloudStorageWizard/Operational: Microsoft-Windows-CloudStorageWizard/Operational 0x11: Microsoft-Windows-CloudStorageWizard/Analytic: Microsoft-Windows-CloudStorageWizard/Analytic - keyword: 0x1: CloudStorageWizard 0x8000000000000000: Microsoft-Windows-CloudStorageWizard/Operational: Microsoft-Windows-CloudStorageWizard/Operational 0x4000000000000000: Microsoft-Windows-CloudStorageWizard/Analytic: Microsoft-Windows-CloudStorageWizard/Analytic - level: 0x4: win:Informational: Information {A0AF438F-4431-41CB-A675-A265050EE947} Manifest Microsoft-Windows-Kernel-LicensingSqm - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {A0B7550F-4E9A-4F03-AD41-B8042D06A2F7} Manifest Microsoft-WindowsPhone-CoreUIComponents - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: NavigationPerformance: NavigationPerformance 0x8: ForegroundTaskManager: CUI ForegroundTaskManager 0x10: Server: CUI Server 0x20: ServerSession: CUI ServerSession 0x40: SessionManager: CUI SessionManager 0x80: ServerTask: CUI ServerTask 0x100: ServerWindow: CUI ServerWindow 0x200: WindowManager: CUI WindowManager 0x400: RotationManager: CUI RotationManager 0x800: PageNavigationController: CUI PageNavigationController 0x1000: PageManagerContainer: CUI PageManagerContainer 0x2000: PageManager: CUI PageManager 0x4000: Page: CUI Page 0x8000: ExecutionManagerClient: CUI ExecutionManagerClient 0x10000: NavigationWindow: CUI NavigationWindow 0x20000: Task: CUI Task 0x40000: PMEnumerationManager: CUI PMEnumerationManager 0x100000: TimeoutInfo: CUI TimeoutInfo 0x200000: CoreUIService: CUI CoreUIService 0x400000: NavigationPerformanceTriggers: CUI NavigationPerformanceTriggers 0x800000: BrokerSessionManager: CUI BrokerSessionManager 0x1000000: NavigationClient: CUI NavigationClient 0x2000000: SessionLayer: CUI SessionLayer 0x4000000: ForegroundSessionLayer: CUI ForegroundSessionLayer 0x10000000: ViewManager: OneCore CUI ViewManager 0x20000000: ViewActivator: OneCore CUI ViewActivator 0x40000000: BasicViewAdapter: OneCore CUI BasicViewAdapter 0x80000000: ClientViewCreator: OneCore CUI ClientViewCreator 0x100000000: MessagingPerformance: CUI MessagingPerformance 0x2000000000: Proxy: CUI Proxy 0x40000000000: SelfHostInfo: CUI SelfHostInfo 0x80000000000: SelfHostError: CUI SelfHostError 0x2000000000000: win:ReservedKeyword49 - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A0C1853B-5C40-4B15-8766-3CF1C58F985A} Manifest Microsoft-Windows-PowerShell - channel: 0x10: Microsoft-Windows-PowerShell/Operational: Microsoft-Windows-PowerShell/Operational 0x11: Microsoft-Windows-PowerShell/Analytic: Microsoft-Windows-PowerShell/Analytic 0x12: Microsoft-Windows-PowerShell/Debug: Microsoft-Windows-PowerShell/Debug 0x13: Microsoft-Windows-PowerShell/Admin: Microsoft-Windows-PowerShell/Admin - keyword: 0x1: Runspace: PowerShell Runspace 0x2: Pipeline: Pipeline of Commands 0x4: Protocol: PowerShell remoting protocol 0x8: Transport: PowerShell remoting transport 0x10: Host: PowerShell remoting host proxy calls 0x20: Cmdlets: All remoting cmdlets 0x40: Serializer: The serialization layer 0x80: Session: All session layer 0x100: Plugin: The managed PowerShell plugin worker 0x200: PSWorkflow: PSWorkflow Hosting And Execution Layer 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-PowerShell/Operational: Microsoft-Windows-PowerShell/Operational 0x4000000000000000: Microsoft-Windows-PowerShell/Analytic: Microsoft-Windows-PowerShell/Analytic 0x2000000000000000: Microsoft-Windows-PowerShell/Debug: Microsoft-Windows-PowerShell/Debug 0x1000000000000000: Microsoft-Windows-PowerShell/Admin: Microsoft-Windows-PowerShell/Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x14: Debug: Debug level defined by PowerShell (which is above Informational defined by system) {A0E3D8EA-C34F-4419-A1DB-90435B8B21D0} Manifest Microsoft-Windows-Biometrics - channel: 0x10: Microsoft-Windows-Biometrics/Operational: Microsoft-Windows-Biometrics/Operational 0x11: Microsoft-Windows-Biometrics/Analytic: Microsoft-Windows-Biometrics/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Biometrics/Operational: Microsoft-Windows-Biometrics/Operational 0x4000000000000000: Microsoft-Windows-Biometrics/Analytic: Microsoft-Windows-Biometrics/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A103CABD-8242-4A93-8DF5-1CDF3B3F26A6} Manifest Microsoft-Windows-Kernel-IoTrace - channel: 0x10: Microsoft-Windows-Kernel-IoTrace/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Kernel-IoTrace/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A111F1C2-5923-47C0-9A68-D0BAFB577901} Manifest Microsoft-Windows-Network-Setup - channel: 0x10: Microsoft-Windows-Network-Setup/Diagnostic: Microsoft-Windows-Network-Setup/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-Network-Setup/Diagnostic: Microsoft-Windows-Network-Setup/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {A1B69D49-2195-4F59-9D33-BDF30C0FE473} Manifest Microsoft-Office-Word3 - channel: 0x10: WordChannel - keyword: 0x1: OCSB 0x2: CoauthUndo 0x4: Hashtags 0x8: Emojis 0x10: AsyncEdit 0x20: Forms 0x40: FileNew 0x80: Inval 0x100: SuggestionService 0x200: DocTiling 0x400: OLE 0x800: LinkedIn 0x1000: MailMerge 0x2000: Language 0x4000: InkToText 0x8000: FlashEdits 0x10000: EasyBib 0x20000: FastCoauth 0x40000: DigitalPrint 0x80000: FocusMode 0x100000: IntelligentPlaceholders 0x200000: AsyncCoAuthoring 0x8000000000000000: WordChannel - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: wls:Verbose10 0x32: wls:Verbose50 0x64: wls:Verbose100 0xc8: wls:Verbose200 {A2D1C713-093B-43A7-B445-D09370EC9F47} Manifest Microsoft-Windows-Dwm-Udwm - channel: 0x10: Microsoft-Windows-Dwm-Udwm/Diagnostic - keyword: 0x1: Udwm 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Dwm-Udwm/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A2F55524-8EBC-45FD-88E4-A1B39F169E08} Manifest Microsoft-Windows-BranchCacheMonitoring - channel: 0x10: Microsoft-Windows-BranchCacheMonitoring/Analytic: Microsoft-Windows-BranchCacheMonitoring/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-BranchCacheMonitoring/Analytic: Microsoft-Windows-BranchCacheMonitoring/Analytic - level: 0x4: win:Informational: Information {A319D300-015C-48BE-ACDB-47746E154751} Manifest Microsoft-Windows-FileInfoMinifilter - channel: 0x10: Microsoft-Windows-FileInfoMinifilter/Operational - keyword: 0x10000: fi:FileNameCreate 0x20000: fi:FileNameRundown 0x40000: fi:FileNameDelete 0x8000000000000000: Microsoft-Windows-FileInfoMinifilter/Operational - level: 0x4: win:Informational: Information {A329CF81-57EC-46ED-AB7C-261A52B0754A} Manifest Microsoft-Windows-Management-SecureAssessment - channel: 0x10: Microsoft-Windows-SecureAssessment/Operational: Operational - keyword: 0x1: SecureAssessment: SecureAssessment 0x8000000000000000: Microsoft-Windows-SecureAssessment/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {A3C0D58A-9FE5-4F24-A2CE-E16DE8BAA0D2} Manifest Microsoft-Windows-Shell-LockScreenContent - channel: 0x10: Microsoft-Windows-Shell-LockScreenContent/Diagnostic - keyword: 0x1: LockScreenContent 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Shell-LockScreenContent/Diagnostic - level: 0x4: win:Informational: Information {A3D95055-34CC-4E4A-B99F-EC88F5370495} Manifest Microsoft-Windows-CoreWindow - channel: 0x10: Microsoft-Windows-CoreWindow/Debug 0x11: Microsoft-Windows-CoreWindow/Analytic - keyword: 0x1: Failure 0x2: Informational 0x4: Diagnostic 0x8: Performance 0x10: CoreWindowInternal 0x8000000000000000: Microsoft-Windows-CoreWindow/Debug 0x4000000000000000: Microsoft-Windows-CoreWindow/Analytic - level: 0x4: win:Informational: Information {A3E1697B-A12C-46B9-84D1-7FFE73C4B678} Manifest Microsoft-Windows-PortableDeviceSyncProvider - channel: 0x10: Microsoft-Windows-PortableDeviceSyncProvider/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-PortableDeviceSyncProvider/Analytic - level: 0x4: win:Informational: Information {A4112D1A-6DFA-476E-BB75-E350D24934E1} Manifest Microsoft-Windows-MediaFoundation-MSVProc - channel: 0x10: MedaFoundationVideoProc: MS Video Processor MFT 0x11: MedaFoundationVideoProcD3D: MS Video Processor MFT (D3D11) - keyword: 0x8000000000000000: MedaFoundationVideoProc: MS Video Processor MFT 0x4000000000000000: MedaFoundationVideoProcD3D: MS Video Processor MFT (D3D11) - level: 0x5: win:Verbose: Verbose {A4445C76-ED85-C8A3-02C1-532A38614A9E} Manifest Microsoft-Windows-ResetEng - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x1: win:Critical: Critical 0x4: win:Informational: Information {A50B09F8-93EB-4396-84C9-DC921259F952} Manifest Microsoft-Windows-Diagnosis-MSDE - channel: 0x10: Microsoft-Windows-Diagnosis-MSDE/Debug: Microsoft-Windows-Diagnosis-MSDE/Debug - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Diagnosis-MSDE/Debug: Microsoft-Windows-Diagnosis-MSDE/Debug - level: 0x4: win:Informational: Information {A615ACB9-D5A4-4738-B561-1DF301D207F8} Manifest Microsoft-Windows-SetupQueue - channel: 0x10: Microsoft-Windows-SetupQueue/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-SetupQueue/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {A669021C-C450-4609-A035-5AF59AF4DF18} Manifest Microsoft-Windows-DotNETRuntimeRundown - keyword: 0x8: LoaderRundownKeyword: Loader 0x10: JitRundownKeyword: Jit 0x20: NGenRundownKeyword: NGen 0x40: StartRundownKeyword: Start 0x100: EndRundownKeyword: End 0x800: AppDomainResourceManagementRundownKeyword: AppDomainResourceManagement 0x10000: ThreadingKeyword: Threading 0x20000: JittedMethodILToNativeMapRundownKeyword: JittedMethodILToNativeMapRundown 0x40000: OverrideAndSuppressNGenEventsRundownKeyword: OverrideAndSuppressNGenEvents 0x20000000: PerfTrackRundownKeyword: PerfTrack 0x40000000: StackKeyword: Stack - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A67075C2-3E39-4109-B6CD-6D750058A731} Manifest Microsoft-Windows-NetworkBridge - channel: 0x8: System: System 0x10: Microsoft-Windows-NetworkBridge/Diagnostic - keyword: 0x1: KeywordDebugTrace: DebugTrace 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-NetworkBridge/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {A67075C2-3E39-4109-B6CD-6D750058A732} Manifest Microsoft-Windows-IPNAT - channel: 0x10: Microsoft-Windows-IPNAT/Diagnostic - keyword: 0x1: KeywordDebugTrace: DebugTrace 0x8000000000000000: Microsoft-Windows-IPNAT/Diagnostic - level: 0x4: win:Informational: Information {A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D} Manifest Microsoft-Windows-Kernel-General - channel: 0x8: System: System - keyword: 0x10: KERNEL_GENERAL_KEYWORD_TIME: Time 0x20: KERNEL_GENERAL_SECURITY_ACCESSCHECK 0x40: KERNEL_GENERAL_TOKEN_SID_MANAGEMENT 0x80: BootPerformance 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {A6AD76E3-867A-4635-91B3-4904BA6374D7} Manifest Microsoft-Windows-Kernel-StoreMgr - channel: 0x10: Microsoft-Windows-Kernel-StoreMgr/Analytic 0x11: Microsoft-Windows-Kernel-StoreMgr/Operational: Microsoft-Windows-Kernel-StoreMgr/Operational - keyword: 0x10: StoreOps 0x40: StoreDiag 0x80: StoreContentsRundown 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-Kernel-StoreMgr/Analytic 0x4000000000000000: Microsoft-Windows-Kernel-StoreMgr/Operational: Microsoft-Windows-Kernel-StoreMgr/Operational - level: 0x4: win:Informational: Information {A6BF0DEB-3659-40AD-9F81-E25AF62CE3C7} Manifest Microsoft-Windows-PDC - channel: 0x10: Microsoft-Windows-Kernel-Pdc/Diagnostic - keyword: 0x1: PdcErrors: Errors 0x2: notifications: Notifications 0x4: clients: ResiliencyClients 0x8: activators: Activators 0x10: Cs: Activators 0x20: suspendresume: SuspendResume 0x40: tasks: Tasks 0x80: CsDiag 0x100: SPM: SPM 0x200: sleepstudy 0x400: PdcClient: PdcClient 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Kernel-Pdc/Diagnostic - level: 0x4: win:Informational: Information {A6F32731-9A38-4159-A220-3D9B7FC5FE5D} Manifest Microsoft-Windows-SharedAccess_NAT - keyword: 0x80000000000000: win:EventlogClassic: Classic {A70FF94F-570B-4979-BA5C-E59C9FEAB61B} Manifest Microsoft-Windows-WinINet-Capture - channel: 0x10: Microsoft-Windows-WinINet-Capture/Analytic - keyword: 0x100000000: WININET_KEYWORD_SEND: Flagged on all WinINet events dealing with sending packet capture 0x200000000: WININET_KEYWORD_RECEIVE: Flagged on all WinINet events dealing with receiving packet capture 0x20000000000: WININET_KEYWORD_PII_PRESENT: Flagged on all WinINet events dealing with potential personally identifiable information 0x40000000000: WININET_KEYWORD_PACKET: Flagged on all WinINet events dealing with packet capture 0x8000000000000000: Microsoft-Windows-WinINet-Capture/Analytic - level: 0x4: win:Informational: Information {A7364E1A-894F-4B3D-A930-2ED9C8C4C811} Manifest Microsoft-Windows-MF - channel: 0x10: MF_MediaFoundationDeviceProxy: Media Foundation DeviceProxy 0x11: MediaFoundationPipeline: Media Foundation Pipeline 0x12: MediaFoundationContentProtection: Media Foundation ContentProtection 0x13: MediaFoundationAsyncWrapper: Media Foundation AsyncWrapper 0x14: MediaFoundationDS: MFDS 0x15: MediaFoundationSrcPrefetch: SrcPrefetch - keyword: 0x8000000000000000: MF_MediaFoundationDeviceProxy: Media Foundation DeviceProxy 0x4000000000000000: MediaFoundationPipeline: Media Foundation Pipeline 0x2000000000000000: MediaFoundationContentProtection: Media Foundation ContentProtection 0x1000000000000000: MediaFoundationAsyncWrapper: Media Foundation AsyncWrapper 0x800000000000000: MediaFoundationDS: MFDS 0x400000000000000: MediaFoundationSrcPrefetch: SrcPrefetch - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A7975C8F-AC13-49F1-87DA-5A984A4AB417} Manifest Microsoft-Windows-WinRM - channel: 0x10: Microsoft-Windows-WinRM/Debug 0x11: Microsoft-Windows-WinRM/Operational: Microsoft-Windows-WinRM/Operational 0x12: Microsoft-Windows-WinRM/Analytic: Microsoft-Windows-WinRM/Analytic - keyword: 0x1: Keyword.SoapTrace: Soap Trace 0x2: Keyword.Client: Client 0x4: Keyword.Server: Server 0x8: Keyword.Security: Security 0x10: Keyword.QuotaViolation: QuotaViolation 0x20: Keyword.Transfer: Activity Transfer 0x40: Keyword.Error: Error 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-WinRM/Debug 0x4000000000000000: Microsoft-Windows-WinRM/Operational: Microsoft-Windows-WinRM/Operational 0x2000000000000000: Microsoft-Windows-WinRM/Analytic: Microsoft-Windows-WinRM/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {A7F2235F-BE51-51ED-DECF-F4498812A9A2} Manifest Microsoft-Windows-PersistentMemory-Nvdimm - channel: 0x8: System: System 0x10: Microsoft-Windows-PersistentMemory-Nvdimm/Analytic 0x11: Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic 0x12: Microsoft-Windows-PersistentMemory-Nvdimm/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Analytic 0x2000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic 0x1000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {A8106E5C-293A-4CD0-9397-2E6FAC7F9749} Manifest Microsoft-Windows-TabletPC-InputPersonalization - level: 0x4: win:Informational: Information {A82FDA5D-745F-409C-B0FE-18AE0678A0E0} Manifest Microsoft-Windows-FailoverClustering-Client - channel: 0x10: Microsoft-Windows-FailoverClustering-Client/Diagnostic: Microsoft-Windows-FailoverClustering-Client/Diagnostic - keyword: 0x1: Cluster: Cluster 0x2: Node 0x4: Group 0x8: Resource 0x10: Network 0x20: NetInt 0x40: Quorum 0x80: Reconnect: Reconnect 0x100: ResType 0x200: Property 0x8000000000000000: Microsoft-Windows-FailoverClustering-Client/Diagnostic: Microsoft-Windows-FailoverClustering-Client/Diagnostic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {A83FA99F-C356-4DED-9FD6-5A5EB8546D68} Manifest Application-Addon-Event-Provider - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x4: win:Informational: Information {A86F8471-C31D-4FBC-A035-665D06047B03} Manifest Microsoft-Windows-WinRT-Error - channel: 0x10: Microsoft-Windows-Runtime/Error - keyword: 0x1: WinRTError 0x8000000000000000: Microsoft-Windows-Runtime/Error - level: 0x4: win:Informational: Information {A8A1F2F6-A13A-45E9-B1FE-3419569E5EF2} Manifest Microsoft-Windows-MUI - channel: 0x10: Microsoft-Windows-MUI/Operational: Microsoft-Windows-MUI/Operational 0x11: Microsoft-Windows-MUI/Admin: Microsoft-Windows-MUI/Admin 0x12: Microsoft-Windows-MUI/Analytic: Microsoft-Windows-MUI/Analytic 0x13: Microsoft-Windows-MUI/Debug: Microsoft-Windows-MUI/Debug - keyword: 0x8000000000000000: Microsoft-Windows-MUI/Operational: Microsoft-Windows-MUI/Operational 0x4000000000000000: Microsoft-Windows-MUI/Admin: Microsoft-Windows-MUI/Admin 0x2000000000000000: Microsoft-Windows-MUI/Analytic: Microsoft-Windows-MUI/Analytic 0x1000000000000000: Microsoft-Windows-MUI/Debug: Microsoft-Windows-MUI/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {A9C11050-9E93-4FA4-8FE0-7C4750A345B2} Manifest Microsoft-Windows-CoreSystem-SmsRouter - channel: 0x10: Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational: SmsRouter Operational Channel 0x11: Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug: SmsRouter Debug Channel - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Information: Information 0x8: Trace: Trace 0x8000000000000000: Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational: SmsRouter Operational Channel 0x4000000000000000: Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug: SmsRouter Debug Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {AA1F73E8-15FD-45D2-ABFD-E7F64F78EB11} Manifest Microsoft-Windows-Kernel-PowerTrigger - keyword: 0x1: potrg:Trigger - level: 0x4: win:Informational: Information {AA3AA23B-BB6D-425A-B58C-1D7E37F5D02A} Manifest Microsoft-Windows-EnhancedStorage-EhStorTcgDrv - channel: 0x8: System: System 0x10: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AA4C798D-D91B-4B07-A013-787F5803D6FC} Manifest Microsoft-Windows-StorageSpaces-ManagementAgent - channel: 0x10: Microsoft-Windows-StorageSpaces-ManagementAgent/WHC - keyword: 0x8000000000000000: Microsoft-Windows-StorageSpaces-ManagementAgent/WHC - level: 0x4: win:Informational: Information {AABF8B86-7936-4FA2-ACB0-63127F879DBF} Manifest Microsoft-Windows-Diagnosis-PCW - channel: 0x10: Microsoft-Windows-Diagnosis-PCW/Operational: Microsoft-Windows-Diagnosis-PCW/Operational 0x11: Microsoft-Windows-Diagnosis-PCW/Analytic: Microsoft-Windows-Diagnosis-PCW/Analytic 0x12: Microsoft-Windows-Diagnosis-PCW/Debug: Microsoft-Windows-Diagnosis-PCW/Debug - keyword: 0x800: errors: Errors 0x1000: callouts: Provider callouts 0x2000: notifications: Provider notifications 0x4000: queries: Provider queries 0x8000000000000000: Microsoft-Windows-Diagnosis-PCW/Operational: Microsoft-Windows-Diagnosis-PCW/Operational 0x4000000000000000: Microsoft-Windows-Diagnosis-PCW/Analytic: Microsoft-Windows-Diagnosis-PCW/Analytic 0x2000000000000000: Microsoft-Windows-Diagnosis-PCW/Debug: Microsoft-Windows-Diagnosis-PCW/Debug {AAEAC398-3028-487C-9586-44EACAD03637} Manifest Microsoft-Windows-SmartCard-DeviceEnum - channel: 0x10: Microsoft-Windows-SmartCard-DeviceEnum/Operational: Microsoft-Windows-SmartCard-DeviceEnum/Operational - keyword: 0x8000000000000000: Microsoft-Windows-SmartCard-DeviceEnum/Operational: Microsoft-Windows-SmartCard-DeviceEnum/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {AAF67066-0BF8-469F-AB76-275590C434EE} Manifest Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager {AB0D8EF9-866D-4D39-B83F-453F3B8F6325} Manifest Microsoft-Windows-OneX - channel: 0x10: Microsoft-Windows-OneX/Diagnostic: Microsoft-Windows-OneX/Diagnostic 0x11: Microsoft-Windows-OneX/Operational: Microsoft-Windows-OneX/Operational - keyword: 0x1: API: API 0x2: EAP: EAP 0x4: EAPPacket: EAPPacket 0x8: OneXUI: OneXUI 0x10: Profile: Profile 0x20: Semantic: Semantic 0x40: Supplicant: Supplicant 0x80: User: User 0x100: LwtDiagnostic 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-OneX/Diagnostic: Microsoft-Windows-OneX/Diagnostic 0x4000000000000000: Microsoft-Windows-OneX/Operational: Microsoft-Windows-OneX/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AB77E98E-0138-4C77-8BFB-DECD33EDFE3C} Manifest Microsoft-Windows-WebDeploy - channel: 0x10: Microsoft-Windows-WebDeploy/Debug: Debug 0x11: Microsoft-Windows-WebDeploy/Error: Errors 0x12: Microsoft-Windows-WebDeploy/Info: Info 0x13: Microsoft-Windows-WebDeploy/Verbose: Verbose 0x14: Microsoft-Windows-WebDeploy/ConnectionInfo: ConnectionInfo 0x15: Microsoft-Windows-WebDeploy/Warning: Warning - keyword: 0x8000000000000000: Microsoft-Windows-WebDeploy/Debug: Debug 0x4000000000000000: Microsoft-Windows-WebDeploy/Error: Errors 0x2000000000000000: Microsoft-Windows-WebDeploy/Info: Info 0x1000000000000000: Microsoft-Windows-WebDeploy/Verbose: Verbose 0x800000000000000: Microsoft-Windows-WebDeploy/ConnectionInfo: ConnectionInfo 0x400000000000000: Microsoft-Windows-WebDeploy/Warning: Warning - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {ABCE23E7-DE45-4366-8631-84FA6C525952} Manifest Microsoft-Windows-WER-SystemErrorReporting - keyword: 0x80000000000000: win:EventlogClassic: Classic {ABF1F586-2E50-4BA8-928D-49044E6F0DB7} Manifest Microsoft-Windows-Kernel-IO - channel: 0x10: Microsoft-Windows-Kernel-IO/Operational: Microsoft-Windows-Kernel-IO/Operational 0x8: System: System - keyword: 0x8000000000000000: Microsoft-Windows-Kernel-IO/Operational: Microsoft-Windows-Kernel-IO/Operational 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AC43300D-5FCC-4800-8E99-1BD3F85F0320} Manifest Microsoft-Windows-NTLM - channel: 0x10: Microsoft-Windows-NTLM/Operational: Microsoft-Windows-NTLM/Operational 0x11: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController 0x12: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController - keyword: 0x8000000000000000: Microsoft-Windows-NTLM/Operational: Microsoft-Windows-NTLM/Operational 0x4000000000000000: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController 0x2000000000000000: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AC52AD17-CC01-4F85-8DF5-4DCE4333C99B} Manifest Microsoft-Windows-USB-USBHUB3 - channel: 0x8: System: System 0x10: Microsoft-Windows-USB-USBHUB3-Analytic: This is the Analytic channel to which internal Analytic events from the USBHUB3 driver are sent. - keyword: 0x1: Default 0x2: USBError 0x4: IRP 0x8: Power 0x10: PnP 0x20: Performance 0x40: HeadersBusTrace 0x80: PartialDataBusTrace 0x100: FullDataBusTrace 0x200: StateMachine 0x400: Enumeration 0x800: VerifyDriver 0x1000: HWVerifyHost 0x2000: HWVerifyHub 0x4000: HWVerifyDevice 0x8000: Rundown 0x10000: Device 0x20000: Hub 0x40000: Compat 0x80000: ControllerCommand 0x400000000000: ms:Measures 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-USB-USBHUB3-Analytic: This is the Analytic channel to which internal Analytic events from the USBHUB3 driver are sent. - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AD5162D8-DAF0-4A25-88A7-01CBEB33902E} Manifest Microsoft-Windows-WPDClassInstaller - channel: 0x10: Microsoft-Windows-WPD-ClassInstaller/Operational: Operational 0x11: Microsoft-Windows-WPD-ClassInstaller/Analytic: Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-WPD-ClassInstaller/Operational: Operational 0x4000000000000000: Microsoft-Windows-WPD-ClassInstaller/Analytic: Analytic - level: 0x4: win:Informational: Information {AD8AA069-A01B-40A0-BA40-948D1D8DEDC5} Manifest Microsoft-Windows-WER-Diag - channel: 0x10: Microsoft-Windows-WER-Diag/Operational: Operational - keyword: 0x4000000000000: win:WDIDiag: WDI Diag 0x8000000000000000: Microsoft-Windows-WER-Diag/Operational: Operational - level: 0x4: win:Informational: Information {ADD0DE40-32B0-4B58-9D5E-938B2F5C1D1F} Manifest Microsoft-Windows-PerceptionRuntime - channel: 0x10: Microsoft-Windows-PerceptionRuntime/Operational - keyword: 0x8000000000000000: Microsoft-Windows-PerceptionRuntime/Operational {AE4BD3BE-F36F-45B6-8D21-BDD6FB832853} Manifest Microsoft-Windows-Audio - channel: 0x9: Application: Application 0x10: Microsoft-Windows-Audio/Operational 0x11: Microsoft-Windows-Audio/CaptureMonitor 0x12: Microsoft-Windows-Audio/Performance: Performance 0x13: Microsoft-Windows-Audio/PlaybackManager 0x14: Microsoft-Windows-Audio/GlitchDetection 0x15: Microsoft-Windows-Audio/Informational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-Audio/Operational 0x2000000000000000: Microsoft-Windows-Audio/CaptureMonitor 0x1000000000000000: Microsoft-Windows-Audio/Performance: Performance 0x800000000000000: Microsoft-Windows-Audio/PlaybackManager 0x400000000000000: Microsoft-Windows-Audio/GlitchDetection 0x200000000000000: Microsoft-Windows-Audio/Informational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {AE5CF422-786A-476A-AC96-753B05877C99} Manifest Microsoft-Windows-MSMPEG2VDEC - channel: 0x10: WINDOWS_MSMPEG2VDEC_CHANNEL - keyword: 0x8000000000000000: WINDOWS_MSMPEG2VDEC_CHANNEL - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9} Manifest Microsoft-Windows-GroupPolicy - channel: 0x8: System: System 0x10: Microsoft-Windows-GroupPolicy/Operational: Microsoft-Windows-GroupPolicy/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-GroupPolicy/Operational: Microsoft-Windows-GroupPolicy/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AEC5C129-7C10-407D-BE97-91A042C61AAA} Manifest Microsoft-Windows-Containers-Wcifs - channel: 0x10: Microsoft-Windows-Containers-Wcifs/Operational 0x11: Microsoft-Windows-Containers-Wcifs/Debug - keyword: 0x8000000000000000: Microsoft-Windows-Containers-Wcifs/Operational 0x4000000000000000: Microsoft-Windows-Containers-Wcifs/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {AEDD909F-41C6-401A-9E41-DFC33006AF5D} Manifest Microsoft-Windows-Smartcard-Trigger - level: 0x4: win:Informational: Information {AF0A5A6D-E009-46D4-8867-42F2240F8A72} Manifest Microsoft-Windows-HomeGroup-ListenerService - channel: 0x10: Microsoft-Windows-HomeGroup-ListenerService 0x11: Microsoft-Windows-HomeGroup Listener Service/Operational: Microsoft-Windows-HomeGroup Listener Service/Operational - keyword: 0x8000000000000000: Microsoft-Windows-HomeGroup-ListenerService 0x4000000000000000: Microsoft-Windows-HomeGroup Listener Service/Operational: Microsoft-Windows-HomeGroup Listener Service/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {AF2E340C-0743-4F5A-B2D3-2F7225D215DE} Manifest Microsoft-Windows-Netshell - channel: 0x10: Microsoft-Windows-NetShell/Performance - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NetShell/Performance - level: 0x4: win:Informational: Information {AF9CC194-E9A8-42BD-B0D1-834E9CFAB799} Manifest Microsoft-Windows-CertPolEng - channel: 0x10: Microsoft-Windows-CertPoleEng/Operational: Operation log - keyword: 0x8000000000000000: Microsoft-Windows-CertPoleEng/Operational: Operation log - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {AFE654EB-0A83-4EB4-948F-D4510EC39C30} Manifest Microsoft-Windows-Sdstor - channel: 0x10: Microsoft-Windows-Sdstor/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Sdstor/Analytic - level: 0x4: win:Informational: Information {B059B83F-D946-4B13-87CA-4292839DC2F2} Manifest Microsoft-Windows-User-Loader - channel: 0x9: Application: Application 0x10: Microsoft-Windows-User-Loader/Operational 0x11: Microsoft-Windows-User-Loader/Analytic - keyword: 0x10: USER_LOADER_KEYWORD_DEPRECATED_DLL: Deprecated dlls 0x20: USER_LOADER_FATAL_CALLBACK_EXCEPTION: Fatal user callback exception 0x40: USER_LOADER_KEYWORD_LOAD_FAILURE: A dll failed to load. 0x80: USER_LOADER_LAUNCH_16BIT_APP: Launch 16bit application 0x100: USER_LOADER_KEYWORD_COMPONENT_ON_DEMAND: Windows component on demand. 0x200: USER_LOADER_KEYWORD_LOAD_FATAL_ERROR: The Loader encountered a fatal error. 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-User-Loader/Operational 0x2000000000000000: Microsoft-Windows-User-Loader/Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {B0AA8734-56F7-41CC-B2F4-DE228E98B946} Manifest User32 - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System - level: 0x3: win:Warning: Warning {B1F01D1A-AE3A-4940-81EE-DDCCBAD380EF} Manifest Microsoft-Windows-StorageManagement-WSP-Health - channel: 0x10: Microsoft-Windows-StorageManagement/Debug - keyword: 0x8000000000000000: Microsoft-Windows-StorageManagement/Debug - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {B1F90B27-4551-49D6-B2BD-DFC6453762A6} Manifest Microsoft-Windows-PowerCpl - channel: 0x10: Microsoft-Windows-PowerCpl/Diagnostic - keyword: 0x10000: PowerCpl 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-PowerCpl/Diagnostic - level: 0x4: win:Informational: Information {B20E65AC-C905-4014-8F78-1B6A508142EB} Manifest Microsoft-Windows-MediaFoundation-Performance-Core - channel: 0x10: MediaFoundationPerformanceCore: Media Foundation Performance Core - keyword: 0x8000000000000000: MediaFoundationPerformanceCore: Media Foundation Performance Core - level: 0x4: win:Informational: Information {B28427D2-A745-43BA-8AEC-FFE3B94F97D3} Manifest Intel-SST-BUS - channel: 0x8: System: System 0x10: Intel-SST-BUS/Debug - keyword: 0x8000000000000000: System: System 0x4000000000000000: Intel-SST-BUS/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B2A40F1F-A05A-4DFD-886A-4C4F18C4334C} Manifest Microsoft-PerfTrack-IEFRAME - channel: 0x10: Microsoft-PerfTrack-IEFRAME/Diagnostic - keyword: 0x1: defunct 0x2: nonPerfTrack 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-PerfTrack-IEFRAME/Diagnostic - level: 0x4: win:Informational: Information {B2FCD41F-9A40-4150-8C92-B224B7D8C8AA} Manifest Microsoft-Windows-SpellChecker - channel: 0x10: Microsoft-Windows-SpellChecker/Analytic: Microsoft Windows Spellchecker Analytic Channel 0x8: System: System 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-SpellChecker/Analytic: Microsoft Windows Spellchecker Analytic Channel 0x4000000000000000: System: System 0x2000000000000000: Application: Application - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B3A0C2C8-83BB-4DDF-9F8D-4B22D3C38AD7} Manifest Microsoft-Windows-Kernel-PnP-Rundown - keyword: 0x1: SleepStudy - level: 0x4: win:Informational: Information {B3EEE223-D0A9-40CD-ADFC-50F1888138AB} Manifest Microsoft-Windows-WWAN-NDISUIO-EVENTS - channel: 0x10: Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic: WWAN NDISUIO Channel - keyword: 0x8000000000000000: Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic: WWAN NDISUIO Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B447B4DB-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Core - channel: 0x10: Microsoft-Windows-FileHistory-Core/Debug 0x11: Microsoft-Windows-FileHistory-Core/Analytic 0x12: Microsoft-Windows-FileHistory-Core/WHC 0x13: Microsoft-Windows-FileHistory-Engine/BackupLog - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-Core/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-Core/Analytic 0x2000000000000000: Microsoft-Windows-FileHistory-Core/WHC 0x1000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {B447B4DC-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Catalog - channel: 0x10: Microsoft-Windows-FileHistory-Catalog/Debug 0x11: Microsoft-Windows-FileHistory-Catalog/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-Catalog/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-Catalog/Analytic {B447B4DD-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-ConfigManager - channel: 0x10: Microsoft-Windows-FileHistory-ConfigManager/Debug 0x11: Microsoft-Windows-FileHistory-ConfigManager/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-ConfigManager/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-ConfigManager/Analytic {B447B4DE-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Engine - channel: 0x10: Microsoft-Windows-FileHistory-Engine/Debug 0x11: Microsoft-Windows-FileHistory-Engine/Analytic 0x12: Microsoft-Windows-FileHistory-Engine/BackupLog: File History backup log - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-Engine/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-Engine/Analytic 0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog: File History backup log - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {B447B4DF-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-EventListener - channel: 0x10: Microsoft-Windows-FileHistory-EventListener/Debug 0x11: Microsoft-Windows-FileHistory-EventListener/Analytic 0x12: Microsoft-Windows-FileHistory-Engine/BackupLog - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-EventListener/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-EventListener/Analytic 0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {B447B4E0-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Service - channel: 0x10: Microsoft-Windows-FileHistory-Service/Debug 0x11: Microsoft-Windows-FileHistory-Service/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-FileHistory-Service/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-Service/Analytic {B447B4E1-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-UI - channel: 0x10: Microsoft-Windows-FileHistory-UI-Events/Debug 0x11: Microsoft-Windows-FileHistory-UI-Events/Analytic 0x12: Microsoft-Windows-FileHistory-Engine/BackupLog - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-FileHistory-UI-Events/Debug 0x4000000000000000: Microsoft-Windows-FileHistory-UI-Events/Analytic 0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog {B44AEC44-38F4-4B59-8DF3-10306ABF19B2} Manifest Microsoft-Windows-mobsync - channel: 0x10: Microsoft-Windows-mobsync/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-mobsync/Diagnostic - level: 0x4: win:Informational: Information {B5325CD6-438E-4EC1-AA46-14F46F2570E4} Manifest Microsoft-Windows-Ras-AgileVpn - channel: 0x10: Microsoft-Windows-RasAgileVpn/Debug: Notification Channel 0x11: Microsoft-Windows-RasAgileVpn/Operational: Debug Channel - keyword: 0x1: AGILEVPN 0x2: AGILEVPN_ADMIN 0x8000000000000000: Microsoft-Windows-RasAgileVpn/Debug: Notification Channel 0x4000000000000000: Microsoft-Windows-RasAgileVpn/Operational: Debug Channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B5FD844A-01D4-4B10-A57F-58B13B561582} Manifest Microsoft-Windows-TabletPC-Platform-Input-Core - level: 0x4: win:Informational: Information {B65471E1-019D-436F-BC38-E15FA8E87F53} Manifest Microsoft-Windows-MediaFoundation-PlayAPI - channel: 0x10: Microsoft-Windows-MediaFoundation-PlayAPI/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-MediaFoundation-PlayAPI/Analytic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2} Manifest Microsoft-Windows-Kernel-EventTracing - channel: 0x10: Microsoft-Windows-Kernel-EventTracing/Admin: Microsoft-Windows-Kernel-EventTracing/Admin 0x11: Microsoft-Windows-Kernel-EventTracing/Analytic: Microsoft-Windows-Kernel-EventTracing/Analytic - keyword: 0x10: ETW_KEYWORD_SESSION: Session 0x20: ETW_KEYWORD_PROVIDER: Provider 0x40: ETW_KEYWORD_LOST_EVENT: Lost Event 0x80: ETW_KEYWORD_SOFT_RESTART 0x100: ETW_KEYWORD_CAPTURE_STATE 0x200: ETW_KEYWORD_REGISTRATION 0x400: ETW_KEYWORD_ENABLEMENT 0x800: ETW_KEYWORD_GROUP 0x8000000000000000: Microsoft-Windows-Kernel-EventTracing/Admin: Microsoft-Windows-Kernel-EventTracing/Admin 0x4000000000000000: Microsoft-Windows-Kernel-EventTracing/Analytic: Microsoft-Windows-Kernel-EventTracing/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {B6BFCC79-A3AF-4089-8D4D-0EECB1B80779} Manifest Microsoft-Windows-SystemEventsBroker - channel: 0x10: SystemEventsBroker: Debug - keyword: 0x1: TraceSebEvent: Trace SEB Event 0x8000000000000000: SystemEventsBroker: Debug - level: 0x4: win:Informational: Information {B6CC0D55-9ECC-49A8-B929-2B9022426F2A} Manifest Microsoft-Client-Licensing-Platform - channel: 0x10: Microsoft-Client-Licensing-Platform/Diagnostic 0x11: Microsoft-Client-Licensing-Platform/Debug 0x12: Microsoft-Client-Licensing-Platform/Admin - keyword: 0x1: SERVICE_KEYWORD: Service Keyword 0x2: SERVICE_PERF_KEYWORD: Service Perf Keyword 0x8000000000000000: Microsoft-Client-Licensing-Platform/Diagnostic 0x4000000000000000: Microsoft-Client-Licensing-Platform/Debug 0x2000000000000000: Microsoft-Client-Licensing-Platform/Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {B6D775EF-1436-4FE6-BAD3-9E436319E218} Manifest Microsoft-Windows-SenseIR - channel: 0x10: Microsoft-Windows-SenseIR/Operational - keyword: 0x8: Trigger 0x8000000000000000: Microsoft-Windows-SenseIR/Operational - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {B8197C10-845F-40CA-82AB-9341E98CFC2B} Manifest Microsoft-Windows-MediaFoundation-MFCaptureEngine - channel: 0x64: Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine: Media Foundation Capture Engine ETW Channel - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine: Media Foundation Capture Engine ETW Channel - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {B8D6861B-D20F-4EEC-BBAE-87E0DD80602B} Manifest Microsoft-Windows-COM-Perf - channel: 0x10: Microsoft-Windows-Runtime/CreateInstance 0x11: Microsoft-Windows-COM/CreateInstance 0x12: Microsoft-Windows-COM/ExtensionCatalog 0x13: Microsoft-Windows-COM/Call 0x14: Microsoft-Windows-COM/FreeUnusedLibrary 0x15: Microsoft-Windows-COM/ApartmentUninitialize 0x16: Microsoft-Windows-COM/ApartmentInitialize - keyword: 0x8000000000000000: Microsoft-Windows-Runtime/CreateInstance 0x4000000000000000: Microsoft-Windows-COM/CreateInstance 0x2000000000000000: Microsoft-Windows-COM/ExtensionCatalog 0x1000000000000000: Microsoft-Windows-COM/Call 0x800000000000000: Microsoft-Windows-COM/FreeUnusedLibrary 0x400000000000000: Microsoft-Windows-COM/ApartmentUninitialize 0x200000000000000: Microsoft-Windows-COM/ApartmentInitialize - level: 0x4: win:Informational: Information {B92CF7FD-DC10-4C6B-A72D-1613BF25E597} Manifest Microsoft-Windows-Wired-AutoConfig - channel: 0x10: Microsoft-Windows-Wired-AutoConfig/Operational: Microsoft-Windows-Wired-AutoConfig/Operational 0x11: Microsoft-Windows-Wired-AutoConfig/Diagnostic: Microsoft-Windows-Wired-AutoConfig/Diagnostic - keyword: 0x1: AutoConf 0x2: MSM 0x4: DeviceLayer 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational: Microsoft-Windows-Wired-AutoConfig/Operational 0x4000000000000000: Microsoft-Windows-Wired-AutoConfig/Diagnostic: Microsoft-Windows-Wired-AutoConfig/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {B97561FE-B27A-4C48-AA3E-7D3ADDC105B1} Manifest Microsoft-Windows-Data-Pdf - channel: 0x10: Microsoft-Windows-Data-Pdf/Debug - keyword: 0x10000: Windows.Data.Pdf 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Data-Pdf/Debug - level: 0x4: win:Informational: Information {B977CF02-76F6-DF84-CC1A-6A4B232322B6} Manifest Microsoft-Windows-EventCollector - channel: 0x9: Application: Application 0x8: System: System 0x10: ForwardedEvents: Forwarded Events 0x11: HardwareEvents 0x12: Microsoft-Windows-EventCollector/Operational: Operational 0x13: Microsoft-Windows-EventCollector/Debug: Debug - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: System: System 0x2000000000000000: ForwardedEvents: Forwarded Events 0x1000000000000000: HardwareEvents 0x800000000000000: Microsoft-Windows-EventCollector/Operational: Operational 0x400000000000000: Microsoft-Windows-EventCollector/Debug: Debug - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {B99317E5-89B7-4C0D-ABD1-6E705F7912DC} Manifest Microsoft-Windows-Containers-Wcnfs - channel: 0x10: Microsoft-Windows-Containers-Wcnfs/Operational 0x11: Microsoft-Windows-Containers-Wcnfs/Debug - keyword: 0x8000000000000000: Microsoft-Windows-Containers-Wcnfs/Operational 0x4000000000000000: Microsoft-Windows-Containers-Wcnfs/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B9B2DE3C-3FBD-4F42-8FF7-33C3BAD35FD4} Manifest Microsoft-Windows-UserDataAccess-UserDataApis - channel: 0x10: Microsoft-WindowsMobile-CommsApis-Channel - keyword: 0x1: Error 0x2: Performance 0x4: Debug 0x8: VoipCallCoordinator 0x10: VoipPhoneCall 0x20: AudioRouter 0x40: SmsIntercept 0x80: PhoneCallFilter 0x100: SmsFilter 0x400: OnlinePhotosAPI 0x800: EntityAPI 0x1000: MediaRTAPI 0x2000: ChatApis 0x4000000000: Warning 0x8000000000: StateTransition 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-WindowsMobile-CommsApis-Channel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {B9D5B35D-BBB8-4625-9450-F71A5D414F4F} Manifest Microsoft-Windows-Runtime-Networking-BackgroundTransfer - channel: 0x10: Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing - keyword: 0x1: keywords.KW_ALL: KW_ALL 0x8000000000000000: Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing - level: 0x2: win:Error: Error 0x4: win:Informational: Information {B9DA9FE6-AE5F-4F3E-B2FA-8E623C11DC75} Manifest Microsoft-Windows-Deplorch - channel: 0x10: Microsoft-Windows-Deplorch/Analytic 0x11: Setup - keyword: 0x1: keyPerformance: Performance 0x8000000000000000: Microsoft-Windows-Deplorch/Analytic 0x4000000000000000: Setup - level: 0x4: win:Informational: Information {BA093605-3909-4345-990B-26B746ADEE0A} Manifest Microsoft-Windows-CorruptedFileRecovery-Client - channel: 0x8: System: System 0x10: Microsoft-Windows-CorruptedFileRecovery-Client/Operational: Microsoft-Windows-CorruptedFileRecovery-Client/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-CorruptedFileRecovery-Client/Operational: Microsoft-Windows-CorruptedFileRecovery-Client/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {BA2FFB5C-E20A-4FB9-91B4-45F61B4B66A0} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Dynamic-Memory - channel: 0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose: Microsoft-Hyper-V-Guest-Drivers-Diagnose 0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug: Microsoft-Hyper-V-Guest-Drivers-Debug 0x12: Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic: Microsoft-Hyper-V-Guest-Drivers-Analytic 0x13: Microsoft-Windows-Hyper-V-Guest-Drivers/Operational: Microsoft-Hyper-V-Guest-Drivers-Operational 0x14: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin: Microsoft-Hyper-V-Guest-Drivers-Admin - keyword: 0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose: Microsoft-Hyper-V-Guest-Drivers-Diagnose 0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug: Microsoft-Hyper-V-Guest-Drivers-Debug 0x2000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic: Microsoft-Hyper-V-Guest-Drivers-Analytic 0x1000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Operational: Microsoft-Hyper-V-Guest-Drivers-Operational 0x800000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin: Microsoft-Hyper-V-Guest-Drivers-Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {BA723D81-0D0C-4F1E-80C8-54740F508DDF} Manifest Microsoft-Windows-AppxPackagingOM - channel: 0x10: Microsoft-Windows-AppxPackaging/Operational: Microsoft-Windows-AppxPackaging/Operational 0x11: Microsoft-Windows-AppxPackaging/Performance: Microsoft-Windows-AppxPackaging/Performance 0x12: Microsoft-Windows-AppxPackaging/Debug: Microsoft-Windows-AppxPackaging/Debug - keyword: 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-AppxPackaging/Operational: Microsoft-Windows-AppxPackaging/Operational 0x4000000000000000: Microsoft-Windows-AppxPackaging/Performance: Microsoft-Windows-AppxPackaging/Performance 0x2000000000000000: Microsoft-Windows-AppxPackaging/Debug: Microsoft-Windows-AppxPackaging/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {BABDA89A-4D5E-48EB-AF3D-E0E8410207C0} Manifest Microsoft-Windows-Memory-Diagnostic-Task-Handler - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07} Manifest Microsoft-Office-Word2 - channel: 0x10: WordChannel - keyword: 0x1: Glyph 0x2: Selection 0x4: DynamicDataExchange 0x8: Graphics 0x10: Commanding 0x20: Accessibility 0x40: ZoomScroll 0x80: LayoutDump 0x100: Comments 0x200: Print 0x400: ReadingMode 0x800: PropertyFormatting 0x1000: Proofing 0x2000: LiveDrag 0x4000: Clipboard 0x8000: GlobalGeneric 0x10000: CoreDocEdit 0x20000: UIM 0x40000: BulletsNumbering 0x80000: FindReplace 0x100000: TrackChanges 0x200000: FieldUpdate 0x400000: Boot 0x800000: WordMail 0x1000000: Rtc 0x2000000: WebScalingView 0x4000000: Edp 0x8000000: Diagnostics 0x10000000: DocCorruption 0x20000000: ObjectModel 0x40000000: AtMentions 0x80000000: AuthoringAssistant 0x8000000000000000: WordChannel - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: wls:Verbose10 0x32: wls:Verbose50 0x64: wls:Verbose100 0xc8: wls:Verbose200 {BB311100-2D9F-4CD3-B2D6-F4EA3839C548} Manifest Microsoft-Windows-PlayToManager - channel: 0x10: Microsoft-Windows-PlayToManager/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-PlayToManager/Analytic - level: 0x4: win:Informational: Information {BB8E7234-BBF4-48A7-8741-339206ED1DFB} Manifest Microsoft-Windows-InputSwitch - channel: 0x10: Microsoft-Windows-InputSwitch/Diagnostic - keyword: 0x10000: Status 0x20000: Perf 0x40000: InputSwitch_Keyword 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-InputSwitch/Diagnostic - level: 0x4: win:Informational: Information {BBBDD6A3-F35E-449B-A471-4D830C8EDA1F} Manifest Microsoft-Windows-Security-SPP-UX-GC - channel: 0x10: Microsoft-Windows-Security-SPP-UX-GC/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Security-SPP-UX-GC/Analytic - level: 0x4: win:Informational: Information {BBE94F36-F8DC-4C33-8227-81602B7A3D53} Manifest Microsoft-Windows-PNRPSvc - keyword: 0x80000000000000: win:EventlogClassic: Classic {BC0669E1-A10D-4A78-834E-1CA3C806C93B} Manifest Microsoft-Windows-CertificateServicesClient-Lifecycle-System - channel: 0x10: Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational - keyword: 0x8000000000000000: Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {BC97B970-D001-482F-8745-B8D7D5759F99} Manifest Microsoft-Windows-MediaFoundation-Platform - channel: 0x10: MediaFoundationDeviceProxy 0x11: MediaFoundationPlatform: Media Foundation Platform - keyword: 0x8000000000000000: MediaFoundationDeviceProxy 0x4000000000000000: MediaFoundationPlatform: Media Foundation Platform - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {BD12F3B8-FC40-4A61-A307-B7A013A069C1} Manifest Microsoft-Windows-Servicing - channel: 0x10: Setup 0x11: Microsoft-Windows-Servicing/Debug - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Setup 0x4000000000000000: Microsoft-Windows-Servicing/Debug - level: 0x3: win:Warning: Warning {BD1A62ED-263B-4A66-A574-1F43C79C64BE} Manifest Microsoft-Windows-Telephony-VoipRT - keyword: 0x1: Error 0x2: Performance 0x4: Debug 0x8: VoipCallCoordinator 0x10: VoipPhoneCall 0x4000000000: Warning 0x8000000000: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {BD2F4252-5E1E-49FC-9A30-F3978AD89EE2} Manifest Microsoft-Windows-GroupPolicyTriggerProvider - keyword: 0x1: Keyword_MachinePolicyPresentEvent 0x2: Keyword_UserPolicyPresentEvent - level: 0x4: win:Informational: Information {BD8FEA17-5549-4B49-AA03-1981D16396A9} Manifest Microsoft-Windows-Directory-Services-SAM-Utility - keyword: 0x1: Keyword_SamDatabaseChangeEvent - level: 0x4: win:Informational: Information {BDB462FC-A297-49A2-BF2E-4F1809E12ABC} Manifest Microsoft-Windows-TabletPC-MathRecognizer - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {BDD4B92E-19EF-4497-9C4A-E10E7FD2E227} Manifest Microsoft-Windows-IME-TIP - channel: 0x10: Microsoft-Windows-IME-TIP/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IME-TIP/Analytic - level: 0x4: win:Informational: Information {BE3A31EA-AA6C-4196-9DCC-9CA13A49E09F} Manifest Microsoft-Windows-Photo-Image-Codec - channel: 0x10: WINDOWS_WMPHOTO_CHANNEL - keyword: 0x8000000000000000: WINDOWS_WMPHOTO_CHANNEL - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {BE69781C-B63B-41A1-8E24-A4FC7B3FC498} Manifest Microsoft-Windows-Sens - channel: 0x10: Microsoft-Windows-Sens/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-Sens/Debug: Debug {BE932B00-0F8E-4386-AB89-873F7D0274AA} Manifest Microsoft-Windows-NetworkGCW - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {BE967569-E3C8-425B-AD0E-4F2C790B1848} Manifest Microsoft-Windows-Graphics-Printing3D - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {BEA18B89-126F-4155-9EE4-D36038B02680} Manifest Microsoft-Windows-CertificateServicesClient-Lifecycle-User - channel: 0x10: Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational - keyword: 0x8000000000000000: Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {BEC5E7A4-0527-42E8-8174-FABDE799AD7F} Manifest Microsoft-Windows-MCCS-InternetMailCsp {BEF2AA8E-81CD-11E2-A7BB-5EAC6188709B} Manifest Microsoft-Windows-Kernel-LiveDump - channel: 0x10: Microsoft-Windows-Kernel-LiveDump/Analytic: Microsoft-Windows-Kernel-LiveDump/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Kernel-LiveDump/Analytic: Microsoft-Windows-Kernel-LiveDump/Analytic - level: 0x4: win:Informational: Information {BF1DB390-3E67-4D4D-A287-8958044A3DB4} Manifest Microsoft-Windows-UI-Input-Inking - keyword: 0x10000: InkStrokeBuilding 0x20000: InkStrokeManipulation - level: 0x4: win:Informational: Information {BF406804-6AFA-46E7-8A48-6C357E1D6D61} Manifest Microsoft-Windows-COMRuntime - channel: 0x9: Application: Application 0x10: Microsoft-Windows-COMRuntime/Tracing 0x11: Microsoft-Windows-COMRuntime/Activations 0x12: Microsoft-Windows-COMRuntime/MessageProcessing - keyword: 0x1: CliModalLoop 0x2: ComCallWaitAnalysis 0x4: DropInputMessage 0x8: PrematureStubRundown 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-COMRuntime/Tracing 0x2000000000000000: Microsoft-Windows-COMRuntime/Activations 0x1000000000000000: Microsoft-Windows-COMRuntime/MessageProcessing - level: 0x2: win:Error: Error 0x4: win:Informational: Information {BF460FC6-45C5-4119-ADD3-E361A6E7D5AC} Manifest Microsoft-Windows-MCCS-EngineShared - keyword: 0x1: Error 0x2: Performance 0x4: Debug 0x10: Contacts 0x20: Photos 0x40: Feeds 0x80: Battery 0x400: Connect 0x4000000000: Warning - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {BFF15E13-81BF-45EE-8B16-7CFEAD00DA86} Manifest Microsoft-Windows-AppModel-State - channel: 0x9: Application: Application 0x10: Microsoft-Windows-AppModel-State/Debug: Microsoft-Windows-AppModel-State/Debug 0x11: Microsoft-Windows-AppModel-State/Diagnostic: Microsoft-Windows-AppModel-State/Diagnostic - keyword: 0x1: Structured: Structured State 0x2: UnstructuredReset: Unstructured Reset 0x4: OutOfMemory: Out Of Memory 0x8: ApiSetError: Apiset Error 0x10: WinRT: WinRT 0x20: DataStoreError: Low-level Data Store Error 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-AppModel-State/Debug: Microsoft-Windows-AppModel-State/Debug 0x2000000000000000: Microsoft-Windows-AppModel-State/Diagnostic: Microsoft-Windows-AppModel-State/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C02AFC2B-E24E-4449-AD76-BCC2C2575EAD} Manifest Microsoft-Windows-UAC-FileVirtualization - channel: 0x10: Microsoft-Windows-UAC-FileVirtualization/Operational: Microsoft-Windows-UAC-FileVirtualization/Operational - keyword: 0x8000000000000000: Microsoft-Windows-UAC-FileVirtualization/Operational: Microsoft-Windows-UAC-FileVirtualization/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {C03715CE-EA6F-5B67-4449-DA1D1E1AFEB8} Manifest Microsoft-Windows-PersistentMemory-ScmBus - channel: 0x10: Microsoft-Windows-PersistentMemory-ScmBus/Diagnose 0x11: Microsoft-Windows-PersistentMemory-ScmBus/Analytic 0x12: Microsoft-Windows-PersistentMemory-ScmBus/Operational 0x13: Microsoft-Windows-PersistentMemory-ScmBus/Certification - keyword: 0x8000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Diagnose 0x4000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Analytic 0x2000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Operational 0x1000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Certification - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C06ED57A-A7BD-42D7-B5FF-77A9DEC5732D} Manifest Microsoft-Windows-Diagnostics-PerfTrack-Counters - channel: 0x10: Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic - keyword: 0x10000: ProcessCounter: Process Counter 0x20000: FileCacheCounter: FileCache Counter 0x40000: PoolCounter: Pool Counter 0x80000: SessionPoolCounter: Session Pool Counter 0x100000: PoolTagCounter: Pool Tag Counter 0x200000: SessionPoolTagCounter: Session Pool Tag Counter 0x8000000000000000: Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic - level: 0x4: win:Informational: Information {C100BECC-D33A-4A4B-BF23-BBEF4663D017} Manifest Microsoft-Windows-WCN-Config-Registrar-Secure - channel: 0x10: Microsoft-Windows-WCN-Config-Registrar/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-WCN-Config-Registrar/Diagnostic - level: 0x4: win:Informational: Information {C100BECF-D33A-4A4B-BF23-BBEF4663D017} Manifest Microsoft-Windows-WCN-Config-Registrar - channel: 0x10: Microsoft-Windows-WCN-Config-Registrar/Diagnostic: Microsoft-Windows-WCN-Config-Registrar/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-WCN-Config-Registrar/Diagnostic: Microsoft-Windows-WCN-Config-Registrar/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {C18672D1-DC18-4DFD-91E4-170CF37160CF} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-IcSvc - channel: 0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose 0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - keyword: 0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose 0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C22D1B14-C242-49DE-9F17-1D76B8B9C458} Manifest Microsoft-Pef-WFP-MessageProvider - channel: 0x10: Microsoft-Pef-WFP-MessageProvider/Diagnostic: Microsoft-Pef-WFP-MessageProvider/Operational 0x8: System: System - keyword: 0x10000000: CaptureClearIPsec 0x20000000: CaptureClearIke 0x40000000: PacketStart 0x80000000: PacketEnd 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Pef-WFP-MessageProvider/Diagnostic: Microsoft-Pef-WFP-MessageProvider/Operational 0x4000000000000000: System: System - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {C26C4F3C-3F66-4E99-8F8A-39405CFED220} Manifest Microsoft-Windows-WHEA-Logger - channel: 0x8: System: System - keyword: 0x1: Init: WHEA Logging Service Initialization 0x2: Errlog: WHEA Error Event Logs 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C2F36562-A1E4-4BC3-A6F6-01A7ADB643E8} Manifest Microsoft-Windows-FeatureConfiguration - channel: 0x10: Microsoft-Windows-FeatureConfiguration/Analytic: Analytic 0x11: Microsoft-Windows-FeatureConfiguration/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-FeatureConfiguration/Analytic: Analytic 0x4000000000000000: Microsoft-Windows-FeatureConfiguration/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {C2F86198-03CA-4771-8D4C-CE6E15CBCA56} Manifest Intel-iaLPSS2-I2C - channel: 0x10: Intel-iaLPSS2-I2C/Debug: iaLPSS2_I2C Debug channel 0x11: Intel-iaLPSS2-I2C/Performance: iaLPSS2_I2C Performance channel - keyword: 0x8000000000000000: Intel-iaLPSS2-I2C/Debug: iaLPSS2_I2C Debug channel 0x4000000000000000: Intel-iaLPSS2-I2C/Performance: iaLPSS2_I2C Performance channel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C2FA0899-8A10-412B-A42E-9E5B284A2437} Manifest Microsoft-Windows-TabletPC-CoreInkRecognition - level: 0x4: win:Informational: Information {C374D21E-69B2-4CD7-9A25-62187C5A5619} Manifest Microsoft-Windows-WPD-MTPIP - channel: 0x10: Microsoft-Windows-WPD-MTPIP/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-MTPIP/Analytic: Analytic - level: 0x4: win:Informational: Information {C42A2738-2333-40A5-A32F-6ACC36449DCC} Manifest Microsoft-Windows-HttpLog - channel: 0x10: Microsoft-Windows-HttpService/Log: HTTP Log Channel - keyword: 0x1: HTTP_KEYWORD_LOG_RESPONSE: Flagged on all HTTP transactions 0x20000000000: HTTP_KEYWORD_LOG_PII_PRESENT: Flagged on all HTTP events dealing with potential personally identifiable information 0x8000000000000000: Microsoft-Windows-HttpService/Log: HTTP Log Channel - level: 0x4: win:Informational: Information {C44219D0-F344-11DF-A5E2-B307DFD72085} Manifest Microsoft-Windows-DirectComposition - channel: 0x10: Microsoft-Windows-DirectComposition/Diagnostic - keyword: 0x1: DCompBasic 0x2: DCompDiagnostic 0x4: DCompMemory 0x8: OfferReclaim 0x10: DCompSharedMemory 0x20: DCompAnimationTelemetry 0x40: DCompPrimitives 0x8000000000000000: Microsoft-Windows-DirectComposition/Diagnostic - level: 0x5: win:Verbose: Verbose {C4636A1E-7986-4646-BF10-7BC3B4A76E8E} Manifest Microsoft-Windows-StorPort - channel: 0x10: Microsoft-Windows-StorPort/Operational 0x11: Microsoft-Windows-Storage-Storport/Diagnose 0x12: Microsoft-Windows-Storage-Storport/Debug 0x13: Microsoft-Windows-Storage-Storport/Analytic 0x14: Microsoft-Windows-Storage-Storport/Operational 0x15: Microsoft-Windows-Storage-Storport/Admin 0x16: Microsoft-Windows-Storage-Storport/Health - keyword: 0x1: Reset 0x2: PortNotification 0x4: PauseResume 0x8: IoPerfNotification: IO Performance Notification from Miniport 0x10: Config 0x20: Perf 0x40: DeviceState: Device state 0x80: CommandTrace: Event logged by Command tracing 0x100: SMR: Shingled Magnetic Recording Drive Operations 0x80000: Logo_Performance: Logo Performance measurement 0x100000: IO_Performance: IO Performance measurement 0x200000: Read: Read request 0x400000: Write: Write request 0x800000: PagingRead: Paging Read request 0x1000000: PagingWrite: Paging Write request 0x2000000: LowMemoryRead: Low memory Read request 0x4000000: LowMemoryWrite: Low memory write request 0x8000000: NonReadWrite: Non-Read/Write request 0x10000000: PassThrough: Pass-Through request 0x20000000: Flush: Flush request 0x40000000: IOCTL: Device I/O control request 0x80000000: WMI: WMI request 0x100000000: Power: Power request 0x200000000: PnP: PnP request 0x400000000: Enum: Device enumeration handling 0x800000000: Queue: Queue-related operation 0x1000000000: ISR: Interrupt Service Routine processing 0x2000000000: DPC: Deferred Procedure Call handling 0x4000000000: Timer: Timer-related operation 0x8000000000: Protocol: Bus protocol specific operation 0x10000000000: Target: Target-related operation 0x20000000000: Adapter: Controller or Host Bus Adapter related operation 0x40000000000: Retry: Retry handling 0x80000000000: Timeout: Timeout handling 0x100000000000: ReSet: Reset handling 0x200000000000: Miniport: Event logged by Miniport 0x800000000000: Test: Testing-specific processing 0x8000000000000000: Microsoft-Windows-StorPort/Operational 0x4000000000000000: Microsoft-Windows-Storage-Storport/Diagnose 0x2000000000000000: Microsoft-Windows-Storage-Storport/Debug 0x1000000000000000: Microsoft-Windows-Storage-Storport/Analytic 0x800000000000000: Microsoft-Windows-Storage-Storport/Operational 0x400000000000000: Microsoft-Windows-Storage-Storport/Admin 0x200000000000000: Microsoft-Windows-Storage-Storport/Health - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C4EFC9BB-2570-4821-8923-1BAD317D2D4B} Manifest Microsoft-Windows-Security-SPP-UX-Notifications - channel: 0x10: Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter - keyword: 0x8000000000000000: Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter - level: 0x3: win:Warning: Warning {C514638F-7723-485B-BCFC-96565D735D4A} Manifest Microsoft-Windows-Kernel-Acpi - channel: 0x10: Microsoft-Windows-Kernel-Acpi/Diagnostic - keyword: 0x1: acpi:Diagnostic 0x2: acpi:Thermal 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-Kernel-Acpi/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {C651F5F6-1C0D-492E-8AE1-B4EFD7C9D503} Manifest Microsoft-Windows-Application Server-Applications - channel: 0x10: Microsoft-Windows-Application Server-Applications/Admin: Admin 0x11: Microsoft-Windows-Application Server-Applications/Operational: Operational 0x12: Microsoft-Windows-Application Server-Applications/Analytic: Analytic 0x13: Microsoft-Windows-Application Server-Applications/Debug: Debug - keyword: 0x1: ServiceHost: Service Host 0x2: Serialization: Serialization 0x4: ServiceModel: ServiceModel 0x8: Transaction: Transaction 0x10: Security: Security 0x20: WCFMessageLogging: WCF Message Logging 0x40: WFTracking: WF Tracking 0x80: WebHost: Web Host 0x100: HTTP: HTTP Transport 0x200: TCP: TCP Transport 0x400: TransportGeneral: Transport General 0x800: ActivationServices: Activation Services 0x1000: Channel: Channel 0x2000: WebHTTP: Web HTTP 0x4000: Discovery: Discovery 0x8000: RoutingServices: Routing Services 0x10000: Infrastructure: Infrastructure 0x20000: EndToEndMonitoring: End-to-End Monitoring 0x40000: HealthMonitoring: Health Monitoring 0x80000: Troubleshooting: Troubleshooting 0x100000: UserEvents: User Events 0x200000: Threading: Threading 0x400000: Quota: Quota 0x1000000: WFRuntime: Workflow Runtime 0x2000000: WFActivities: Workflow Activities 0x4000000: WFServices: Workflow ServiceHost 0x8000000: WFInstanceStore: Workflow InstanceStore 0x8000000000000000: Microsoft-Windows-Application Server-Applications/Admin: Admin 0x4000000000000000: Microsoft-Windows-Application Server-Applications/Operational: Operational 0x2000000000000000: Microsoft-Windows-Application Server-Applications/Analytic: Analytic 0x1000000000000000: Microsoft-Windows-Application Server-Applications/Debug: Debug - level: 0x0: win:LogAlways: Log Always 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {C6BF6832-F7BD-4151-AC21-753CE4707453} Manifest Microsoft-Windows-International-RegionalOptionsControlPanel - channel: 0x10: Microsoft-Windows-International-RegionalOptionsControlPanel/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-International-RegionalOptionsControlPanel/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {C76BAA63-AE81-421C-B425-340B4B24157F} Manifest Microsoft-Windows-TerminalServices-RemoteConnectionManager - channel: 0x8: System: System 0x10: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin 0x11: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic 0x12: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational 0x13: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug - keyword: 0x10000: PerfInstrumentation 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin 0x2000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic 0x1000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational 0x800000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {C7BDE69A-E1E0-4177-B6EF-283AD1525271} Manifest Microsoft-Windows-Kernel-Disk - channel: 0x10: Microsoft-Windows-Kernel-Disk/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Kernel-Disk/Analytic - level: 0x4: win:Informational: Information {C7E089AC-BA2A-11E0-9AF7-68384824019B} Manifest Microsoft-Windows-Crypto-BCrypt - channel: 0x10: Microsoft-Windows-Crypto-BCRYPT/Analytic: Microsoft-Windows-Crypto-BCrypt/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Crypto-BCRYPT/Analytic: Microsoft-Windows-Crypto-BCrypt/Analytic - level: 0x2: win:Error: Error {C8517E09-BEA2-5BB6-BEF3-50B4C91C431E} Manifest Microsoft-Windows-WinML {C882FF1D-7585-4B33-B135-95C577179137} Manifest Microsoft-Windows-Magnification - channel: 0x10: Microsoft-Windows-Magnification/Diagnostic - keyword: 0x1: Magnification 0x8000000000000000: Microsoft-Windows-Magnification/Diagnostic - level: 0x4: win:Informational: Information {C88A4EF5-D048-4013-9408-E04B7DB2814A} Manifest Microsoft-Windows-USB-USBPORT - channel: 0x10: Microsoft-Windows-USB-USBPORT/Diagnostic - keyword: 0x1: Diagnostic 0x2: PowerDiagnostics 0x4: PerfDiagnostics 0x400000000000: ms:Measures 0x8000000000000000: Microsoft-Windows-USB-USBPORT/Diagnostic - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {C89B991E-3B48-49B2-80D3-AC000DFC9749} Manifest Microsoft-Windows-Documents - channel: 0x10: Microsoft-Windows-Documents/Performance: Performance - keyword: 0x1: DocPerf 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Documents/Performance: Performance - level: 0x4: win:Informational: Information {C8DBF506-E3D3-4822-930D-84C557EB6247} Manifest Microsoft-Windows-SruMon - channel: 0x10: Microsoft-Windows-SruMon/Diagnostic - keyword: 0x1: KeywordSruMonDebugTrace: SruMonDebugTrace 0x2: KeywordSruMonDebugSequenceTrace: SruMonDebugSequenceTrace 0x4: KeywordSruMonDebugSequenceErrorTrace: SruMonDebugSequenceErrorTrace 0x8: KeywordSruMonDebugDBResetTrace: SruMonDebugServiceTrace 0x10: KeywordSruMonNWAggregationTrace: SruMonNWAggregationTrace 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-SruMon/Diagnostic - level: 0x2: win:Error: Error 0x5: win:Verbose: Verbose {C914F0DF-835A-4A22-8C70-732C9A80C634} Manifest Microsoft-Windows-StartupRepair - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {C91EF675-842F-4FCF-A5C9-6EA93F2E4F8B} Manifest Microsoft-Windows-IPSEC-SRV - channel: 0x10: Microsoft-Windows-IPSEC-SRV/Diagnostic - keyword: 0x10000: PolicyAgent 0x8000000000000000: Microsoft-Windows-IPSEC-SRV/Diagnostic - level: 0x4: win:Informational: Information {C9BDB4EB-9287-4C8E-8378-6896F0D1C5EF} Manifest Microsoft-Windows-HomeGroup-ProviderService - channel: 0x10: Microsoft-Windows-HomeGroup Provider Service/Operational: Microsoft-Windows-HomeGroup Provider Service/Operational 0x11: Microsoft-Windows-HomeGroup Provider Service Performance/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-HomeGroup Provider Service/Operational: Microsoft-Windows-HomeGroup Provider Service/Operational 0x4000000000000000: Microsoft-Windows-HomeGroup Provider Service Performance/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {CA11C036-0102-4A2D-A6AD-F03CFED5D3C9} Manifest Microsoft-Windows-DXGI - channel: 0x10: Microsoft-Windows-DXGI/Analytic 0x11: Microsoft-Windows-DXGI/Logging - keyword: 0x1: Objects 0x2: Events 0x4: JournalEntries 0x8000000000000000: Microsoft-Windows-DXGI/Analytic 0x4000000000000000: Microsoft-Windows-DXGI/Logging - level: 0x0: win:LogAlways: Log Always {CA4E628D-8567-4896-AB6B-835B221F373F} Manifest Microsoft-Windows-Search - keyword: 0x80000000000000: win:EventlogClassic: Classic {CA5BA219-C0D4-4EFA-9CEB-72AFF92672B0} Manifest Microsoft-Windows-WlanPref - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B} Manifest Microsoft-Windows-PerfNet - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {CB017CD2-1F37-4E65-82BC-3E91F6A37559} Manifest Volsnap - channel: 0x8: System: System - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {CB070027-1534-4CF3-98EA-B9751F508376} Manifest Microsoft-Windows-LanGPA - channel: 0x10: Microsoft-Windows-Wired-AutoConfig/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational - level: 0x4: win:Informational: Information {CB587AD1-CC35-4EF1-AD93-36CC82A2D319} Manifest Microsoft-Windows-ATAPort - channel: 0x10: Microsoft-Windows-ATAPort/SATA-LPM 0x11: Microsoft-Windows-ATAPort/General 0x12: Microsoft-Windows-Storage-ATAPort/Diagnose 0x13: Microsoft-Windows-Storage-ATAPort/Debug 0x14: Microsoft-Windows-Storage-ATAPort/Analytic 0x15: Microsoft-Windows-Storage-ATAPort/Operational 0x16: Microsoft-Windows-Storage-ATAPort/Admin - keyword: 0x1: AllIORequests 0x2: DeviceEnumeration 0x4: IOErrors 0x8: Reset 0x10: XferModeChange 0x20: LinkPowerMgmt 0x40: GetTelemetry 0x100000: IO_Performance: IO Performance measurement 0x200000: Read: Read request 0x400000: Write: Write request 0x800000: PagingRead: Paging Read request 0x1000000: PagingWrite: Paging Write request 0x2000000: LowMemoryRead: Low memory Read request 0x4000000: LowMemoryWrite: Low memory write request 0x8000000: NonReadWrite: Non-Read/Write request 0x10000000: PassThrough: Pass-Through request 0x20000000: Flush: Flush request 0x40000000: IOCTL: Device I/O control request 0x80000000: WMI: WMI request 0x100000000: Power: Power request 0x200000000: PnP: PnP request 0x400000000: Enum: Device enumeration handling 0x800000000: Queue: Queue-related operation 0x1000000000: ISR: Interrupt Service Routine processing 0x2000000000: DPC: Deferred Procedure Call handling 0x4000000000: Timer: Timer-related operation 0x8000000000: Protocol: Bus protocol specific operation 0x10000000000: Target: Target-related operation 0x20000000000: Adapter: Controller or Host Bus Adapter related operation 0x40000000000: Retry: Retry handling 0x80000000000: Timeout: Timeout handling 0x100000000000: ReSet: Reset handling 0x200000000000: MiniportInterface: Activity between port and miniport 0x800000000000: Test: Testing-specific processing 0x8000000000000000: Microsoft-Windows-ATAPort/SATA-LPM 0x4000000000000000: Microsoft-Windows-ATAPort/General 0x2000000000000000: Microsoft-Windows-Storage-ATAPort/Diagnose 0x1000000000000000: Microsoft-Windows-Storage-ATAPort/Debug 0x800000000000000: Microsoft-Windows-Storage-ATAPort/Analytic 0x400000000000000: Microsoft-Windows-Storage-ATAPort/Operational 0x200000000000000: Microsoft-Windows-Storage-ATAPort/Admin - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {CBA16CF2-2FAB-49F8-89AE-894E718649E7} Manifest Microsoft-Windows-Processor-Aggregator - level: 0x4: win:Informational: Information {CBA5F63C-E2CF-4B36-8305-BDE1311924FC} Manifest Microsoft-Windows-Websocket-Protocol-Component - channel: 0x10: Microsoft-Windows-Websocket-Protocol-Component/Tracing - keyword: 0x1: keywords.KW_ALL: KW_ALL 0x8000000000000000: Microsoft-Windows-Websocket-Protocol-Component/Tracing - level: 0x2: win:Error: Error 0x4: win:Informational: Information {CBDA4DBF-8D5D-4F69-9578-BE14AA540D22} Manifest Microsoft-Windows-AppLocker - channel: 0x10: Microsoft-Windows-AppLocker/EXE and DLL: Microsoft-Windows-AppLocker/EXE and DLL 0x11: Microsoft-Windows-AppLocker/MSI and Script: Microsoft-Windows-AppLocker/MSI and Script 0x12: Microsoft-Windows-AppLocker/Packaged app-Execution: Microsoft-Windows-AppLocker/Packaged app-Execution 0x13: Microsoft-Windows-AppLocker/Packaged app-Deployment: Microsoft-Windows-AppLocker/Packaged app-Deployment - keyword: 0x8000000000000000: Microsoft-Windows-AppLocker/EXE and DLL: Microsoft-Windows-AppLocker/EXE and DLL 0x4000000000000000: Microsoft-Windows-AppLocker/MSI and Script: Microsoft-Windows-AppLocker/MSI and Script 0x2000000000000000: Microsoft-Windows-AppLocker/Packaged app-Execution: Microsoft-Windows-AppLocker/Packaged app-Execution 0x1000000000000000: Microsoft-Windows-AppLocker/Packaged app-Deployment: Microsoft-Windows-AppLocker/Packaged app-Deployment - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {CC311F1F-623C-4CA4-BA44-A458016555E8} Manifest Microsoft-Windows-Tethering-Manager - channel: 0x10: Microsoft-Windows-Tethering-Manager/Analytic - keyword: 0x1: DiagTrack 0x2: PerfCounter 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Tethering-Manager/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {CD7CF0D0-02CC-4872-9B65-0DBA0A90EFE8} Manifest Error Instrument - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application - level: 0x4: win:Informational: Information {CD9C6198-BF73-4106-803B-C17D26559018} Manifest Microsoft-Windows-ReFS - channel: 0x8: System: System 0x10: Microsoft-Windows-ReFS/Operational - keyword: 0x1: VolumeMount 0x2: VolumeFillRatio 0x200000: Statistics: Statistics 0x8000000000000: win:SQM: SQM 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-ReFS/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {CDC05E28-C449-49C6-B9D2-88CF761644DF} Manifest Microsoft-Windows-Power-Troubleshooter - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x4: win:Informational: Information {CDEAD503-17F5-4A3E-B7AE-DF8CC2902EB9} Manifest Microsoft-Windows-NDIS - channel: 0x10: Microsoft-Windows-NDIS/Operational: Microsoft-Windows-NDIS/Operational 0x11: Microsoft-Windows-NDIS/Diagnostic: Microsoft-Windows-NDIS/Diagnostic 0x8: System: System - keyword: 0x1: Request 0x2: PnP 0x4: Init 0x8: Bind 0x10: Power 0x20: WMI 0x40: Interface 0x80: Port 0x100: WorkItem 0x200: Indication 0x400: SendM 0x800: Protocol 0x1000: Log 0x2000: ReceiveThrottling 0x4000: LwtDiagnostic 0x8000: SleepStudy 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-NDIS/Operational: Microsoft-Windows-NDIS/Operational 0x4000000000000000: Microsoft-Windows-NDIS/Diagnostic: Microsoft-Windows-NDIS/Diagnostic 0x2000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {CE20D1C3-A247-4C41-BCB8-3C7F52C8B805} Manifest Microsoft-Windows-Kernel-Tm-Trigger - level: 0x4: win:Informational: Information {CE8DEE0B-D539-4000-B0F8-77BED049C590} Manifest Microsoft-Windows-UserModePowerService - channel: 0x10: Microsoft-Windows-UserModePowerService/Diagnostic 0x8: System: System - keyword: 0x1: PowerMeter 0x2: EnergyMeter 0x4: SmartUserPresence 0x8: SleepStudy 0x10: BrightnessTransition 0x20: AdaptiveStandby 0x40: KwSleepStudy 0x8000000000000000: Microsoft-Windows-UserModePowerService/Diagnostic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {CF3F502E-B40D-4071-996F-00981EDF938E} Manifest Microsoft-Windows-PrintBRM - channel: 0x10: Microsoft-Windows-PrintBRM/Admin: Admin - keyword: 0x1: PRINT_BRM_KEYWORD: Print BRM 0x2: PRINT_QUEUE_KEYWORD: Print Queue 0x4: PRINT_DRIVER_KEYWORD: Print Driver 0x8: PRINT_PROC_KEYWORD: Print Processor 0x10: PRINT_LANG_MON_KEYWORD: Printer Language Monitor 0x20: PRINT_FORM_KEYWORD: Print Form 0x40: PRINT_PORT_KEYWORD: Printer Port 0x8000000000000000: Microsoft-Windows-PrintBRM/Admin: Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {CFAA5446-C6C4-4F5C-866F-31C9B55B962D} Manifest Microsoft-Windows-DCLocator - channel: 0x10: Microsoft-Windows-DCLocator/Debug - keyword: 0x2: misc 0x10: mailslot 0x20: site 0x100: critical 0x200: session_setup 0x4000: dns 0x20000: dns_more 0x2000000: mailslot_text 0x8000000: site_more 0x8000000000000000: Microsoft-Windows-DCLocator/Debug {CFC18EC0-96B1-4EBA-961B-622CAEE05B0A} Manifest Microsoft-Windows-Diagnostics-Performance - channel: 0x10: Microsoft-Windows-Diagnostics-Performance/Operational: Operational 0x11: Microsoft-Windows-Diagnostics-Performance/Diagnostic: Diagnostic 0x12: Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback: Diagnostic-Loopback - keyword: 0x10000: EventLog: Event Log 0x20000: BootStatus 0x40000: ShellStatus 0x80000: StandbyStatus 0x100000: ScenarioStatus 0x200000: BootLoopback 0x400000: ShutdownStatus 0x800000: ResolverLoopback 0x1000000: SecondaryLogonStatus 0x2000000: SecondaryLogonLoopback 0x8000000000000000: Microsoft-Windows-Diagnostics-Performance/Operational: Operational 0x4000000000000000: Microsoft-Windows-Diagnostics-Performance/Diagnostic: Diagnostic 0x2000000000000000: Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback: Diagnostic-Loopback - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {CFEB0608-330E-4410-B00D-56D8DA9986E6} Manifest Microsoft-Antimalware-AMFilter - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {D02A9C27-79B8-40D6-9B97-CF3F8B7B5D60} Manifest Microsoft-Windows-AppIDServiceTrigger - keyword: 0x1: AppIdTriggerKeyword - level: 0x4: win:Informational: Information {D0E22EFC-AC66-4B25-A72D-382736B5E940} Manifest Microsoft-Windows-Spell-Checking - channel: 0x10: Microsoft-Windows-Spell-Checking/Analytic: Microsoft Windows Spell Checking Facility Analytic Channel 0x8: System: System 0x9: Application: Application - keyword: 0x8000000000000000: Microsoft-Windows-Spell-Checking/Analytic: Microsoft Windows Spell Checking Facility Analytic Channel 0x4000000000000000: System: System 0x2000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {D17B213A-C505-49C9-98CC-734253EF65D4} Manifest Microsoft-Windows-msmpeg2venc - channel: 0x10: Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic: Events from the MPEG-2 Video Encoder MFT - keyword: 0x400000000000: Encoder_Control: Events dealing with the control of the encoder. 0x800000000000: Sample_Processing: Events that deal with the processing of samples 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000: win:SQM: SQM 0x8000000000000000: Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic: Events from the MPEG-2 Video Encoder MFT - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {D17FFF2F-392D-478C-A41D-737A216EB2A4} Manifest Microsoft-Windows-IE-F12-Provider - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {D1BC9AFF-2ABF-4D71-9146-ECB2A986EB85} Manifest Microsoft-Windows-Windows Firewall With Advanced Security - channel: 0x10: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall 0x11: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity 0x12: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose 0x13: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose 0x14: Network Isolation Operational: Network Isolation Operational - keyword: 0x10: ut:AOAC 0x20000000000: ut:PiiPresent 0x8000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall 0x4000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity 0x2000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose 0x1000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose 0x800000000000000: Network Isolation Operational: Network Isolation Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D1D93EF7-E1F2-4F45-9943-03D245FE6C00} Manifest Microsoft-Windows-Kernel-Memory - channel: 0x10: Microsoft-Windows-Kernel-Memory/Analytic - keyword: 0x20: KERNEL_MEM_KEYWORD_MEMINFO 0x40: KERNEL_MEM_KEYWORD_MEMINFO_EX 0x80: KERNEL_MEM_KEYWORD_WS_SWAP 0x100: KERNEL_MEM_KEYWORD_ACG 0x8000000000000000: Microsoft-Windows-Kernel-Memory/Analytic - level: 0x4: win:Informational: Information {D1F688BF-012F-4AEC-A38C-E7D4649F8CD2} Manifest Microsoft-Windows-UserDataAccess-UserDataUtils - keyword: 0x1: Error 0x2: Performance 0x4: UserDataAccessUtils 0x8: ServiceBase: ServiceBase 0x100: debug: Debug 0x4000000000: Warning 0x8000000000: StateTransition 0x400000000000: ms:Measures - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {D2402FDE-7526-5A7B-501A-25DC7C9C282E} Manifest Microsoft-Windows-Media-Protection-PlayReady-Performance - channel: 0x10: PlayReadyPerformanceChannel: PlayReady-Performance - keyword: 0x100: Telemetry 0x200: DiagTrack 0x8000000000000000: PlayReadyPerformanceChannel: PlayReady-Performance - level: 0x5: win:Verbose: Verbose {D29D56EA-4867-4221-B02E-CFD998834075} Manifest Microsoft-Windows-Dwm-Dwm - channel: 0x10: Microsoft-Windows-Dwm-Dwm/Diagnostic - keyword: 0x1: DwmExe 0x2: DwmExeGhosting 0x8000000000000000: Microsoft-Windows-Dwm-Dwm/Diagnostic - level: 0x4: win:Informational: Information {D2E990DA-8504-4702-A5E5-367FC2F823BF} Manifest Microsoft-Windows-All-User-Install-Agent - channel: 0x10: Microsoft-Windows-All-User-Install-Agent/Admin: Admin - keyword: 0x8000000000000000: Microsoft-Windows-All-User-Install-Agent/Admin: Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D37687E7-8BF0-4D11-B589-A7ABE080756A} Manifest Microsoft-Windows-SleepStudy - channel: 0x10: Microsoft-Windows-SleepStudy/Diagnostic - keyword: 0x1: sleepstudy 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-SleepStudy/Diagnostic - level: 0x4: win:Informational: Information {D386CC7A-620A-41C1-ABF5-55018C6C699A} Manifest Intel-iaLPSS-GPIO - channel: 0x10: Intel-IALPSS-GPIO/Analytic: Analytic Channel 0x8: System: System - keyword: 0x8000000000000000: Intel-IALPSS-GPIO/Analytic: Analytic Channel 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D38FB874-33E4-4DCF-911E-1B53BB106D53} Manifest Microsoft-Windows-DLNA-Namespace - channel: 0x10: Microsoft-Windows-DLNA-Namespace/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-DLNA-Namespace/Analytic - level: 0x4: win:Informational: Information {D39B6336-CFCB-483B-8C76-7C3E7D02BCB8} Manifest Microsoft-Windows-Build-RegDll - channel: 0x10: Microsoft-Windows-Regsvr32/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Regsvr32/Operational - level: 0x4: win:Informational: Information {D3F29EDA-805D-428A-9902-B259B937F84B} Manifest Microsoft-Windows-RetailDemo - channel: 0x10: Microsoft-Windows-RetailDemo/Admin: Admin 0x11: Microsoft-Windows-RetailDemo/Operational: Operational - keyword: 0x1: Service 0x8000000000000000: Microsoft-Windows-RetailDemo/Admin: Admin 0x4000000000000000: Microsoft-Windows-RetailDemo/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D4263C98-310C-4D97-BA39-B55354F08584} Manifest Microsoft-Windows-COM - channel: 0x10: Microsoft-Windows-COM/Analytic - keyword: 0x10: COM_CLASSNOTREG_ERROR: Deprecated COM interfaces 0x8000000000000000: Microsoft-Windows-COM/Analytic - level: 0x4: win:Informational: Information {D48CE617-33A2-4BC3-A5C7-11AA4F29619E} Manifest Microsoft-Windows-SMBServer - channel: 0x10: Microsoft-Windows-SMBServer/Performance: Microsoft-Windows-SMBServer/Performance 0x11: Microsoft-Windows-SMBServer/Analytic: Microsoft-Windows-SMBServer/Analytic 0x12: Microsoft-Windows-SMBServer/Operational: Microsoft-Windows-SMBServer/Operational 0x13: Microsoft-Windows-SMBServer/Diagnostic: Microsoft-Windows-SMBServer/Diagnostic 0x14: Microsoft-Windows-SMBServer/Security: Microsoft-Windows-SMBServer/Security 0x15: Microsoft-Windows-SMBServer/Connectivity: Microsoft-Windows-SMBServer/Connectivity 0x16: Microsoft-Windows-SMBServer/Audit: Microsoft-Windows-SMBServer/Audit - keyword: 0x1: Request 0x2: Response 0x4: Transition 0x8: Operational 0x10: Connection 0x20: Session 0x40: TreeConnect 0x80: File 0x100: Share 0x200: Nsi 0x1000: Correlation 0x40000000: PacketStart 0x80000000: PacketEnd 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x40000000000: ut:Packet 0x800000000000: PduFull 0x10000000000000: win:AuditFailure: Audit Failure 0x8000000000000000: Microsoft-Windows-SMBServer/Performance: Microsoft-Windows-SMBServer/Performance 0x4000000000000000: Microsoft-Windows-SMBServer/Analytic: Microsoft-Windows-SMBServer/Analytic 0x2000000000000000: Microsoft-Windows-SMBServer/Operational: Microsoft-Windows-SMBServer/Operational 0x1000000000000000: Microsoft-Windows-SMBServer/Diagnostic: Microsoft-Windows-SMBServer/Diagnostic 0x800000000000000: Microsoft-Windows-SMBServer/Security: Microsoft-Windows-SMBServer/Security 0x400000000000000: Microsoft-Windows-SMBServer/Connectivity: Microsoft-Windows-SMBServer/Connectivity 0x200000000000000: Microsoft-Windows-SMBServer/Audit: Microsoft-Windows-SMBServer/Audit - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {D49918CF-9489-4BF1-9D7B-014D864CF71F} Manifest Microsoft-Windows-ProcessStateManager - channel: 0x10: Microsoft-Windows-ProcessStateManager/Diagnostic - keyword: 0x1: StateChange 0x2: Policy 0x4: PriorityChange 0x8: Rundown 0x10: ProcessRegister 0x8000000000000000: Microsoft-Windows-ProcessStateManager/Diagnostic - level: 0x4: win:Informational: Information {D4AEAC44-AD44-456E-9C90-33F8CDCED6AF} Manifest Intel-iaLPSS-I2C - channel: 0x10: Intel-IALPSS-I2C/Analytic: Analytic Channel 0x8: System: System - keyword: 0x8000000000000000: Intel-IALPSS-I2C/Analytic: Analytic Channel 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D4AFA0DC-4DD1-40AF-AFCE-CB0D0E6736A7} Manifest Microsoft-Windows-WlanDlg - channel: 0x10: Microsoft-Windows-WlanDlg/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WlanDlg/Analytic - level: 0x4: win:Informational: Information {D5268C02-6F51-436F-983B-74F2EFBFAF3A} Manifest Microsoft-Windows-IME-TCTIP - channel: 0x10: Microsoft-Windows-IME-TCTIP/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IME-TCTIP/Analytic - level: 0x4: win:Informational: Information {D53270E3-C8CF-4707-958A-DAD20C90073C} Manifest Microsoft-Windows-WindowsColorSystem - channel: 0x10: Microsoft-Windows-WindowsColorSystem/Operational 0x11: Microsoft-Windows-WindowsColorSystem/Debug - keyword: 0x1: wcse:Lino: CMM for ICC profiles 0x2: wcse:Cite: CMM for WCS profiles 0x8000000000000000: Microsoft-Windows-WindowsColorSystem/Operational 0x4000000000000000: Microsoft-Windows-WindowsColorSystem/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D5C25F9A-4D47-493E-9184-40DD397A004D} Manifest Microsoft-Windows-Winsock-WS2HELP - channel: 0x10: Microsoft-Windows-Winsock-WS2HELP/Operational: Microsoft-Windows-Winsock Catalog Change/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Winsock-WS2HELP/Operational: Microsoft-Windows-Winsock Catalog Change/Operational {D5F7235B-48E2-4E9C-92FE-0E4950ABA9E8} Manifest Microsoft-Windows-WEPHOSTSVC - channel: 0x10: Microsoft-Windows-WEPHOSTSVC/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-WEPHOSTSVC/Operational: Operational - level: 0x1: win:Critical: Critical 0x4: win:Informational: Information {D6F68875-CDF5-43A5-A3E3-53FFD683311C} Manifest Microsoft-Windows-CorruptedFileRecovery-Server - channel: 0x8: System: System 0x10: Microsoft-Windows-CorruptedFileRecovery-Server/Operational: Microsoft-Windows-CorruptedFileRecovery-Server/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-CorruptedFileRecovery-Server/Operational: Microsoft-Windows-CorruptedFileRecovery-Server/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {D710D46C-235D-4798-AC20-9F83E1DCD557} Manifest Microsoft-Windows-EapMethods-Ttls - channel: 0x10: Microsoft-Windows-EapMethods-Ttls/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-EapMethods-Ttls/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D84521F7-2235-4237-A7C0-14E3A9676286} Manifest Microsoft-Windows-Ras-NdisWanPacketCapture - channel: 0x10: Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic - keyword: 0x100000000: rras_ndiswan_sendpath 0x200000000: rras_ndiswan_recvpath 0x8000000000000000: Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic - level: 0x5: win:Verbose: Verbose {D8900E18-36CB-4548-966F-13F068D1F78E} Manifest Microsoft-Windows-Sensors - channel: 0x10: Microsoft-Windows-Sensors/Performance: Performance 0x11: Microsoft-Windows-Sensors/Debug: Debug - keyword: 0x1: SensPerf 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Sensors/Performance: Performance 0x4000000000000000: Microsoft-Windows-Sensors/Debug: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D8965FCF-7397-4E0E-B750-21A4580BD880} Manifest Microsoft-Windows-UI-Search - channel: 0x10: Microsoft-Windows-SearchUI/Diagnostic 0x11: Microsoft-Windows-SearchUI/Operational - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-SearchUI/Diagnostic 0x4000000000000000: Microsoft-Windows-SearchUI/Operational - level: 0x4: win:Informational: Information {D8975F88-7DDB-4ED0-91BF-3ADF48C48E0C} Manifest Microsoft-Windows-RPCSS - channel: 0x10: EndpointMapper: Debug - keyword: 0x100: EpmapDebug: Debug 0x200: EpmapInterfaceRegister: Interface register 0x400: EpmapInterfaceUnregister: Interface unregister 0x8000000000000000: EndpointMapper: Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {D92EF8AC-99DD-4AB8-B91D-C6EBA85F3755} Manifest Microsoft-Windows-ASN1 - channel: 0x10: Microsoft-Windows-ASN1/Operational: Microsoft-Windows-ASN1/Operational - keyword: 0x1: KEYWORD_SYSTEM_NTASN1_DECODING: Decoding 0x8000000000000000: Microsoft-Windows-ASN1/Operational: Microsoft-Windows-ASN1/Operational - level: 0x2: win:Error: Error {DA1D1DBD-3186-4FA2-BC2D-075EFD9E43E2} Manifest Microsoft-Windows-USBVideo - channel: 0x10: Microsoft-Windows-USBVideo/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-USBVideo/Analytic - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {DAA6A96B-F3E7-4D4D-A0D6-31A350E6A445} Manifest Microsoft-Windows-WLAN-Driver - channel: 0x10: Microsoft-Windows-WLAN-Driver/Analytic - keyword: 0x1: DataPath 0x8000000000000000: Microsoft-Windows-WLAN-Driver/Analytic - level: 0x4: win:Informational: Information {DAAE058C-46C9-4C13-85D9-D352FD829951} Manifest Intel-SST-CFD-HDA {DAB065A9-620F-45BA-B5D6-D6BB8EFEDEE9} Manifest Microsoft-Windows-Search-ProtocolHandlers - channel: 0x10: Microsoft-Windows-Search-ProtocolHandlers/Diagnostic - keyword: 0x1: Performance: Flag for events used for performance measurements 0x4: Indexing: Indexing-related high level events 0x8: IndexingItem: Events reported per each item indexed 0x10: IndexingChunk: Events reported per each chunk 0x1000000: MAPIPH: MAPI Protocol Handler 0x2000000: FilePH: File Protocol Handler, USN notifications 0x4000000: CSCPH: CSC (Client Side Cache) Protocol Handler 0x8000000000000000: Microsoft-Windows-Search-ProtocolHandlers/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {DAB3B18C-3C0F-43E8-80B1-E44BC0DAD901} Manifest Microsoft-Windows-AxInstallService - channel: 0x9: Application: Application 0x10: Microsoft-Windows-AxInstallService/Log - keyword: 0x1: ZonePolicy: Policy 0x2: Download: Download 0x4: UrlCache: Url Cache 0x8: General: General 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-AxInstallService/Log - level: 0x2: win:Error: Error 0x4: win:Informational: Information {DABA4D32-CC40-4266-BB95-C30344DBC680} Manifest Microsoft-Windows-Power-CAD - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Trace: Trace 0x8: Notify: Notify - level: 0x2: win:Error: Error 0x4: win:Informational: Information {DAF0B914-9C1C-450A-81B2-FEA7244F6FFA} Manifest Microsoft-Office-Word - channel: 0x10: WordChannel - keyword: 0x1: MyLocalChanges 0x2: Layout 0x4: Display 0x8: KeyboardInput 0x10: None 0x20: Logging 0x40: Idle 0x80: FileOpen 0x100: Font 0x200: Save 0x400: FormatConsistencyChecker 0x800: LiveStatisticsCount 0x1000: ParagraphIDs 0x2000: HrLog 0x4000: MemoryStorageObject 0x8000: CoAuthoring 0x10000: Locks 0x20000: Metadata 0x40000: ThreeWayMerge 0x80000: Animation 0x100000: Touch 0x200000: StructuredDocumentTags 0x400000: OfficeSolutionFramework 0x800000: Rasterization 0x1000000: Power 0x2000000: UnitTest 0x4000000: TargetElement 0x8000000: TEPinningTest 0x10000000: GlobalState 0x20000000: View 0x40000000: InProcAutomation 0x80000000: Activation 0x8000000000000000: WordChannel - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: wls:Verbose10 0x32: wls:Verbose50 0x64: wls:Verbose100 0xc8: wls:Verbose200 {DB00DFB6-29F9-4A9C-9B3B-1F4F9E7D9770} Manifest Microsoft-Windows-User Profiles General - channel: 0x9: Application: Application 0x10: Microsoft-Windows-User Profile Service/Operational 0x11: Microsoft-Windows-User Profile Service/Diagnostic - keyword: 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-User Profile Service/Operational 0x2000000000000000: Microsoft-Windows-User Profile Service/Diagnostic - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {DB66EA65-B7BB-4CA9-8748-334CB5C32400} Manifest Microsoft-Windows-SMBDirect - channel: 0x10: Microsoft-Windows-SMBDirect/Admin: Microsoft-Windows-SMBDirect/Admin 0x11: Microsoft-Windows-SMBDirect/Debug: Microsoft-Windows-SMBDirect/Debug 0x12: Microsoft-Windows-SMBDirect/Netmon: Microsoft-Windows-SMBDirect/Netmon - keyword: 0x1: Disconnect 0x2: Connect 0x4: Accept 0x8: Credits 0x10: NDK 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x40000000000: ut:Packet 0x8000000000000000: Microsoft-Windows-SMBDirect/Admin: Microsoft-Windows-SMBDirect/Admin 0x4000000000000000: Microsoft-Windows-SMBDirect/Debug: Microsoft-Windows-SMBDirect/Debug 0x2000000000000000: Microsoft-Windows-SMBDirect/Netmon: Microsoft-Windows-SMBDirect/Netmon - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DB6972B6-DDDF-4820-84B1-2ED6AC0B96E5} Manifest Microsoft-Windows-WebAuth - channel: 0x10: Microsoft-Windows-WebAuth/Operational: Operational - keyword: 0x1: AuthHost: AuthHost 0x8000000000000000: Microsoft-Windows-WebAuth/Operational: Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DB6F6DDB-AC77-4E88-8253-819DF9BBF140} Manifest Microsoft-Windows-Direct3D11 - channel: 0x10: Microsoft-Windows-Direct3D11/Analytic 0x11: Microsoft-Windows-Direct3D11/Logging 0x12: Microsoft-Windows-Direct3D11/PerfTiming - keyword: 0x1: Names 0x2: Devices 0x4: Resources 0x8: Timing 0x10: Contexts 0x20: CommandLists 0x100: Markers 0x200: RenderOperationMarkers 0x400: DriverCustomMarkers 0x800: JournalEntries 0x8000000000000000: Microsoft-Windows-Direct3D11/Analytic 0x4000000000000000: Microsoft-Windows-Direct3D11/Logging 0x2000000000000000: Microsoft-Windows-Direct3D11/PerfTiming - level: 0x0: win:LogAlways: Log Always {DBC388BC-89C2-4FE0-B71F-6E4881FB575C} Manifest Microsoft-Windows-IME-JPLMP - channel: 0x10: Microsoft-Windows-IME-JPLMP/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-JPLMP/Analytic - level: 0x4: win:Informational: Information {DBE9B383-7CF3-4331-91CC-A3CB16A3B538} Manifest Microsoft-Windows-Winlogon - channel: 0x10: Microsoft-Windows-Winlogon/Diagnostic 0x11: Microsoft-Windows-Winlogon/Operational 0x8: System: System - keyword: 0x10000: PerfInstrumentation 0x20000: PerfDiagnostics 0x40000: NotificationEvents 0x80000: PerfTrackContext 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-Winlogon/Diagnostic 0x4000000000000000: Microsoft-Windows-Winlogon/Operational 0x2000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {DCA074CE-547C-4595-AE90-56229B8E3BD9} Manifest Microsoft-Windows-MCCS-SyncUtil - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x1000000000: CommsService: CommsService 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DCBE5AAA-16E2-457C-9337-366950045F0A} Manifest Microsoft-Windows-TerminalServices-ServerUSBDevices - channel: 0x10: Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin: Admin 0x11: Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic: Analytic 0x12: Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational: Operational 0x13: Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin: Admin 0x4000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic: Analytic 0x2000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational: Operational 0x1000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DCBFB8F0-CD19-4F1C-A27D-23AC706DED72} Manifest Microsoft-Windows-LinkLayerDiscoveryProtocol - channel: 0x10: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational 0x11: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic - keyword: 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x8000000000000000: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational 0x4000000000000000: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DCFC4489-9CE0-403C-99DF-A05422C60898} Manifest Microsoft-Windows-WPD-MTPUS - channel: 0x10: Microsoft-Windows-WPD-MTPUS/Analytic: Analytic - keyword: 0x8000000000000000: Microsoft-Windows-WPD-MTPUS/Analytic: Analytic - level: 0x4: win:Informational: Information {DD2743C6-1722-4674-9F6F-C80044C4232E} Manifest Microsoft-Windows-MCCS-AccountsRT - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4000000000: Warning: Warning 0x8000000000: StateTransition: StateTransition 0x80000000000: SyncSelfHost: SyncSelfHost - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {DD2FE441-6C12-41FD-8232-3709C6045F63} Manifest Microsoft-Windows-DirectAccess-MediaManager - channel: 0x10: Microsoft-Windows-DAMM/Diagnostic: Microsoft-Windows-DAMM/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DAMM/Diagnostic: Microsoft-Windows-DAMM/Diagnostic - level: 0x4: win:Informational: Information {DD5EF90A-6398-47A4-AD34-4DCECDEF795F} Manifest Microsoft-Windows-HttpService - channel: 0x10: Microsoft-Windows-HttpService/Trace: HTTP Service Channel - keyword: 0x1: HTTP_KEYWORD_SETUP: Flagged on all HTTP events dealing with service setup 0x2: HTTP_KEYWORD_REQUEST: Flagged on all HTTP events dealing with request processing 0x4: HTTP_KEYWORD_RESPONSE: Flagged on all HTTP events dealing with response handling 0x8: HTTP_KEYWORD_ENDPOINT: Flagged on all HTTP events dealing with endpoints 0x10: HTTP_KEYWORD_CONNECTION: Flagged on all HTTP events occurring on a connection 0x20: HTTP_KEYWORD_CACHE: Flagged on all HTTP events dealing with URI cache 0x40: HTTP_KEYWORD_URL_GROUP: Flagged on all HTTP events triggered on a URL group 0x80: HTTP_KEYWORD_SERVER_SESSION: Flagged on all HTTP events triggered on a server session 0x100: HTTP_KEYWORD_REQUEST_QUEUE: Flagged on all HTTP events triggered on a request queue 0x200: HTTP_KEYWORD_SSL: Flagged on all HTTP events handling SSL interactions 0x400: HTTP_KEYWORD_AUTHENTICATION: Flagged on all HTTP events handling authentication (SSPI) and authentication cache 0x800: HTTP_KEYWORD_LOGGING: Flagged on all HTTP events dealing with error log activities 0x1000: HTTP_KEYWORD_TIMEOUT: Flagged on all HTTP events setting/resetting/triggering timeouts 0x2000: HTTP_KEYWORD_DRIVER_SETTING: Flagged on all HTTP events dealing with global driver settings 0x4000: HTTP_KEYWORD_THREAD_POOL: Flagged on all HTTP events in thread pool 0x8000000000000000: Microsoft-Windows-HttpService/Trace: HTTP Service Channel - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {DD70BC80-EF44-421B-8AC3-CD31DA613A4E} Manifest Ntfs - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {DD85457F-4E2D-44A5-A7A7-6253362E34DC} Manifest Microsoft-Windows-BranchCacheEventProvider - channel: 0x10: Microsoft-Windows-BranchCacheEventProvider/Diagnostic: Microsoft-Windows-BranchCacheEventProvider/DiagnosticChannel - keyword: 0x8000000000000000: Microsoft-Windows-BranchCacheEventProvider/Diagnostic: Microsoft-Windows-BranchCacheEventProvider/DiagnosticChannel - level: 0x4: win:Informational: Information {DDCC3826-A68A-4E0D-BCFD-9C06C27C6948} Manifest Microsoft-Windows-Energy-Estimation-Engine - channel: 0x10: Microsoft-Windows-Energy-Estimation-Engine/Trace 0x11: Microsoft-Windows-Energy-Estimation-Engine/EventLog - keyword: 0x1: CodePath 0x2: SystemInformation 0x4: EnergyEstimation 0x8: ProcessTag 0x10: CommitEnergy 0x8000000000000000: Microsoft-Windows-Energy-Estimation-Engine/Trace 0x4000000000000000: Microsoft-Windows-Energy-Estimation-Engine/EventLog - level: 0x4: win:Informational: Information {DDDC1D91-51A1-4A8D-95B5-350C4EE3D809} Manifest Microsoft-Windows-AuthenticationProvider - channel: 0x10: Microsoft-Windows-Authentication/ProtectedUser-Client: Microsoft-Windows-Authentication/ProtectedUser-Client 0x11: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController 0x12: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController 0x13: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController - keyword: 0x8000000000000000: Microsoft-Windows-Authentication/ProtectedUser-Client: Microsoft-Windows-Authentication/ProtectedUser-Client 0x4000000000000000: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController 0x2000000000000000: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController 0x1000000000000000: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController - level: 0x2: win:Error: Error 0x4: win:Informational: Information {DDE50426-FA77-4088-8E0C-F2F553FB6843} Manifest HidEventFilter - keyword: 0x1: Default 0x2: IRP 0x4: Power 0x8: PlugnPlay 0x10: ApiTrace - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DE095DBE-8667-4168-94C2-48CA61665ACA} Manifest Microsoft-Windows-HotspotAuth - channel: 0x10: Microsoft-Windows-HotspotAuth/Analytic: Microsoft-Windows-HotspotAuth/Analytic 0x11: Microsoft-Windows-HotspotAuth/Operational: Microsoft-Windows-HotspotAuth/Operational - keyword: 0x1: ut:Authentication 0x10: ut:WISPrDetection 0x100: ut:HotspotDetection 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-HotspotAuth/Analytic: Microsoft-Windows-HotspotAuth/Analytic 0x4000000000000000: Microsoft-Windows-HotspotAuth/Operational: Microsoft-Windows-HotspotAuth/Operational - level: 0x4: win:Informational: Information {DE29CF61-5EE6-43FF-9AAC-959C4E13CC6C} Manifest Microsoft-User Experience Virtualization-Agent Driver - channel: 0x10: Microsoft-User Experience Virtualization-Agent Driver/Operational: Operational 0x11: Microsoft-User Experience Virtualization-Agent Driver/Debug: Debug - keyword: 0x8000000000000000: Microsoft-User Experience Virtualization-Agent Driver/Operational: Operational 0x4000000000000000: Microsoft-User Experience Virtualization-Agent Driver/Debug: Debug - level: 0x0: win:LogAlways: Log Always 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DE513A55-C345-438B-9A74-E18CAC5C5CC5} Manifest Microsoft-Windows-Help - channel: 0x10: Microsoft-Windows-Help/Operational: Microsoft-Windows-Help/Operational - keyword: 0x10000: PerfEvent: Performance Event 0x20000: NonPerfEvent: Non Performance Event 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Help/Operational: Microsoft-Windows-Help/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {DE7B24EA-73C8-4A09-985D-5BDADCFA9017} Manifest Microsoft-Windows-TaskScheduler - channel: 0x10: Microsoft-Windows-TaskScheduler/Operational: Operational 0x8: System: System 0x11: Microsoft-Windows-TaskScheduler/Debug: Debug 0x12: Microsoft-Windows-TaskScheduler/Diagnostic: Diagnostic 0x13: Microsoft-Windows-TaskScheduler/Maintenance: Maintenance - keyword: 0x1: ForcedIdleProcessing 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-TaskScheduler/Operational: Operational 0x4000000000000000: System: System 0x2000000000000000: Microsoft-Windows-TaskScheduler/Debug: Debug 0x1000000000000000: Microsoft-Windows-TaskScheduler/Diagnostic: Diagnostic 0x800000000000000: Microsoft-Windows-TaskScheduler/Maintenance: Maintenance - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DEA07764-0790-44DE-B9C4-49677B17174F} Manifest Microsoft-Windows-FMS - channel: 0x8: System: System 0x10: Microsoft-Windows-FMS/Operational: Microsoft-Windows-FMS/Operational 0x11: Microsoft-Windows-FMS/Analytic: Microsoft-Windows-FMS/Analytic 0x12: Microsoft-Windows-FMS/Debug: Microsoft-Windows-FMS/Debug - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-FMS/Operational: Microsoft-Windows-FMS/Operational 0x2000000000000000: Microsoft-Windows-FMS/Analytic: Microsoft-Windows-FMS/Analytic 0x1000000000000000: Microsoft-Windows-FMS/Debug: Microsoft-Windows-FMS/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {DED165CF-485D-4770-A3E7-9C5F0320E80C} Manifest Microsoft-Windows-DeviceUx - channel: 0x10: Microsoft-Windows-DeviceUx/Informational 0x11: Microsoft-Windows-DeviceUx/Performance - keyword: 0x1: DeviceUX 0x10: DeviceUX-Performance 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DeviceUx/Informational 0x4000000000000000: Microsoft-Windows-DeviceUx/Performance - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information {DF271536-4298-45E1-B0F2-E88F78619C5D} Manifest Microsoft-Windows-Ndu - channel: 0x10: Microsoft-Windows-Ndu/Diagnostic - keyword: 0x1: KeywordNduDebugTrace: NduDebugTrace 0x2: KeywordNduPerInterfaceStats: PerInterfaceStats 0x4: KeywordNduPerFlowStats: PerFlowStats 0x8: KeywordNduTokenTracking: TokenTracking 0x10: KeywordNduLwtPerMinuteInterfaceStats: PerInterfaceStats 0x20: KeywordNduPowerDebug: NduPowerDebug 0x8000000000000000: Microsoft-Windows-Ndu/Diagnostic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {DFA86FAA-2C55-4140-BFF9-5CC586217A7B} Manifest Microsoft-Windows-PDFReader - channel: 0x10: Microsoft-Windows-glcnd/Diagnostic 0x11: Microsoft-Windows-glcnd/Debug 0x12: Microsoft-Windows-glcnd/Admin - keyword: 0x10000: Reader 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-glcnd/Diagnostic 0x4000000000000000: Microsoft-Windows-glcnd/Debug 0x2000000000000000: Microsoft-Windows-glcnd/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E013E74B-97F4-4E1C-A120-596E5629ECFE} Manifest Microsoft-Windows-IME-KRTIP - channel: 0x10: Microsoft-Windows-IME-KRTIP/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-IME-KRTIP/Analytic - level: 0x4: win:Informational: Information {E01B1A7C-C5C9-4E67-99A9-5E85ACFB2E10} Manifest Microsoft-Windows-Diagnosis-WDI - channel: 0x10: Microsoft-Windows-Diagnosis-WDI/Debug: Microsoft-Windows-Diagnosis-WDI/Debug - keyword: 0x200: memory: Memory tracing events 0x400000000: debug: Debug events 0x8000000000000000: Microsoft-Windows-Diagnosis-WDI/Debug: Microsoft-Windows-Diagnosis-WDI/Debug - level: 0x2: win:Error: Error {E02A841C-75A3-4FA7-AFC8-AE09CF9B7F23} Manifest Microsoft-Windows-Kernel-Audit-API-Calls - level: 0x4: win:Informational: Information {E04FE2E0-C6CF-4273-B59D-5C97C9C374A4} Manifest Microsoft-Windows-WebServices - channel: 0x10: Microsoft-Windows-WebServices/Tracing - keyword: 0x1: keywords.API: API 0x2: keywords.Error: Error 0x4: keywords.IO: IO 0x8: keywords.Message: Message 0x10: keywords.BinaryMessage: BinaryMessage 0x8000000000000000: Microsoft-Windows-WebServices/Tracing - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E08C85F4-C224-499D-B5B3-C1BCE960F096} Manifest Microsoft-Windows-Telephony-PhoneOm - keyword: 0x1: Error 0x2: Performance 0x4: Debug 0x8: PhoneDefault 0x10: CONTROLLER 0x20: CellularProvider 0x40: PHONEUI 0x100: Callhistory 0x200: CDMA 0x400: VVM 0x1000: MISC 0x2000: PhoneOM 0x4000000000: Warning 0x8000000000: StateTransition - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {E0A40B26-30C4-4656-BC9A-74A5C3A0B2EC} Manifest Microsoft-Windows-UIAnimation - channel: 0x10: Microsoft-Windows-UIAnimation/Diagnostic - keyword: 0x1: Default 0x8000000000000000: Microsoft-Windows-UIAnimation/Diagnostic - level: 0x4: win:Informational: Information {E0C6F6DE-258A-50E0-AC1A-103482D118BC} Manifest Microsoft-Windows-Install-Agent - channel: 0x10: Microsoft-Windows-Store/Operational - keyword: 0x10000000: OldMessages 0x20000000: Messages 0x8000000000000000: Microsoft-Windows-Store/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E104FB41-6B04-4F3A-B47D-F0DF2F02B954} Manifest Microsoft-Windows-DiskDiagnosticDataCollector - channel: 0x10: Microsoft-Windows-DiskDiagnosticDataCollector/Operational: Microsoft-Windows-DiskDiagnosticDataCollector/Operational - keyword: 0x8000000000000000: Microsoft-Windows-DiskDiagnosticDataCollector/Operational: Microsoft-Windows-DiskDiagnosticDataCollector/Operational - level: 0x4: win:Informational: Information {E1168941-8333-497F-98D9-67BEE05A6034} Manifest Microsoft-Windows-Globalization-FontGroups - channel: 0x10: Microsoft-Windows-FontGroups/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-FontGroups/Diagnostic - level: 0x4: win:Informational: Information {E13C0D23-CCBC-4E12-931B-D9CC2EEE27E4} Manifest Microsoft-Windows-DotNETRuntime - keyword: 0x1: GCKeyword: GC 0x2: GCHandleKeyword: GCHandle 0x4: FusionKeyword: Binder 0x8: LoaderKeyword: Loader 0x10: JitKeyword: Jit 0x20: NGenKeyword: NGen 0x40: StartEnumerationKeyword: StartEnumeration 0x80: EndEnumerationKeyword: StopEnumeration 0x400: SecurityKeyword: Security 0x800: AppDomainResourceManagementKeyword: AppDomainResourceManagement 0x1000: JitTracingKeyword: JitTracing 0x2000: InteropKeyword: Interop 0x4000: ContentionKeyword: Contention 0x8000: ExceptionKeyword: Exception 0x10000: ThreadingKeyword: Threading 0x20000: JittedMethodILToNativeMapKeyword: JittedMethodILToNativeMap 0x40000: OverrideAndSuppressNGenEventsKeyword: OverrideAndSuppressNGenEvents 0x80000: TypeKeyword: Type 0x100000: GCHeapDumpKeyword: GCHeapDump 0x200000: GCSampledObjectAllocationHighKeyword: GCSampledObjectAllocationHigh 0x400000: GCHeapSurvivalAndMovementKeyword: GCHeapSurvivalAndMovement 0x800000: GCHeapCollectKeyword: GCHeapCollect 0x1000000: GCHeapAndTypeNamesKeyword: GCHeapAndTypeNames 0x2000000: GCSampledObjectAllocationLowKeyword: GCSampledObjectAllocationLow 0x20000000: PerfTrackKeyword: PerfTrack 0x40000000: StackKeyword: Stack 0x80000000: ThreadTransferKeyword: ThreadTransfer 0x100000000: DebuggerKeyword: Debugger 0x200000000: MonitoringKeyword: Monitoring - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E13FF11E-E989-4838-A9FA-38A4D13914CF} Manifest Microsoft-Windows-GPIOButtons - keyword: 0x400000000000: ms:Measures - level: 0x4: win:Informational: Information {E18D0FC9-9515-4232-98E4-89E456D8551B} Manifest Microsoft-Windows-RTWorkQueue-Threading - channel: 0x10: RTWorkQueueTheading: RTWorkQueue Threading - keyword: 0x100: Telemetry 0x200: DiagTrack 0x8000000000000000: RTWorkQueueTheading: RTWorkQueue Threading - level: 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E18D0FCA-9515-4232-98E4-89E456D8551B} Manifest Microsoft-Windows-DVD - channel: 0x10: Navigator: DVD Navigator - keyword: 0x8000000000000000: Navigator: DVD Navigator - level: 0x5: win:Verbose: Verbose {E1DA8995-85BC-452B-B62B-0913306A430E} Manifest TeeDriver - channel: 0x8: System: System - keyword: 0x1: Default 0x2: Interrupt 0x4: IRP 0x8: Power 0x10: PlugnPlay 0x20: Performance 0x40: Enumeration 0x80: Register 0x100: ApiTrace 0x8000000000000000: System: System - level: 0x0: win:LogAlways: Log Always 0x1: win:Critical: Critical 0x4: win:Informational: Information {E1DD7E52-621D-44E3-A1AD-0370C2B25946} Manifest Microsoft-Windows-Diagnosis-Scripted - channel: 0x10: Microsoft-Windows-Diagnosis-Scripted/Admin: Microsoft-Windows-Diagnosis-Scripted/Admin 0x11: Microsoft-Windows-Diagnosis-Scripted/Operational: Microsoft-Windows-Diagnosis-Scripted/Operational 0x12: Microsoft-Windows-Diagnosis-Scripted/Debug: Microsoft-Windows-Diagnosis-Scripted/Debug 0x13: Microsoft-Windows-Diagnosis-Scripted/Analytic: Microsoft-Windows-Diagnosis-Scripted/Analytic - keyword: 0x100000000: analytic: Analytic Keyword 0x200000000: debug: Debug Keyword 0x400000000: admin: Admin Keyword 0x800000000: lifecycle: Lifecycle Keyword 0x8000000000000000: Microsoft-Windows-Diagnosis-Scripted/Admin: Microsoft-Windows-Diagnosis-Scripted/Admin 0x4000000000000000: Microsoft-Windows-Diagnosis-Scripted/Operational: Microsoft-Windows-Diagnosis-Scripted/Operational 0x2000000000000000: Microsoft-Windows-Diagnosis-Scripted/Debug: Microsoft-Windows-Diagnosis-Scripted/Debug 0x1000000000000000: Microsoft-Windows-Diagnosis-Scripted/Analytic: Microsoft-Windows-Diagnosis-Scripted/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {E2242B38-9453-42FD-B446-00746E76EB82} Manifest Microsoft-Windows-IME-CustomerFeedbackManager - channel: 0x10: Microsoft-Windows-IME-CustomerFeedbackManager/Debug - keyword: 0x8000000000000000: Microsoft-Windows-IME-CustomerFeedbackManager/Debug - level: 0x4: win:Informational: Information {E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156} Manifest Microsoft-Windows-Security-SPP - channel: 0x10: Microsoft-Windows-Security-SPP/Perf - keyword: 0x10000: PerfInstrumentation 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Microsoft-Windows-Security-SPP/Perf - level: 0x2: win:Error: Error 0x4: win:Informational: Information {E2816346-87F4-4F85-95C3-0C79409AA89D} Manifest Microsoft-Windows-VHDMP - channel: 0x10: Microsoft-Windows-VHDMP-Operational: Microsoft-Windows-VHDMP/Operational 0x11: Microsoft-Windows-VHDMP-Analytic - keyword: 0x8000000000000000: Microsoft-Windows-VHDMP-Operational: Microsoft-Windows-VHDMP/Operational 0x4000000000000000: Microsoft-Windows-VHDMP-Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E2C15FD7-8924-4C8C-8CFE-DA0BE539CE27} Manifest Microsoft-Windows-IME-Broker - channel: 0x10: Microsoft-Windows-IME-Broker/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-Broker/Analytic - level: 0x4: win:Informational: Information {E3257C8C-C7CB-444F-9DA0-5D92A2625289} Manifest Microsoft-Windows-Defrag-Core - channel: 0x10: Microsoft-Windows-Defrag-Core/Debug - keyword: 0x8000000000000000: Microsoft-Windows-Defrag-Core/Debug {E3BAC9F8-27BE-4823-8D7F-1CC320C05FA7} Manifest Microsoft-Windows-MountMgr - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error {E3E0E2F0-C9C5-11E0-8AB9-9EBC4824019B} Manifest Microsoft-Windows-Crypto-CNG - channel: 0x10: Microsoft-Windows-Crypto-CNG/Analytic: Microsoft-Windows-Crypto-CNG/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-Crypto-CNG/Analytic: Microsoft-Windows-Crypto-CNG/Analytic - level: 0x2: win:Error: Error {E3EE1525-8742-4E05-871B-DD2A60330C53} Manifest Microsoft-Windows-UI-Shell - channel: 0x10: Microsoft-Windows-UI-Shell/Diagnostic - keyword: 0x1: Shell 0x8000000000000000: Microsoft-Windows-UI-Shell/Diagnostic {E4480490-85B6-11DD-AD8B-0800200C9A66} Manifest Microsoft-Windows-VDRVROOT - channel: 0x10: Microsoft-Windows-VDRVROOT/Operational: Microsoft-Windows-VDRVROOT/Operational - keyword: 0x8000000000000000: Microsoft-Windows-VDRVROOT/Operational: Microsoft-Windows-VDRVROOT/Operational - level: 0x4: win:Informational: Information {E46EEAD8-0C54-4489-9898-8FA79D059E0E} Manifest Microsoft-Windows-Feedback-Service-TriggerProvider - channel: 0x10: Microsoft-Windows-Feedback-Service-TriggerProvider - keyword: 0x1: WerSvc 0x8000000000000000: Microsoft-Windows-Feedback-Service-TriggerProvider - level: 0x4: win:Informational: Information {E4B70372-261F-4C54-8FA6-A5A7914D73DA} Manifest Microsoft-Antimalware-Protection - level: 0x4: win:Informational: Information {E4D53F84-7DE3-11D8-9435-505054503030} Manifest Microsoft-Windows-Diagnosis-PLA - channel: 0x10: Microsoft-Windows-Diagnosis-PLA/Operational: Microsoft-Windows-Diagnosis-PLA/Operational 0x11: Microsoft-Windows-Diagnosis-PLA/Debug: Microsoft-Windows-Diagnosis-PLA/Debug - keyword: 0x100: transaction: Transactions 0x200: memory: Memory 0x400: object: Object 0x800: errors: Errors 0x8000000000000000: Microsoft-Windows-Diagnosis-PLA/Operational: Microsoft-Windows-Diagnosis-PLA/Operational 0x4000000000000000: Microsoft-Windows-Diagnosis-PLA/Debug: Microsoft-Windows-Diagnosis-PLA/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {E4F68870-5AE8-4E5B-9CE7-CA9ED75B0245} Manifest Microsoft-AppV-Client - channel: 0x10: Microsoft-AppV-Client/Admin: Admin 0x11: Microsoft-AppV-Client/Operational: Operational 0x12: Microsoft-AppV-Client/Virtual Applications: Virtual Applications - keyword: 0x1: Startup: Startup 0x2: Shutdown: Shutdown 0x4: Logon: Logon 0x8: Logoff: Logoff 0x10: API: API 0x20: ComponentStartup: Component Startup 0x40: Common: Client Common 0x80: Catalog: Catalog 0x100: Publishing: Publishing 0x200: EmbeddedScripting: Embedded Scripting 0x400: VFS: Virtual File System 0x800: VirtualServices: Virtual Services 0x1000: Settings: Settings 0x2000: DynamicConfiguration: Dynamic Configuration 0x4000: ClientManagement: Client Management 0x8000: Subsystems: Subsystems 0x10000: ClientCoExistence: Client Co-existence 0x20000: VREG: Virtual Registry 0x40000: Streaming: Streaming 0x80000: ClientStreamingUX: Client Streaming UX 0x100000: VirtualAppLaunch: Virtual Application Launch 0x200000: VOBJ: Virtual Object 0x400000: Reporting: Reporting 0x800000: PublishingRefresh: Publishing Refresh 0x1000000: Integration: Integration 0x2000000: SxS: Side by Side 0x4000000: AppManagementConfiguration: AppManagementConfiguration 0x8000000000000000: Microsoft-AppV-Client/Admin: Admin 0x4000000000000000: Microsoft-AppV-Client/Operational: Operational 0x2000000000000000: Microsoft-AppV-Client/Virtual Applications: Virtual Applications - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {E53C6823-7BB8-44BB-90DC-3F86090D48A6} Manifest Microsoft-Windows-Winsock-AFD - channel: 0x10: Microsoft-Windows-Winsock-AFD/Operational: Microsoft-Windows-Winsock Network Event/Operational - keyword: 0x1: AFD_KW_DATAGRAM: Datagram socket 0x2: AFD_KW_STREAM: Stream socket 0x4: AFD_KW_SOURCE_WINSOCK: Winsock initiated event 0x8: AFD_KW_SOURCE_TRANSPORT: Transport initiated event 0x10: AFD_KW_FASTPATH: Fastpath I/O 0x20: AFD_KW_BUFFERED: Buffered 0x40: AFD_KW_RIO: RIO 0x80: AFD_KW_NRT: NRT 0x10000000000: ut:Dropped 0x8000000000000000: Microsoft-Windows-Winsock-AFD/Operational: Microsoft-Windows-Winsock Network Event/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E53DF8BA-367A-4406-98D5-709FFB169681} Manifest Microsoft-Windows-WDAG-PolicyEvaluator-GP - channel: 0x10: Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational: Operational - keyword: 0x8000000000000000: Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational: Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {E595F735-B42A-494B-AFCD-B68666945CD3} Manifest Microsoft-Windows-Firewall - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error {E5AA2A53-30BE-40F5-8D84-AD3F40A404CD} Manifest Microsoft-Windows-TabletPC-Platform-Input-Wisp - level: 0x4: win:Informational: Information {E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC} Manifest Microsoft-Windows-Security-Netlogon - channel: 0x10: Microsoft-Windows-NTLM/Operational 0x11: Microsoft-Windows-Security-Netlogon/Operational - keyword: 0x8000000000000000: Microsoft-Windows-NTLM/Operational 0x4000000000000000: Microsoft-Windows-Security-Netlogon/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {E5C16D49-2464-4382-BB20-97A4B5465DB9} Manifest Microsoft-Windows-WiFiNetworkManager - channel: 0x69: Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel: WiFiConnSvc tracing - keyword: 0x1: ScnEvt 0x2: PwrEvt 0x4: SvcEvt 0x8: NtfEvt 0x10: ConEvt 0x20: PrfEvt 0x8000000000000000: Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel: WiFiConnSvc tracing - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {E5FC4A0F-7198-492F-9B0F-88FDCBFDED48} Manifest Microsoft-Windows Networking VPN Plugin Platform - channel: 0x10: Windows Networking Vpn Plugin Platform/Operational: Microsoft-Windows-Vpn Plugin Platform/Operational 0x11: Windows Networking Vpn Plugin Platform/OperationalVerbose: Microsoft-Windows-Vpn Plugin Platform/OperationalVerbose - keyword: 0x20000000000: ut:PiiPresent 0x8000000000000000: Windows Networking Vpn Plugin Platform/Operational: Microsoft-Windows-Vpn Plugin Platform/Operational 0x4000000000000000: Windows Networking Vpn Plugin Platform/OperationalVerbose: Microsoft-Windows-Vpn Plugin Platform/OperationalVerbose - level: 0x4: win:Informational: Information {E6307A09-292C-497E-AAD6-498F68E2B619} Manifest Microsoft-Windows-ReadyBoost - channel: 0x10: Microsoft-Windows-ReadyBoost/Operational: Operational 0x11: Microsoft-Windows-ReadyBoost/Analytic - keyword: 0x1000: Diag 0x2000: ReadyBoot 0x4000: ReadyBoost 0x8000000000000000: Microsoft-Windows-ReadyBoost/Operational: Operational 0x4000000000000000: Microsoft-Windows-ReadyBoost/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {E670A5A2-CE74-4AB4-9347-61B815319F4C} Manifest Microsoft-Windows-DiskDiagnostic - channel: 0x8: System: System 0x10: Microsoft-Windows-DiskDiagnostic/Operational: Microsoft-Windows-DiskDiagnostic/Operational - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-DiskDiagnostic/Operational: Microsoft-Windows-DiskDiagnostic/Operational - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x4: win:Informational: Information {E6835967-E0D2-41FB-BCEC-58387404E25A} Manifest Microsoft-Windows-BrokerInfrastructure - channel: 0x10: Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic 0x11: Microsoft-Windows-BackgroundTaskInfrastructure/Operational - keyword: 0x1: BackgroundTask 0x2: PDC 0x4: LowOverheadDiag 0x8: Package 0x10: Watchdog 0x20: Session 0x40: SleepStudy 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic 0x4000000000000000: Microsoft-Windows-BackgroundTaskInfrastructure/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {E6C92FB8-89D7-4D1F-BE46-D56E59804783} Manifest Microsoft-Windows-Security-Vault - channel: 0x10: Microsoft-Windows-Security-Vault/Performance - keyword: 0x8000000000000000: Microsoft-Windows-Security-Vault/Performance - level: 0x4: win:Informational: Information {E7558269-3FA5-46ED-9F4D-3C6E282DDE55} Manifest Microsoft-Windows-UAC - channel: 0x10: Microsoft-Windows-UAC/Operational: Microsoft-Windows-UAC/Operational - keyword: 0x8000000000000000: Microsoft-Windows-UAC/Operational: Microsoft-Windows-UAC/Operational - level: 0x2: win:Error: Error {E7AA32FB-77D0-477F-987D-7E83DF1B7ED0} Manifest Microsoft-Windows-Graphics-Printing - keyword: 0x1000000000000: win:ResponseTime: Response Time - level: 0x4: win:Informational: Information {E8316A2D-0D94-4F52-85DD-1E15B66C5891} Manifest Microsoft-Windows-Subsys-Csr - channel: 0x10: Microsoft-Windows-Subsys-Csr/Operational - keyword: 0x10000: csr:Diagnostics 0x8000000000000000: Microsoft-Windows-Subsys-Csr/Operational - level: 0x4: win:Informational: Information {E837619C-A2A8-4689-833F-47B48EBD2442} Manifest Microsoft-Windows-BranchCacheClientEventProvider - channel: 0x10: Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic: Microsoft-Windows-BranchCacheClientEventProvider/DiagnosticChannel - keyword: 0x8000000000000000: Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic: Microsoft-Windows-BranchCacheClientEventProvider/DiagnosticChannel - level: 0x4: win:Informational: Information {E8A7C168-81EE-465C-8E8E-D39A2AC1CA41} Manifest Microsoft-Windows-Thermal-Polling - keyword: 0x1: thrmpoll:OneSecond 0x2: thrmpoll:FiveSecond 0x4: thrmpoll:ThirtySecond 0x8: thrmpoll:FiveMinute 0x10: thrmpoll:ThirtyMinute {E8AA5402-26A1-455E-A21B-F240ED62D155} Manifest Microsoft-Windows-WCNWiz - channel: 0x10: Microsoft-Windows-WCNWiz/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WCNWiz/Analytic - level: 0x4: win:Informational: Information {E8ED09DC-100C-45E2-9FC8-B53399EC1F70} Manifest Microsoft-Windows-Crypto-NCrypt - channel: 0x10: Microsoft-Windows-Crypto-NCrypt/Operational: Microsoft-Windows-Crypto-NCrypt/Operational - keyword: 0x1: ETW_KEYWORD_NCRYPT_OPERATION: NCrypt Operation 0x2: ETW_KEYWORD_PROTECT_OPERATION: Secret Protection 0x8000000000000000: Microsoft-Windows-Crypto-NCrypt/Operational: Microsoft-Windows-Crypto-NCrypt/Operational - level: 0x2: win:Error: Error {E8F9AF91-AFBE-5A03-DFEC-5D591686326C} Manifest Microsoft-Windows-DeviceUpdateAgent - channel: 0x10: Microsoft-Windows-DeviceUpdateAgent/Operational: Device Update Agent operational channel - keyword: 0x8000000000000000: Microsoft-Windows-DeviceUpdateAgent/Operational: Device Update Agent operational channel - level: 0x2: win:Error: Error 0x4: win:Informational: Information {E978F84E-582D-4167-977E-32AF52706888} Manifest Microsoft-Windows-TabletPC-InputPanel - channel: 0x10: TabletPC_InputPanel_Channel 0x11: OSK_SoftKeyboard_Channel 0x12: TabletPC_InputPanel_Channel/IHM 0x13: Physical_Keyboard_Manager_Channel 0x14: IHM_DebugChannel - keyword: 0x10000: TabletPC_InputPanel_Keyword 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: TabletPC_InputPanel_Channel 0x4000000000000000: OSK_SoftKeyboard_Channel 0x2000000000000000: TabletPC_InputPanel_Channel/IHM 0x1000000000000000: Physical_Keyboard_Manager_Channel 0x800000000000000: IHM_DebugChannel - level: 0x4: win:Informational: Information {E98EBDBF-3058-4784-8521-47860B1D2B8E} Manifest Microsoft-WindowsPhone-Ufx - keyword: 0x1: Error: Error 0x2: Performance: Performance 0x4: Debug: Debug 0x8: Function: Function 0x10: UfxBus: UfxBus 0x20: Setup: Setup 0x40: StateMachine: StateMachine 0x80: Notification: Notification 0x400000000000: ms:Measures - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {EA216962-877B-5B73-F7C5-8AEF5375959E} Manifest Microsoft-Windows-Security-Adminless - channel: 0x10: Microsoft-Windows-Security-Adminless/Operational: Microsoft-Windows-Security-Adminless/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Security-Adminless/Operational: Microsoft-Windows-Security-Adminless/Operational - level: 0x2: win:Error: Error {EA4CC8B8-A150-47A3-AFB9-C8D194B19452} Manifest Microsoft-Windows-ACL-UI - level: 0x4: win:Informational: Information {EA8CD8A5-78FF-4418-B292-AADC6A7181DF} Manifest Microsoft-Windows-SecurityMitigationsBroker - channel: 0x10: Microsoft-Windows-SecurityMitigationsBroker/Perf 0x11: Microsoft-Windows-SecurityMitigationsBroker/Operational 0x12: Microsoft-Windows-SecurityMitigationsBroker/Admin - keyword: 0x1: SECURITYMITIGATIONBROKER_KEYWORD_BROKER: Flagged on all events dealing with the general web platform security broker operations 0x2: SECURITYMITIGATIONBROKER_KEYWORD_ACG: Flagged on all events dealing with the ACG related web platform security broker operations 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Perf 0x4000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Operational 0x2000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {EB492407-201E-4281-8531-CDFB141CA69F} Manifest Microsoft-Windows-Bluetooth-BthLEEnum {EB65A492-86C0-406A-BACE-9912D595BD69} Manifest Microsoft-Windows-AppModel-Exec - keyword: 0x20: ExecMan: ExecMan 0x100: TaskHost: TaskHost 0x1000: Sqm: Sqm 0x4000: PLM: Lifetime Manager 0x8000: FM: ForegroundManager 0x10000: BM: Background Manager 0x20000: ExecProductionCircular: Production Circular 0x40000: ExecProductionCritical: Production Critical 0x80000: ExecSelfHostCircular: SelfHost Circular 0x100000: ExecSelfHostCritical: SelfHost Critical 0x200000: ExecDevPlatCircular: DevPlat Circular 0x400000: VOIP: VOIP 0x4000000: Activation: Activation Manager 0x8000000: AgHost: AgHost 0x80000000: Telemetry: Telemetry 0x100000000: EEC: ExtendedExecutionClient 0x200000000: ODB: OnDemandBroker 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {EC23F986-AE2D-4269-B52F-4E20765C1A94} Manifest Microsoft-Windows-NcdAutoSetup - channel: 0x10: Microsoft-Windows-NcdAutoSetup/Operational: Microsoft-Windows-NcdAutoSetup/Operational 0x11: Microsoft-Windows-NcdAutoSetup/Diagnostic: Microsoft-Windows-NcdAutoSetup/Diagnostic - keyword: 0x8000000000000000: Microsoft-Windows-NcdAutoSetup/Operational: Microsoft-Windows-NcdAutoSetup/Operational 0x4000000000000000: Microsoft-Windows-NcdAutoSetup/Diagnostic: Microsoft-Windows-NcdAutoSetup/Diagnostic - level: 0x4: win:Informational: Information {EC276CDE-2A17-473C-A010-2FF78D5426D2} Manifest Microsoft-Windows-OOBE-Machine-Core - channel: 0x10: Microsoft-Windows-OOBE-Machine-Core/Diagnostic - keyword: 0x1: msoobe 0x8000000000000000: Microsoft-Windows-OOBE-Machine-Core/Diagnostic - level: 0x4: win:Informational: Information {ECDAACFA-6FE9-477C-B5F0-85B76F8F50AA} Manifest Microsoft-Windows-Crashdump - channel: 0x10: Microsoft-Windows-Crashdump/Operational - keyword: 0x1: Config 0x8000000000000000: Microsoft-Windows-Crashdump/Operational - level: 0x4: win:Informational: Information {ED8B9BD3-F66E-4FF2-B86B-75C7925F72A9} Manifest Microsoft-Windows-Provisioning-Diagnostics-Provider - channel: 0x10: Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin: Admin 0x11: Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot: AutoPilot 0x12: Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug: Debug - keyword: 0x8000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin: Admin 0x4000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot: AutoPilot 0x2000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {EDD08927-9CC4-4E65-B970-C2560FB5C289} Manifest Microsoft-Windows-Kernel-File - channel: 0x10: Microsoft-Windows-Kernel-File/Analytic - keyword: 0x10: KERNEL_FILE_KEYWORD_FILENAME 0x20: KERNEL_FILE_KEYWORD_FILEIO 0x40: KERNEL_FILE_KEYWORD_OP_END 0x80: KERNEL_FILE_KEYWORD_CREATE 0x100: KERNEL_FILE_KEYWORD_READ 0x200: KERNEL_FILE_KEYWORD_WRITE 0x400: KERNEL_FILE_KEYWORD_DELETE_PATH 0x800: KERNEL_FILE_KEYWORD_RENAME_SETLINK_PATH 0x1000: KERNEL_FILE_KEYWORD_CREATE_NEW_FILE 0x8000000000000000: Microsoft-Windows-Kernel-File/Analytic - level: 0x4: win:Informational: Information {EEE173EF-7ED2-45DE-9877-01C70A852FBD} Manifest Microsoft-Windows-Serial-ClassExtension-V2 - channel: 0x8: System: System 0x10: Microsoft-Windows-Serial-ClassExtension-V2/Analytic: Analytic - keyword: 0x1: Rundown: Rundown events that list all devices when the provider is enabled. 0x2: PNP: Plug & Play events. 0x4: TransferStateMachine: TransferStateMachine events. 0x8: TransmitTransferStateMachine: Transmit TransferStateMachine events. 0x10: ReceiveTransferStateMachine: Receive TransferStateMachine events. 0x20: IO: I/O request events. 0x40: TransmitIO: Transmit I/O request events. 0x80: ReceiveIO: Receive I/O request events. 0x100: IOPayload: I/O request payloads. 0x200: TransmitIOPayload: Transmit I/O request payloads. 0x400: ReceiveIOPayload: Receive I/O request payloads. 0x800: IOCTL: IOCTL request events. 0x1000: PowerStateTransition: Power state transition events. 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Serial-ClassExtension-V2/Analytic: Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {EEF54E71-0661-422D-9A98-82FD4940B820} Manifest Microsoft-Windows-Application-Experience - channel: 0x10: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug 0x11: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic 0x12: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace 0x13: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant 0x14: Microsoft-Windows-Application-Experience/Program-Telemetry: Microsoft-Windows-Application-Experience/Program-Telemetry 0x15: Microsoft-Windows-Application-Experience/Program-Inventory: Microsoft-Windows-Application-Experience/Program-Inventory 0x16: Microsoft-Windows-Application-Experience/Steps-Recorder: Microsoft-Windows-Application-Experience/Steps-Recorder 0x17: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter - keyword: 0x100: WDI 0x200: Debug 0x400: ShimEng 0x800: Shims 0x1000: Siuf 0x8000000000000000: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug 0x4000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic 0x2000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace 0x1000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant 0x800000000000000: Microsoft-Windows-Application-Experience/Program-Telemetry: Microsoft-Windows-Application-Experience/Program-Telemetry 0x400000000000000: Microsoft-Windows-Application-Experience/Program-Inventory: Microsoft-Windows-Application-Experience/Program-Inventory 0x200000000000000: Microsoft-Windows-Application-Experience/Steps-Recorder: Microsoft-Windows-Application-Experience/Steps-Recorder 0x100000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter - level: 0x2: win:Error: Error 0x4: win:Informational: Information {EF1CC15B-46C1-414E-BB95-E76B077BD51E} Manifest Microsoft-Windows-Bits-Client - channel: 0x8: System: System 0x10: Microsoft-Windows-Bits-Client/Operational: Microsoft-Windows-Bits-Client/Operational 0x11: Microsoft-Windows-Bits-Client/Analytic: Microsoft-Windows-Bits-Client/Analytic - keyword: 0x8000000000000000: System: System 0x4000000000000000: Microsoft-Windows-Bits-Client/Operational: Microsoft-Windows-Bits-Client/Operational 0x2000000000000000: Microsoft-Windows-Bits-Client/Analytic: Microsoft-Windows-Bits-Client/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {F029AC39-38F0-4A40-B7DE-404D244004CB} Manifest Microsoft-Windows-Kernel-XDV - channel: 0x10: Microsoft-Windows-Kernel-XDV/Analytic 0x8: System: System - keyword: 0x200000000000: ms:Telemetry 0x8000000000000000: Microsoft-Windows-Kernel-XDV/Analytic 0x4000000000000000: System: System - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F0BE35F8-237B-4814-86B5-ADE51192E503} Manifest Microsoft-Windows-AppReadiness - channel: 0x10: Microsoft-Windows-AppReadiness/Admin: Admin 0x11: Microsoft-Windows-AppReadiness/Operational: Operational 0x12: Microsoft-Windows-AppReadiness/Debug: Debug - keyword: 0x1: Service 0x2: User 0x4: Tasks 0x8: Api 0x10: Scoring 0x20: BrokerSession 0x40: Triggers 0x80: Error 0x100: Timeline 0x400000000000: ms:Measures 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-AppReadiness/Admin: Admin 0x4000000000000000: Microsoft-Windows-AppReadiness/Operational: Operational 0x2000000000000000: Microsoft-Windows-AppReadiness/Debug: Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43} Manifest Microsoft-Windows-CertificateServicesClient-AutoEnrollment - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {F1201B5A-E170-42B6-8D20-B57AC57E6416} Manifest Microsoft-Windows-DeviceManagement-Pushrouter - channel: 0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational - keyword: 0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F1394DE0-32C7-4A76-A6DE-B245E48F4615} Manifest Microsoft-Windows-RemoteDesktopServices-SessionServices - channel: 0x10: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational - keyword: 0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F1EF270A-0D32-4352-BA52-DBAB41E1D859} Manifest Microsoft-Windows-AppModel-Runtime - channel: 0x9: Application: Application 0x10: Microsoft-Windows-AppModel-Runtime/Analytic: Microsoft-Windows-AppModel-Runtime/Analytic 0x11: Microsoft-Windows-AppModel-Runtime/Admin 0x12: Microsoft-Windows-AppModel-Runtime/Debug 0x13: Microsoft-Windows-AppModel-Runtime/Diagnostics - keyword: 0x1: Process: Process 0x2: AppContainer: AppContainer 0x4: DesktopAppXProcess: DesktopAppXProcess 0x8: DesktopAppXContainer: DesktopAppXContainer 0x200000000000: ms:Telemetry 0x400000000000: ms:Measures 0x8000000000000000: Application: Application 0x4000000000000000: Microsoft-Windows-AppModel-Runtime/Analytic: Microsoft-Windows-AppModel-Runtime/Analytic 0x2000000000000000: Microsoft-Windows-AppModel-Runtime/Admin 0x1000000000000000: Microsoft-Windows-AppModel-Runtime/Debug 0x800000000000000: Microsoft-Windows-AppModel-Runtime/Diagnostics - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F230D19A-5D93-47D9-A83F-53829EDFB8DF} Manifest Microsoft-Windows-TriggerEmulatorProvider - keyword: 0x1: Keyword_TriggerEmulatorEvent - level: 0x4: win:Informational: Information {F2311B48-32BE-4902-A22A-7240371DBB2C} Manifest Microsoft-Windows-AssignedAccessBroker - channel: 0x10: Microsoft-Windows-AssignedAccessBroker/Operational 0x11: Microsoft-Windows-AssignedAccessBroker/Admin - keyword: 0x8000000000000000: Microsoft-Windows-AssignedAccessBroker/Operational 0x4000000000000000: Microsoft-Windows-AssignedAccessBroker/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F27B948B-0A7C-4EB6-92EC-8A2C1B353ECD} Manifest Microsoft-Windows-Diagnosis-PerfHost - channel: 0x10: Microsoft-Windows-Diagnosis-Perfhost/Analytic: Microsoft-Windows-Diagnosis-Perfhost/Analytic - keyword: 0x800: errors: Errors 0x1000: callouts: Provider DLL callouts 0x8000000000000000: Microsoft-Windows-Diagnosis-Perfhost/Analytic: Microsoft-Windows-Diagnosis-Perfhost/Analytic {F2C628AE-D26C-4352-9C45-74754E1E2F9F} Manifest Microsoft-Windows-MPRMSG - keyword: 0x80000000000000: win:EventlogClassic: Classic {F2E2CE31-0E8A-4E46-A03B-2E0FE97E93C2} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Vmbus - channel: 0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - keyword: 0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin - level: 0x2: win:Error: Error {F3419A17-E994-4C40-B593-79B8EDEC54E9} Manifest Microsoft-Windows-Dot3MM - channel: 0x10: Microsoft-Windows-Dot3MM/Diagnostic: Microsoft-Windows-Dot3MM/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Dot3MM/Diagnostic: Microsoft-Windows-Dot3MM/Diagnostic - level: 0x4: win:Informational: Information {F3C5E28E-63F6-49C7-A204-E48A1BC4B09D} Manifest Microsoft-Windows-FilterManager - channel: 0x8: System: System - keyword: 0x8000000000000000: System: System - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F3F14FF3-7B80-4868-91D0-D77E497B025E} Manifest Microsoft-Windows-WMP - channel: 0x10: WMPSyncEngine - keyword: 0x10000: mediaplayer 0x20000: metadataplugin 0x40000: ramcache 0x80000: metadatalifecycle 0x100000: mls 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: WMPSyncEngine - level: 0x4: win:Informational: Information {F3F53C76-B06D-4F15-B412-61164A0D2B73} Manifest Microsoft-Windows-VerifyHardwareSecurity - channel: 0x10: Microsoft-Windows-VerifyHardwareSecurity/Operational: Microsoft-Windows-VerifyHardwareSecurity/Operational 0x11: Microsoft-Windows-VerifyHardwareSecurity/Admin: Microsoft-Windows-VerifyHardwareSecurity/Admin - keyword: 0x8000000000000000: Microsoft-Windows-VerifyHardwareSecurity/Operational: Microsoft-Windows-VerifyHardwareSecurity/Operational 0x4000000000000000: Microsoft-Windows-VerifyHardwareSecurity/Admin: Microsoft-Windows-VerifyHardwareSecurity/Admin - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F404B94E-27E0-4384-BFE8-1D8D390B0AA3} Manifest Microsoft-Windows-MediaFoundation-Performance - channel: 0x10: MediaFoundationPerformance: Media Foundation Performance 0x11: Microsoft-Windows-MediaFoundation-Performance/SARStreamResource - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: MediaFoundationPerformance: Media Foundation Performance 0x4000000000000000: Microsoft-Windows-MediaFoundation-Performance/SARStreamResource - level: 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {F43C3C35-22E2-53EB-F169-07594054779E} Manifest Microsoft-Windows-SettingSync-OneDrive - channel: 0x10: Microsoft-Windows-SettingSync-OneDrive/Operational: Operational 0x11: Microsoft-Windows-SettingSync-OneDrive/Debug: Debug 0x12: Microsoft-Windows-SettingSync-OneDrive/Analytic: Microsoft-Windows-SettingSync-OneDrive/Analytic - keyword: 0x1: RoamingSettings 0x8000000000000000: Microsoft-Windows-SettingSync-OneDrive/Operational: Operational 0x4000000000000000: Microsoft-Windows-SettingSync-OneDrive/Debug: Debug 0x2000000000000000: Microsoft-Windows-SettingSync-OneDrive/Analytic: Microsoft-Windows-SettingSync-OneDrive/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F4AED7C7-A898-4627-B053-44A7CAA12FCD} Manifest Microsoft-Windows-RPC-Events - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {F4C9BE26-414F-42D7-B540-8BFF965E6D32} Manifest Microsoft-Windows-WWAN-MediaManager - channel: 0x10: Microsoft-Windows-WWAN-MediaManager/Diagnostic: Microsoft-Windows-WWAN-MediaManager/Diagnostic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-WWAN-MediaManager/Diagnostic: Microsoft-Windows-WWAN-MediaManager/Diagnostic - level: 0x4: win:Informational: Information {F4E1897C-BB5D-5668-F1D8-040F4D8DD344} Manifest Microsoft-Windows-Threat-Intelligence - channel: 0x10: Microsoft-Windows-Threat-Intelligence/Analytic - keyword: 0x10: KERNEL_THREATINT_KEYWORD_ALLOCVM 0x20: KERNEL_THREATINT_KEYWORD_PROTECTVM 0x40: KERNEL_THREATINT_KEYWORD_MAPVIEW 0x80: KERNEL_THREATINT_KEYWORD_QUEUEUSERAPC 0x100: KERNEL_THREATINT_KEYWORD_SETTHREADCONTEXT 0x200: KERNEL_THREATINT_KEYWORD_LOCAL_CALLS 0x400: KERNEL_THREATINT_KEYWORD_CONTEXT_PARSE 0x800: KERNEL_THREATINT_KEYWORD_EXECUTION_ADDRESS_VAD_PROBE 0x1000: KERNEL_THREATINT_KEYWORD_EXECUTION_ADDRESS_MMF_NAME_PROBE 0x2000: KERNEL_THREATINT_KEYWORD_READVM 0x4000: KERNEL_THREATINT_KEYWORD_WRITEVM 0x8000: KERNEL_THREATINT_KEYWORD_READWRITEVM_NO_SIGNATURE_RESTRICTION 0x8000000000000000: Microsoft-Windows-Threat-Intelligence/Analytic {F50D9315-E17E-43C1-8370-3EDF6CC057BE} Manifest OfficeLoggingLiblet - channel: 0x10: General Logging - keyword: 0x100: LoggingScope: Mso Logging Scope keyword 0x200: DiskIO: Resouce Usage DiskIO keyword 0x400: NetworkUsage: Resouce Usage Network Usage keyword 0x800: ResourceUsageDiagnostic: Resouce Usage Diagnostic keyword 0x1000: MemoryUsage: Resouce Usage Memory Usage keyword 0x2000: LoggingLiblet: Logging Liblet keyword 0x8000000000000000: General Logging - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose 0x10: VerboseEx {F5344219-87A4-4399-B14A-E59CD118ABB8} Manifest Microsoft-Windows-Http-SQM-Provider - keyword: 0x8000000000000: win:SQM: SQM - level: 0x4: win:Informational: Information {F5528ADA-BE5F-4F14-8AEF-A95DE7281161} Manifest Microsoft-Windows-Kernel-Licensing-StartServiceTrigger - level: 0x4: win:Informational: Information {F562BB8E-422D-4B5C-B20E-90D710F7D11C} Manifest OfficeAirSpace - channel: 0x10: AirSpaceChannel - keyword: 0x1: Memory 0x2: Timing 0x4: FPS 0x8: Layer 0x10: Texture 0x20: DirectX 0x40: CPU 0x80: GPU 0x100: Window 0x200: Initialization 0x400: Exception 0x800: Animation 0x1000: Shutdown 0x2000: AirSpy 0x4000: Atlas 0x8000: LowResourceMode 0x10000: GDIRendering 0x20000: Channel 0x40000: Automation 0x80000: DebugLog 0x100000: Scrolling 0x200000: FrontEnd 0x400000: BackEnd 0x800000: CommandList 0x1000000: Desktop 0x2000000: MaxTextureDimension 0x4000000: Immersive 0x8000000: NullRenderTarget 0x10000000: WetInk 0x20000000: Scene 0x40000000: Interaction 0x80000000: Pointer 0x100000000: LayerTileManager 0x200000000: LayerTexture 0x400000000: Tile 0x800000000: NullHDC 0x1000000000: DirectManipulation 0x8000000000000000: AirSpaceChannel - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {F5988ABB-323A-4098-8A34-85A3613D4638} Manifest Microsoft-Windows-UserDataAccess-CallHistoryClient - keyword: 0x1: Error 0x2: Performance 0x4: CommsDataModel 0x4000000000: Warning 0x400000000000: ms:Measures - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {F5D05B38-80A6-4653-825D-C414E4AB3C68} Manifest Microsoft-Windows-StorDiag - channel: 0x10: Microsoft-Windows-StorDiag/Operational 0x11: Microsoft-Windows-Storage-ClassPnP/Diagnose 0x12: Microsoft-Windows-Storage-ClassPnP/Debug 0x13: Microsoft-Windows-Storage-ClassPnP/Analytic 0x14: Microsoft-Windows-Storage-ClassPnP/Operational 0x15: Microsoft-Windows-Storage-ClassPnP/Admin - keyword: 0x1: ClassPnPAllIO 0x2: ClassPnPIdleIO 0x4: CopyOffload_IO_Performance: CopyOffload IO Performance measurement 0x8: CopyOffload_Read: CopyOffload Read request 0x10: CopyOffload_Write: CopyOffload Write request 0x20: SenseData: Sense Data returned 0x40: FirmwareUpdate: Storage Firmware Update 0x80: SMR: Shingled Magnetic Recording Drive Operation 0x100000: IO_Performance: IO Performance measurement 0x200000: Read: Read request 0x400000: Write: Write request 0x800000: PagingRead: Paging Read request 0x1000000: PagingWrite: Paging Write request 0x2000000: LowMemoryRead: Low memory Read request 0x4000000: LowMemoryWrite: Low memory write request 0x8000000: NonReadWrite: Non-Read/Write request 0x10000000: PassThrough: Pass-Through request 0x20000000: Flush: Flush request 0x40000000: IOCTL: Device I/O control request 0x80000000: WMI: WMI request 0x100000000: Power: Power request 0x200000000: PnP: PnP request 0x400000000: Enum: Device enumeration handling 0x800000000: Queue: Queue-related operation 0x1000000000: ISR: Interrupt Service Routine processing 0x2000000000: DPC: Deferred Procedure Call handling 0x4000000000: Timer: Timer-related operation 0x8000000000: Protocol: Bus protocol specific operation 0x10000000000: Target: Target-related operation 0x20000000000: Adapter: Controller or Host Bus Adapter related operation 0x40000000000: Retry: Retry handling 0x80000000000: Timeout: Timeout handling 0x100000000000: ReSet: Reset handling 0x200000000000: MiniportInterface: Activity between port and miniport 0x400000000000: Trim: Trim 0x800000000000: Test: Testing-specific processing 0x8000000000000000: Microsoft-Windows-StorDiag/Operational 0x4000000000000000: Microsoft-Windows-Storage-ClassPnP/Diagnose 0x2000000000000000: Microsoft-Windows-Storage-ClassPnP/Debug 0x1000000000000000: Microsoft-Windows-Storage-ClassPnP/Analytic 0x800000000000000: Microsoft-Windows-Storage-ClassPnP/Operational 0x400000000000000: Microsoft-Windows-Storage-ClassPnP/Admin - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F5DBAA02-15D6-4644-A784-7032D508BF64} Manifest Microsoft-Windows-OOBE-Machine-DUI - channel: 0x10: Microsoft-Windows-OOBE-Machine-DUI/Diagnostic 0x11: Microsoft-Windows-OOBE-Machine-DUI/Operational: Microsoft-Windows-OOBE-Machine-DUI/Operational - keyword: 0x1: msoobe 0x8000000000000000: Microsoft-Windows-OOBE-Machine-DUI/Diagnostic 0x4000000000000000: Microsoft-Windows-OOBE-Machine-DUI/Operational: Microsoft-Windows-OOBE-Machine-DUI/Operational - level: 0x4: win:Informational: Information {F61CEFC0-AA2E-11DA-A746-0800200C9A66} Manifest Microsoft-Windows-Shell-Shwebsvc - channel: 0x10: Microsoft-Windows-Shell-Shwebsvc - keyword: 0x8000000000000000: Microsoft-Windows-Shell-Shwebsvc - level: 0x4: win:Informational: Information {F67B2345-47FA-4721-A6FB-FE08110EECF7} Manifest Microsoft-Windows-IME-TCCORE - channel: 0x10: Microsoft-Windows-IME-TCCORE/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-TCCORE/Analytic - level: 0x4: win:Informational: Information {F708C483-4880-11E6-9121-5CF37068B67B} Manifest Microsoft-Windows-USB-CCID {F717D024-F5B4-4F03-9AB9-331B2DC38FFB} Manifest Microsoft-Windows-DeviceGuard - channel: 0x10: Microsoft-Windows-DeviceGuard/Operational: Microsoft-Windows-DeviceGuard/Operational - keyword: 0x8000000000000000: Microsoft-Windows-DeviceGuard/Operational: Microsoft-Windows-DeviceGuard/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {F82FB576-E941-4956-A2C7-A0CF83F6450A} Manifest Microsoft-Windows-PerfOS - channel: 0x9: Application: Application - keyword: 0x80000000000000: win:EventlogClassic: Classic 0x8000000000000000: Application: Application {F8AD09BA-419C-5134-1750-270F4D0FB889} Manifest Microsoft-Windows-DeliveryOptimization - channel: 0x9: Application: Application - keyword: 0x8000000000000000: Application: Application - level: 0x3: win:Warning: Warning {F91577C6-A704-4A0A-A8F5-7D10DFC761DF} Manifest Microsoft-Windows-LanguageProfile - channel: 0x10: Microsoft-Windows-LanguageProfile/Analytic: Analytic channel logs minor warnings, major state/configuration change that can help debug admin and operational events. Default enabled state: off. Target audience: PSS/diagnostic tools/component developers - keyword: 0x8000000000000000: Microsoft-Windows-LanguageProfile/Analytic: Analytic channel logs minor warnings, major state/configuration change that can help debug admin and operational events. Default enabled state: off. Target audience: PSS/diagnostic tools/component developers {F997CD11-0FC9-4AB4-ACBA-BC742A4C0DD3} Manifest Microsoft-Windows-RPC-FirewallManager - keyword: 0x80000000000000: win:EventlogClassic: Classic {F9FE3908-44B8-48D9-9A32-5A763FF5ED79} Manifest Microsoft-Windows-Deduplication - channel: 0x10: Microsoft-Windows-Deduplication/Operational 0x11: Microsoft-Windows-Deduplication/Scrubbing 0x12: Microsoft-Windows-Deduplication/Diagnostic 0x13: Microsoft-Windows-Deduplication/Performance 0x9: Application: Application - keyword: 0x1: Reporting: Reporting 0x2: Filter: Filter 0x4: KmStreamStore: Kernel mode stream store 0x8: KmChunkStore: Kernel mode chunk store 0x10: KmChunkContainer: Kernel mode chunk container 0x20: KmFileCache: Kernel mode file cache 0x8000000000000000: Microsoft-Windows-Deduplication/Operational 0x4000000000000000: Microsoft-Windows-Deduplication/Scrubbing 0x2000000000000000: Microsoft-Windows-Deduplication/Diagnostic 0x1000000000000000: Microsoft-Windows-Deduplication/Performance 0x800000000000000: Application: Application - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {FA5CF675-72EB-49E2-B447-DE5552FAFF1C} Manifest Microsoft-Windows-Runtime-Graphics - channel: 0x10: Microsoft-Windows-Runtime-Graphics/Analytic - keyword: 0x1: DisplayProperties 0x8000000000000000: Microsoft-Windows-Runtime-Graphics/Analytic - level: 0x0: win:LogAlways: Log Always {FA773482-F6ED-4895-8A7D-4F5850678E59} Manifest Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter - channel: 0x10: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Admin 0x11: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Analytic - keyword: 0x1: Default 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Admin 0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Analytic - level: 0x2: win:Error: Error 0x4: win:Informational: Information {FAE10392-F0AF-4AC0-B8FF-9F4D920C3CDF} Manifest Microsoft-Windows-Security-Mitigations - channel: 0x10: Microsoft-Windows-Security-Mitigations/KernelMode: Kernel Mode 0x11: Microsoft-Windows-Security-Mitigations/UserMode: User Mode - keyword: 0x8000000000000000: Microsoft-Windows-Security-Mitigations/KernelMode: Kernel Mode 0x4000000000000000: Microsoft-Windows-Security-Mitigations/UserMode: User Mode - level: 0x3: win:Warning: Warning {FAE96D09-ADE1-5223-0098-AF7B67348531} Manifest Microsoft-Windows-SENSE - channel: 0x10: Microsoft-Windows-SENSE/Operational - keyword: 0x8: Trigger 0x8000000000000000: Microsoft-Windows-SENSE/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {FB19EE2C-0D22-4A2E-969E-DD41AE0CE1A9} Manifest Microsoft-Windows-UserDataAccess-UserDataService {FB4A19EE-EB5A-47A4-BC52-E71AAC6D0859} Manifest Microsoft-AppV-SharedPerformance - channel: 0x10: Microsoft-AppV-SharedPerformance/Analytic - keyword: 0x8000000000000000: Microsoft-AppV-SharedPerformance/Analytic - level: 0x0: win:LogAlways: Log Always 0x4: win:Informational: Information 0x6: win:ReservedLevel6 0x7: win:ReservedLevel7 {FB829150-CD7D-44C3-AF5B-711A3C31CEDC} Manifest Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging - channel: 0x10: Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational - keyword: 0x8000000000000000: Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {FBBD52E1-DF97-529D-4B67-53F67DA99A98} Manifest Microsoft-Windows-SystemSettingsHandlers {FBCFAC3F-8459-419F-8E48-1F0B49CDB85E} Manifest Microsoft-Windows-NetworkProfile - channel: 0x10: Microsoft-Windows-NetworkProfile/Diagnostic: Microsoft-Windows-NetworkProfile/Diagnostic 0x11: Microsoft-Windows-NetworkProfile/Operational: Microsoft-Windows-NetworkProfile/Operational - keyword: 0x20: LwtDiagnostic 0x100000000: ut:SendPath 0x200000000: ut:ReceivePath 0x400000000: ut:L3ConnectPath 0x800000000: ut:L2ConnectPath 0x1000000000: ut:ClosePath 0x2000000000: ut:Authentication 0x4000000000: ut:Configuration 0x8000000000: ut:Global 0x10000000000: ut:Dropped 0x20000000000: ut:PiiPresent 0x40000000000: ut:Packet 0x80000000000: ut:Address 0x100000000000: ut:StdTemplateHint 0x200000000000: ut:StateTransition 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-NetworkProfile/Diagnostic: Microsoft-Windows-NetworkProfile/Diagnostic 0x4000000000000000: Microsoft-Windows-NetworkProfile/Operational: Microsoft-Windows-NetworkProfile/Operational - level: 0x2: win:Error: Error 0x4: win:Informational: Information {FBCFAC3F-8460-419F-8E48-1F0B49CDB85E} Manifest Microsoft-Windows-NetworkProfileTriggerProvider - keyword: 0x1: Keyword_ProfileChange - level: 0x4: win:Informational: Information {FBEF8096-2CA3-4082-ACDE-DCFB47E96B72} Manifest Microsoft-Windows-FirstUX-PerfInstrumentation - channel: 0x10: FirstUXPerf-Analytic: Setup splash window performance - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: FirstUXPerf-Analytic: Setup splash window performance - level: 0x4: win:Informational: Information {FC3BC8A7-2F61-449C-A8B4-22AC22058F92} Manifest Microsoft-Windows-NDF-HelperClassDiscovery - channel: 0x10: Microsoft-Windows-NDF-HelperClassDiscovery/Debug: Microsoft-Windows-Diagnostics-Networking/Debug - keyword: 0x8000000000000000: Microsoft-Windows-NDF-HelperClassDiscovery/Debug: Microsoft-Windows-Diagnostics-Networking/Debug - level: 0x2: win:Error: Error 0x3: win:Warning: Warning {FC4E8F51-7A04-4BAB-8B91-6321416F72AB} Manifest Microsoft-Windows-Containers-BindFlt - channel: 0x10: Microsoft-Windows-Containers-BindFlt/Operational 0x11: Microsoft-Windows-Containers-BindFlt/Debug - keyword: 0x8000000000000000: Microsoft-Windows-Containers-BindFlt/Operational 0x4000000000000000: Microsoft-Windows-Containers-BindFlt/Debug - level: 0x2: win:Error: Error 0x4: win:Informational: Information {FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148} Manifest Microsoft-Windows-Eventlog - channel: 0x8: System: System 0xa: Security: Security 0x10: Setup: Setup 0x11: Microsoft-Windows-EventLog/Debug: Debug 0x12: Microsoft-Windows-EventLog/Analytic: Analytic - keyword: 0x20000: el:Availability: Service availability 0x40000: el:Settings: Service configuration 0x80000: el:SystemAvailability: System availability 0x20000000000000: win:AuditSuccess: Audit Success 0x8000000000000000: System: System 0x4000000000000000: Security: Security 0x2000000000000000: Setup: Setup 0x1000000000000000: Microsoft-Windows-EventLog/Debug: Debug 0x800000000000000: Microsoft-Windows-EventLog/Analytic: Analytic - level: 0x1: win:Critical: Critical 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {FC6F77DD-769A-470E-BCF9-1B6555A118BE} Manifest Microsoft-Windows-Search-ProfileNotify - keyword: 0x80000000000000: win:EventlogClassic: Classic {FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2} Manifest Microsoft-Windows-DeviceSetupManager - channel: 0x10: Microsoft-Windows-DeviceSetupManager/Operational 0x11: Microsoft-Windows-DeviceSetupManager/Admin 0x12: Microsoft-Windows-DeviceSetupManager/Debug 0x13: Microsoft-Windows-DeviceSetupManager/Analytic - keyword: 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-Windows-DeviceSetupManager/Operational 0x4000000000000000: Microsoft-Windows-DeviceSetupManager/Admin 0x2000000000000000: Microsoft-Windows-DeviceSetupManager/Debug 0x1000000000000000: Microsoft-Windows-DeviceSetupManager/Analytic - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {FD44A6E7-580F-4A9C-83D9-D820B7D3A033} Manifest Microsoft-Windows-IME-OEDCompiler - channel: 0x10: Microsoft-Windows-IME-OEDCompiler/Analytic - keyword: 0x8000000000000000: Microsoft-Windows-IME-OEDCompiler/Analytic - level: 0x4: win:Informational: Information {FD771D53-8492-4057-8E35-8C02813AF49B} Manifest Microsoft-Windows-ProcessExitMonitor - keyword: 0x80000000000000: win:EventlogClassic: Classic {FDC7B3F9-EB64-4043-9D47-BF2B7457BAA6} Manifest EsifLfEtwProvider - keyword: 0x1: ApiTrace 0x2: Action_const 0x4: Action_msr 0x8: Action_mmio 0x10: Action_acpi 0x20: IPC 0x40: Command 0x80: Primitive 0x100: Action 0x200: Cpc 0x400: Power 0x800: Dsp 0x1000: Event 0x2000: Elf 0x4000: Pmg 0x8000: Queue 0x10000: Hash 0x20000: Pnp 0x40000: Action_code 0x80000: Domain 0x100000: Action_mbi 0x200000: Drvm 0x400000: Windows 0x800000: Linux 0x1000000: Action_delegate 0x2000000: Lp 0x4000000: KIoctl 0x100000000: Interrupt - level: 0x0: win:LogAlways: Log Always 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information {FE28004E-B08F-4407-92B3-BAD3A2C51708} Manifest Microsoft-Windows-Sdbus - channel: 0x10: Microsoft-Windows-Sdbus/Analytic 0x11: Microsoft-Windows-Sdbus/Debug - keyword: 0x1: Interrupt: Interrupt handling 0x2: Emmc: eMMC specific processing 0x4: Sdio: SDIO specific processing 0x8: Sd: SD specific processing 0x10: Perf: Sdbus P-state frequency scaling 0x20: Error: SD bus errors 0x40: Dpc: SD bus DPC 0x80: Request: SD bus request 0x8000000000000000: Microsoft-Windows-Sdbus/Analytic 0x4000000000000000: Microsoft-Windows-Sdbus/Debug - level: 0x4: win:Informational: Information {FF79A477-C45F-4A52-8AE0-2B324346D4E4} Manifest Windows-ApplicationModel-Store-SDK - channel: 0x10: Microsoft-Windows-Store/Operational - keyword: 0x1: StorefrontClient 0x2: Messages 0x4: StorePurchaseApp 0x8000000000000000: Microsoft-Windows-Store/Operational - level: 0x2: win:Error: Error 0x3: win:Warning: Warning 0x4: win:Informational: Information 0x5: win:Verbose: Verbose {FFDB9886-80F3-4540-AA8B-B85192217DDF} Manifest Microsoft-PerfTrack-MSHTML - channel: 0x10: Microsoft-PerfTrack-MSHTML/Diagnostic - keyword: 0x1: defunct 0x1000000000000: win:ResponseTime: Response Time 0x8000000000000000: Microsoft-PerfTrack-MSHTML/Diagnostic - level: 0x4: win:Informational: Information