mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
repnz
14178 lines
536 KiB
Plaintext
14178 lines
536 KiB
Plaintext
[+] Collecting Information..
|
|
{5EEFEBDB-E90C-423A-8ABF-0241E7C5B87D} MOF Windows Defender Firewall Service
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{5EBB59D1-4739-4E45-872D-B8703956D84B} MOF Deduplication Tracing Provider
|
|
|
|
{7E2DBFC7-41E8-4987-BCA7-76CADFAD765F} MOF FD WSDAPI Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{485E7DE9-0A80-11D8-AD15-505054503030} MOF UMDF - Framework Trace
|
|
- keyword:
|
|
0x1: FX_TRACE_API: FX_TRACE_API Flag
|
|
0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag
|
|
0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag
|
|
0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag
|
|
0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag
|
|
0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag
|
|
0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag
|
|
0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag
|
|
0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag
|
|
0x200: FX_TRACE_IO: FX_TRACE_IO Flag
|
|
0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag
|
|
0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag
|
|
0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag
|
|
0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag
|
|
0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag
|
|
0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag
|
|
0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag
|
|
0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag
|
|
0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag
|
|
0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag
|
|
0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag
|
|
0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag
|
|
0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag
|
|
0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag
|
|
0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag
|
|
0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag
|
|
0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag
|
|
0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag
|
|
0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag
|
|
0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag
|
|
0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag
|
|
0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{1AB5AC29-037F-43A1-9484-78C9DB61F869} MOF WPD ShellServiceObject Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_Perf: WPD_Perf Flag
|
|
0x200: WPD_F2: WPD_F2 Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: WPD_F4: WPD_F4 Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: WPDShServiceObj_f1: WPDShServiceObj_f1 Flag
|
|
0x20000: WPDShServiceObj_f2: WPDShServiceObj_f2 Flag
|
|
|
|
{127D46AF-4AD3-489F-9165-F00BA64D5467} MOF File Kernel Trace; Volume To Log
|
|
- keyword:
|
|
0x1: a: A
|
|
0x2: b: B
|
|
0x4: c: C
|
|
0x8: d: D
|
|
0x10: e: E
|
|
0x20: f: F
|
|
0x40: g: G
|
|
0x80: h: H
|
|
0x100: i: I
|
|
0x200: j: J
|
|
0x400: k: K
|
|
0x800: l: L
|
|
0x1000: m: M
|
|
0x2000: n: N
|
|
0x4000: o: O
|
|
0x8000: p: P
|
|
0x10000: q: Q
|
|
0x20000: r: R
|
|
0x40000: s: S
|
|
0x80000: t: T
|
|
0x100000: u: U
|
|
0x200000: v: V
|
|
0x400000: w: W
|
|
0x800000: x: X
|
|
0x1000000: y: Y
|
|
0x2000000: z: Z
|
|
0x4000000: all: All
|
|
0x8000000: local: Local
|
|
0x10000000: network: Network
|
|
|
|
{0DD082C4-66F2-271F-74BA-2BF1F9F65C66} MOF OLEDB.1
|
|
|
|
{E2A24A32-00DC-4025-9689-C108C01991C5} MOF EA IME API
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: EAAPI: EAAPI Flag
|
|
0x8: EntryPoint: EntryPoint Flag
|
|
0x10: ImeDDI: ImeDDI Flag
|
|
0x20: TipInterface: TipInterface Flag
|
|
0x40: FileOp: FileOp Flag
|
|
0x80: Misc: Misc Flag
|
|
|
|
{791CD79C-65B5-48A3-804C-786048994F47} MOF Microsoft-Windows-OfflineFiles-CscFastSync
|
|
|
|
{935F4AE6-845D-41C6-97FA-380DAD429B72} MOF AuthFw NetShell Plugin
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
|
|
{BBA3ADD2-C229-4CDB-AE2B-57EB6966B0C4} MOF Active Directory: Kerberos Client
|
|
|
|
{45350D79-4497-42F1-BD1B-83587575B91A} MOF WPD ClassInstaller Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_Install: WPD_Install Flag
|
|
0x200: WPD_F2: WPD_F2 Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: WPD_F4: WPD_F4 Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: WPDCI_feature1: WPDCI_feature1 Flag
|
|
0x20000: WPDCI_feature2: WPDCI_feature2 Flag
|
|
|
|
{8E0E93FB-76AD-42EE-8770-B9DFEA596F65} MOF Microsoft-Windows-Fax
|
|
- keyword:
|
|
0x1: Provider: Provider Flag
|
|
0x2: Common: Common Flag
|
|
0x4: Service: Service Flag
|
|
0x8: Print: Print Flag
|
|
0x10: Admin: Admin Flag
|
|
0x20: Com: Com Flag
|
|
0x40: Tapi: Tapi Flag
|
|
0x80: Setup: Setup Flag
|
|
0x100: FaxClient: FaxClient Flag
|
|
0x200: Outlook: Outlook Flag
|
|
0x400: Other: Other Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9F} MOF IMAPI2 MSF
|
|
- keyword:
|
|
0x1: MsftDiscFormat2MsfAddress_DebugConstructor: MsftDiscFormat2MsfAddress_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2MsfAddress_DebugDestructor: MsftDiscFormat2MsfAddress_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2MsfAddress_DebugGeneral: MsftDiscFormat2MsfAddress_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{A0A352C5-B8EC-41E9-9936-8452C1C0A6CF} MOF WPD ClassExtension Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_Install: WPD_Install Flag
|
|
0x200: WPD_F2: WPD_F2 Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: WPD_F4: WPD_F4 Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: PortableDeviceClassExtension_f1: PortableDeviceClassExtension_f1 Flag
|
|
0x20000: PortableDeviceClassExtension_f2: PortableDeviceClassExtension_f2 Flag
|
|
|
|
{FF9E2BDD-0E24-437C-84BE-7CFCAE635808} MOF UMPass Driver Trace
|
|
- keyword:
|
|
0x1: TraceEntryExit: TraceEntryExit Flag
|
|
0x2: TraceIoctl: TraceIoctl Flag
|
|
0x4: TraceParameter: TraceParameter Flag
|
|
0x8: TraceInit: TraceInit Flag
|
|
0x10: TraceInfo: TraceInfo Flag
|
|
0x20: TraceDriver: TraceDriver Flag
|
|
0x40: TraceCreateClose: TraceCreateClose Flag
|
|
0x80: TracePower: TracePower Flag
|
|
0x100: TracePnP: TracePnP Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{222962AB-6180-4B88-A825-346B75F2A24A} MOF Heap Trace Provider
|
|
|
|
{DB1D0418-105A-4C77-9A25-8F96A19716A4} MOF FD SSDP Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{D9131565-E1DD-4C9E-A728-951999C2ADB5} MOF Network Profile Manager
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Informational: Informational Flag
|
|
0x8: Verbose: Verbose Flag
|
|
|
|
{485E7DEF-0A80-11D8-AD15-505054503030} MOF UMDF - Lpc Trace
|
|
- keyword:
|
|
0x1: LPC_TRACE_PORT: LPC_TRACE_PORT Flag
|
|
0x2: LPC_TRACE_CONNECTION: LPC_TRACE_CONNECTION Flag
|
|
0x4: LPC_TRACE_COMMUNICATION: LPC_TRACE_COMMUNICATION Flag
|
|
0x8: LPC_TRACE_LPC: LPC_TRACE_LPC Flag
|
|
0x10: LPC_TRACE_API: LPC_TRACE_API Flag
|
|
0x20: LPC_TRACE_WORKER: LPC_TRACE_WORKER Flag
|
|
0x40: LPC_TRACE_LOOKASIDE: LPC_TRACE_LOOKASIDE Flag
|
|
0x80: LPC_TRACE_MSG: LPC_TRACE_MSG Flag
|
|
0x100: LPC_TRACE_TIMER: LPC_TRACE_TIMER Flag
|
|
0x200: LPC_TRACE_RESERVED_09: LPC_TRACE_RESERVED_09 Flag
|
|
0x400: LPC_TRACE_RESERVED_0a: LPC_TRACE_RESERVED_0a Flag
|
|
0x800: LPC_TRACE_RESERVED_0b: LPC_TRACE_RESERVED_0b Flag
|
|
0x1000: LPC_TRACE_RESERVED_0c: LPC_TRACE_RESERVED_0c Flag
|
|
0x2000: LPC_TRACE_RESERVED_0d: LPC_TRACE_RESERVED_0d Flag
|
|
0x4000: LPC_TRACE_RESERVED_0e: LPC_TRACE_RESERVED_0e Flag
|
|
0x8000: LPC_TRACE_RESERVED_0f: LPC_TRACE_RESERVED_0f Flag
|
|
0x10000: LPC_TRACE_RESERVED_10: LPC_TRACE_RESERVED_10 Flag
|
|
0x20000: LPC_TRACE_RESERVED_11: LPC_TRACE_RESERVED_11 Flag
|
|
0x40000: LPC_TRACE_RESERVED_12: LPC_TRACE_RESERVED_12 Flag
|
|
0x80000: LPC_TRACE_RESERVED_13: LPC_TRACE_RESERVED_13 Flag
|
|
0x100000: LPC_TRACE_RESERVED_14: LPC_TRACE_RESERVED_14 Flag
|
|
0x200000: LPC_TRACE_RESERVED_15: LPC_TRACE_RESERVED_15 Flag
|
|
0x400000: LPC_TRACE_RESERVED_16: LPC_TRACE_RESERVED_16 Flag
|
|
0x800000: LPC_TRACE_RESERVED_17: LPC_TRACE_RESERVED_17 Flag
|
|
0x1000000: LPC_TRACE_RESERVED_18: LPC_TRACE_RESERVED_18 Flag
|
|
0x2000000: LPC_TRACE_RESERVED_19: LPC_TRACE_RESERVED_19 Flag
|
|
0x4000000: LPC_TRACE_RESERVED_1a: LPC_TRACE_RESERVED_1a Flag
|
|
0x8000000: LPC_TRACE_RESERVED_1b: LPC_TRACE_RESERVED_1b Flag
|
|
0x10000000: LPC_TRACE_RESERVED_1c: LPC_TRACE_RESERVED_1c Flag
|
|
0x20000000: LPC_TRACE_RESERVED_1d: LPC_TRACE_RESERVED_1d Flag
|
|
0x40000000: LPC_TRACE_RESERVED_1e: LPC_TRACE_RESERVED_1e Flag
|
|
0x80000000: LPC_TRACE_FUNCTION: LPC_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{BD568F20-FCCD-B948-054E-DB3421115D61} MOF DBNETLIB.1
|
|
|
|
{0C5A3172-2248-44FD-B9A6-8389CB1DC56A} MOF WLAN AutoConfig Trace
|
|
- keyword:
|
|
0x1: DOT11_AUTOCONF: DOT11_AUTOCONF Flag
|
|
0x2: DOT11_AUTOCONF_CLIENT: DOT11_AUTOCONF_CLIENT Flag
|
|
0x4: DOT11_AUTOCONF_UI: DOT11_AUTOCONF_UI Flag
|
|
0x8: DOT11_FATMSM: DOT11_FATMSM Flag
|
|
0x10: DOT11_COMMON: DOT11_COMMON Flag
|
|
0x20: DOT11_WLANGPA: DOT11_WLANGPA Flag
|
|
0x40: DOT11_CLASS_COINSTALLER: DOT11_CLASS_COINSTALLER Flag
|
|
0x80: DOT11_MSM: DOT11_MSM Flag
|
|
0x100: DOT11_MSM_ADAPT: DOT11_MSM_ADAPT Flag
|
|
0x200: DOT11_MSM_SCAN: DOT11_MSM_SCAN Flag
|
|
0x400: DOT11_MSM_CONNECT: DOT11_MSM_CONNECT Flag
|
|
0x800: DOT11_MSM_SECURITY_PKT: DOT11_MSM_SECURITY_PKT Flag
|
|
|
|
{20C46239-D059-4214-A11E-7D6769CBE020} MOF Microsoft-Windows-Remote-FileSystem-Log
|
|
|
|
{D905AC1D-65E7-4242-99EA-FE66A8355DF8} MOF Native WIFI MSM Trace
|
|
- keyword:
|
|
0x1: DOT11_ASSOCIATE: DOT11_ASSOCIATE Flag
|
|
0x2: DOT11_ROAMING: DOT11_ROAMING Flag
|
|
0x4: DOT11_1X: DOT11_1X Flag
|
|
0x8: DOT11_PNP: DOT11_PNP Flag
|
|
0x10: DOT11_SCAN: DOT11_SCAN Flag
|
|
0x20: DOT11_RECEIVE: DOT11_RECEIVE Flag
|
|
0x40: DOT11_SEND: DOT11_SEND Flag
|
|
0x80: DOT11_IOCTL: DOT11_IOCTL Flag
|
|
0x100: DOT11_OID: DOT11_OID Flag
|
|
0x200: DOT11_MISC: DOT11_MISC Flag
|
|
0x400: DOT11_UPCALL: DOT11_UPCALL Flag
|
|
0x800: DOT11_KEYMGR: DOT11_KEYMGR Flag
|
|
0x1000: DOT11_PEER: DOT11_PEER Flag
|
|
0x2000: DOT11_SOFTAP: DOT11_SOFTAP Flag
|
|
0x4000: DOT11_PAM: DOT11_PAM Flag
|
|
0x8000: DOT11_REPEATER: DOT11_REPEATER Flag
|
|
0x10000: DOT11_APROUTER: DOT11_APROUTER Flag
|
|
0x20000: DOT11_WME: DOT11_WME Flag
|
|
0x40000: DOT11_CONFIG: DOT11_CONFIG Flag
|
|
0x80000: DOT11_NOTIFY_OBJECT: DOT11_NOTIFY_OBJECT Flag
|
|
|
|
{89D89015-C0DF-414C-BC48-F50E114832BC} MOF Microsoft-Windows-OfflineFiles-CscService
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9E} MOF IMAPI2 Interleave Stream
|
|
- keyword:
|
|
0x1: MsftDiscFormat2StreamInterleave_DebugConstructor: MsftDiscFormat2StreamInterleave_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2StreamInterleave_DebugDestructor: MsftDiscFormat2StreamInterleave_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2StreamInterleave_DebugGeneral: MsftDiscFormat2StreamInterleave_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{6B510852-3583-4E2D-AFFE-A67F9F223438} MOF Security: Kerberos Authentication
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Trace: Trace Flag
|
|
0x8: API: API Flag
|
|
0x10: Cred: Credentials Flag
|
|
0x20: Context: Context Flag
|
|
0x40: LSess: Logon Session Flag
|
|
0x80: Referral: Referral Flag
|
|
0x100: Logon: Logon Flag
|
|
0x200: KDC: KDC Flag
|
|
0x400: Context2: Context More Flag
|
|
0x800: Time: Time Flag
|
|
0x1000: User: User Flag
|
|
0x2000: Leaks: Leaks Flag
|
|
0x4000: Socket: Socket Flag
|
|
0x8000: Spn: SPN cache Flag
|
|
0x10000: S4uErr: S4U Error Flag
|
|
0x20000: S4U: S4U Trace Flag
|
|
0x40000: Bnd: Binding Cache Flag
|
|
0x80000: Loopback: Loopback Flag
|
|
0x100000: Renew: Ticket Renewal Flag
|
|
0x200000: U2U: U2U Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9D} MOF IMAPI2 Concatenate Stream
|
|
- keyword:
|
|
0x1: MsftDiscFormat2StreamConcatenate_DebugConstructor: MsftDiscFormat2StreamConcatenate_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2StreamConcatenate_DebugDestructor: MsftDiscFormat2StreamConcatenate_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2StreamConcatenate_DebugGeneral: MsftDiscFormat2StreamConcatenate_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{485E7DF0-0A80-11D8-AD15-505054503030} MOF UMDF - Host Process Trace
|
|
- keyword:
|
|
0x1: HOSTPROC_TRACE_API: HOSTPROC_TRACE_API Flag
|
|
0x2: HOSTPROC_TRACE_DDI: HOSTPROC_TRACE_DDI Flag
|
|
0x4: HOSTPROC_TRACE_GENERAL: HOSTPROC_TRACE_GENERAL Flag
|
|
0x8: HOSTPROC_TRACE_OBJECT: HOSTPROC_TRACE_OBJECT Flag
|
|
0x10: HOSTPROC_TRACE_DRVMGR: HOSTPROC_TRACE_DRVMGR Flag
|
|
0x20: HOSTPROC_TRACE_DRIVER: HOSTPROC_TRACE_DRIVER Flag
|
|
0x40: HOSTPROC_TRACE_DEVICE: HOSTPROC_TRACE_DEVICE Flag
|
|
0x80: HOSTPROC_TRACE_REQUEST: HOSTPROC_TRACE_REQUEST Flag
|
|
0x100: HOSTPROC_TRACE_FILEOBJECT: HOSTPROC_TRACE_FILEOBJECT Flag
|
|
0x200: HOSTPROC_TRACE_IO: HOSTPROC_TRACE_IO Flag
|
|
0x400: HOSTPROC_TRACE_PNP: HOSTPROC_TRACE_PNP Flag
|
|
0x800: HOSTPROC_TRACE_LOADER: HOSTPROC_TRACE_LOADER Flag
|
|
0x1000: HOSTPROC_TRACE_IOTARGET: HOSTPROC_TRACE_IOTARGET Flag
|
|
0x2000: HOSTPROC_TRACE_FUNC: HOSTPROC_TRACE_FUNC Flag
|
|
0x4000: HOSTPROC_TRACE_INIT: HOSTPROC_TRACE_INIT Flag
|
|
0x8000: HOSTPROC_TRACE_DISPATCHER: HOSTPROC_TRACE_DISPATCHER Flag
|
|
0x10000: HOSTPROC_TRACE_WIN32_DISPATCHER: HOSTPROC_TRACE_WIN32_DISPATCHER Flag
|
|
0x20000: HOSTPROC_TRACE_USB_DISPATCHER: HOSTPROC_TRACE_USB_DISPATCHER Flag
|
|
0x40000: HOSTPROC_TRACE_REMOTE_DISPATCHER: HOSTPROC_TRACE_REMOTE_DISPATCHER Flag
|
|
0x80000: HOSTPROC_RESERVED_13: HOSTPROC_RESERVED_13 Flag
|
|
0x100000: HOSTPROC_RESERVED_14: HOSTPROC_RESERVED_14 Flag
|
|
0x200000: HOSTPROC_RESERVED_15: HOSTPROC_RESERVED_15 Flag
|
|
0x400000: HOSTPROC_RESERVED_16: HOSTPROC_RESERVED_16 Flag
|
|
0x800000: HOSTPROC_RESERVED_17: HOSTPROC_RESERVED_17 Flag
|
|
0x1000000: HOSTPROC_RESERVED_18: HOSTPROC_RESERVED_18 Flag
|
|
0x2000000: HOSTPROC_RESERVED_19: HOSTPROC_RESERVED_19 Flag
|
|
0x4000000: HOSTPROC_RESERVED_1a: HOSTPROC_RESERVED_1a Flag
|
|
0x8000000: HOSTPROC_RESERVED_1b: HOSTPROC_RESERVED_1b Flag
|
|
0x10000000: HOSTPROC_RESERVED_1c: HOSTPROC_RESERVED_1c Flag
|
|
0x20000000: HOSTPROC_RESERVED_1d: HOSTPROC_RESERVED_1d Flag
|
|
0x40000000: HOSTPROC_RESERVED_1e: HOSTPROC_RESERVED_1e Flag
|
|
0x80000000: HOSTPROC_TRACE_FUNCTION: HOSTPROC_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{1FF6B227-2CA7-40F9-9A66-980EADAA602E} MOF WMI_Tracing
|
|
- keyword:
|
|
0x1: _CORE_: _CORE_ Flag
|
|
0x2: _ESS_: _ESS_ Flag
|
|
0x4: _PROVIDERS_: _PROVIDERS_ Flag
|
|
0x8: _DO_NOT_USE_: _DO_NOT_USE_ Flag
|
|
|
|
{CCC64809-6B5F-4C1B-AB39-336904DA9B3B} MOF Microsoft-Windows-LLTD-Mapper
|
|
- keyword:
|
|
0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag
|
|
0x2: TRACE_CLASS_INIT: TRACE_CLASS_INIT Flag
|
|
0x4: TRACE_CLASS_ENGINE: TRACE_CLASS_ENGINE Flag
|
|
0x8: TRACE_CLASS_PACKET: TRACE_CLASS_PACKET Flag
|
|
0x10: TRACE_CLASS_PROTOCOL: TRACE_CLASS_PROTOCOL Flag
|
|
0x20: TRACE_CLASS_ALGORITHM: TRACE_CLASS_ALGORITHM Flag
|
|
0x40: TRACE_CLASS_SESSION: TRACE_CLASS_SESSION Flag
|
|
0x80: TRACE_CLASS_TRANSACTION: TRACE_CLASS_TRANSACTION Flag
|
|
0x100: TRACE_CLASS_MAPPING: TRACE_CLASS_MAPPING Flag
|
|
|
|
{1311095B-B9FF-497A-8560-2F43CA5438E4} MOF WPD FSDriver Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: PnP: PnP Flag
|
|
0x200: Event: Event Flag
|
|
0x400: Cancel: Cancel Flag
|
|
0x800: Perf: Perf Flag
|
|
0x1000: PerfVerbose: PerfVerbose Flag
|
|
0x2000: Properties: Properties Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
|
|
{1BABEFB4-59CB-49E5-9698-FD38AC830A91} MOF msiscsi_iScsi
|
|
- keyword:
|
|
0x1: iScsiFlagGeneral: iScsiFlagGeneral Flag
|
|
0x2: iScsiFlagAdapter: iScsiFlagAdapter Flag
|
|
0x4: iScsiFlagUnit: iScsiFlagUnit Flag
|
|
0x8: iScsiFlagPnP: iScsiFlagPnP Flag
|
|
0x10: iScsiFlagPower: iScsiFlagPower Flag
|
|
0x20: iScsiFlagIoctl: iScsiFlagIoctl Flag
|
|
0x40: iScsiFlagQueue: iScsiFlagQueue Flag
|
|
0x80: iScsiFlagWmi: iScsiFlagWmi Flag
|
|
0x100: iScsiFlagTimer: iScsiFlagTimer Flag
|
|
0x200: iScsiFlagInit: iScsiFlagInit Flag
|
|
0x400: iScsiFlagLock: iScsiFlagLock Flag
|
|
0x800: iScsiFlagIsr: iScsiFlagIsr Flag
|
|
0x1000: iScsiFlagEnum: iScsiFlagEnum Flag
|
|
0x2000: iScsiFlagBoot: iScsiFlagBoot Flag
|
|
0x4000: iScsiFlagErl: iScsiFlagErl Flag
|
|
0x8000: iScsiFlagNetwork: iScsiFlagNetwork Flag
|
|
0x10000: iScsiFlagRadius: iScsiFlagRadius Flag
|
|
0x20000: iScsiFlagSockets: iScsiFlagSockets Flag
|
|
0x40000: iScsiFlagScsi: iScsiFlagScsi Flag
|
|
0x80000: iScsiFlagScsiDataIO: iScsiFlagScsiDataIO Flag
|
|
0x100000: iScsiFlagProtocolLogInOut: iScsiFlagProtocolLogInOut Flag
|
|
0x200000: iScsiFlagProtocolTMF: iScsiFlagProtocolTMF Flag
|
|
0x400000: iScsiFlagProtocolTransfer: iScsiFlagProtocolTransfer Flag
|
|
0x800000: iScsiFlagCHAP: iScsiFlagCHAP Flag
|
|
0x1000000: iScsiFlagDigest: iScsiFlagDigest Flag
|
|
0x2000000: iScsiFlagIpSec: iScsiFlagIpSec Flag
|
|
0x4000000: iScsiDebug26: iScsiDebug26 Flag
|
|
0x8000000: iScsiDebug27: iScsiDebug27 Flag
|
|
0x10000000: iScsiDebug28: iScsiDebug28 Flag
|
|
0x20000000: iScsiDebug29: iScsiDebug29 Flag
|
|
0x40000000: iScsiDebug30: iScsiDebug30 Flag
|
|
0x80000000: iScsiDebug31: iScsiDebug31 Flag
|
|
|
|
{740F3C34-57DF-4BAD-8EEA-72AC69AD5DF5} MOF RefsWppTrace
|
|
- keyword:
|
|
0x1: FATAL: FATAL Flag
|
|
0x2: ERROR: ERROR Flag
|
|
0x4: WARNING: WARNING Flag
|
|
0x8: READ: READ Flag
|
|
0x10: WRITE: WRITE Flag
|
|
0x20: NONCACHEDIO: NONCACHEDIO Flag
|
|
0x40: PAGETABLEWRITE: PAGETABLEWRITE Flag
|
|
0x80: FILEID: FILEID Flag
|
|
0x100: STATUS: STATUS Flag
|
|
0x200: MINSTORE: MINSTORE Flag
|
|
0x400: SCRUB: SCRUB Flag
|
|
0x800: TREEUPDATE: TREEUPDATE Flag
|
|
0x1000: LOG: LOG Flag
|
|
0x2000: READCACHE: READCACHE Flag
|
|
0x4000: ACTIVITYID: ACTIVITYID Flag
|
|
0x8000: COMPACTION: COMPACTION Flag
|
|
|
|
{74A75B02-36D8-EDE6-D10E-95B691503408} MOF RowsetHelper.1
|
|
|
|
{8A8B5246-6EB6-4339-8B59-B0085B9F4890} MOF Mobility Center Performance Trace
|
|
- keyword:
|
|
0x1: TRACE_PERFORMANCE: TRACE_PERFORMANCE Flag
|
|
|
|
{C5BFFE2E-9D87-D568-A09E-08FC83D0C7C2} MOF SQLOLEDB_1
|
|
|
|
{F59D1D86-CC03-4736-BC9C-4C7936871B3D} MOF RSS Platform Backgroundsync Trace
|
|
- keyword:
|
|
0x1: Fatal: Fatal Flag
|
|
0x2: Error: Error Flag
|
|
0x4: Warning: Warning Flag
|
|
0x8: Info: Info Flag
|
|
0x10: API: API Flag
|
|
0x20: FuncCall: FuncCall Flag
|
|
0x40: HiFreq: HiFreq Flag
|
|
|
|
{CC85922F-DB41-11D2-9244-006008269001} MOF Local Security Authority (LSA)
|
|
|
|
{725BA9B3-C1F3-4518-AF1B-C8D669191E15} MOF Microsoft-Windows-QoS-WMI-Diag
|
|
- keyword:
|
|
0x1: QOSWMI_TRACE_CALL: QOSWMI_TRACE_CALL Flag
|
|
0x2: QOSWMI_TRACE_POLICY: QOSWMI_TRACE_POLICY Flag
|
|
0x4: QOSWMI_TRACE_UTILS: QOSWMI_TRACE_UTILS Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors
|
|
0x3: Warning: Warnings
|
|
0x4: Information: Information
|
|
0x5: Verbose: Detailed information
|
|
|
|
{520319A9-B932-4EC7-943C-61E560939101} MOF WLAN Dialog Trace
|
|
- keyword:
|
|
0x1: WLANDLG_TRACE: WLANDLG_TRACE Flag
|
|
|
|
{B6501BA0-C61A-C4E6-6FA2-A4E7F8C8E7A0} MOF MSDASQL_1
|
|
|
|
{945186BF-3DD6-4F3F-9C8E-9EDD3FC9D558} MOF Disk Class Driver Tracing Provider
|
|
- keyword:
|
|
0x1: TRACE_FLAG_GENERAL: This enables all configuration traces
|
|
0x2: TRACE_FLAG_PNP: This enables PNP traces
|
|
0x4: TRACE_FLAG_POWER: This enables power traces
|
|
0x8: TRACE_FLAG_RW: This enables read/write traces
|
|
0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces
|
|
0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces
|
|
0x40: TRACE_FLAG_WMI: This enables WMI traces
|
|
0x80: TRACE_FLAG_TIMER: This enables timer traces
|
|
0x100: TRACE_FLAG_INIT: This enables initilization traces
|
|
0x200: TRACE_FLAG_LOCK: This enables remove lock traces
|
|
0x400: TRACE_FLAG_DEBUG1: This flag is not used
|
|
0x800: TRACE_FLAG_DEBUG2: This flag is not used
|
|
0x1000: TRACE_FLAG_MCN: This enables media change notification traces
|
|
0x2000: TRACE_FLAG_ISR: This enables ISR traces
|
|
0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{5C6CE734-1B3E-705E-C2AB-B272D99AAF8F} MOF MSADCO.1
|
|
|
|
{D5E09122-D0B2-4235-ADC1-C89FAAAF1069} MOF Windows Defender Firewall Driver
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
|
|
{7F3FE630-462B-47C5-AB07-67CA84934ABD} MOF WSAT_TraceProvider
|
|
|
|
{A1E89BB0-EF73-4980-8C99-DD15F7271D7E} MOF Sensor ClassExtension Trace
|
|
- keyword:
|
|
0x1: TRACE_NONE: TRACE_NONE Flag
|
|
0x2: TRACE_FATAL: TRACE_FATAL Flag
|
|
0x4: TRACE_ERROR: TRACE_ERROR Flag
|
|
0x8: TRACE_WARNING: TRACE_WARNING Flag
|
|
0x10: TRACE_INFORMATION: TRACE_INFORMATION Flag
|
|
0x20: TRACE_VERBOSE: TRACE_VERBOSE Flag
|
|
0x40: TRACE_RESERVED6: TRACE_RESERVED6 Flag
|
|
0x80: TRACE_RESERVED7: TRACE_RESERVED7 Flag
|
|
0x100: TRACE_RESERVED8: TRACE_RESERVED8 Flag
|
|
0x200: TRACE_RESERVED9: TRACE_RESERVED9 Flag
|
|
0x400: TRACE_STACK: TRACE_STACK Flag
|
|
0x800: TRACE_RESERVED10: TRACE_RESERVED10 Flag
|
|
0x1000: TRACE_UNITTEST: TRACE_UNITTEST Flag
|
|
0x2000: TRACE_VERIFICATION: TRACE_VERIFICATION Flag
|
|
|
|
{AD33FA19-F2D2-46D1-8F4C-E3C3087E45AD} MOF FWPKCLNT Trace Provider
|
|
|
|
{72891EE8-C088-4331-9745-5BF4AA7B344D} MOF WPD Composite Driver Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: PnP: PnP Flag
|
|
0x200: Event: Event Flag
|
|
0x400: Cancel: Cancel Flag
|
|
0x800: Perf: Perf Flag
|
|
0x1000: PerfVerbose: PerfVerbose Flag
|
|
0x2000: Bulk: Bulk Flag
|
|
0x4000: Power: Power Flag
|
|
0x8000: Audit: Audit Flag
|
|
0x10000: WPDMTP_feature1: WPDMTP_feature1 Flag
|
|
0x20000: WPDMTP_feature2: WPDMTP_feature2 Flag
|
|
|
|
{A42C7BD1-5AF3-4B32-9BC6-B85EB31D3F4A} MOF WPD ShellExtension Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_Perf: WPD_Perf Flag
|
|
0x200: WPD_F2: WPD_F2 Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: WPD_F4: WPD_F4 Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: WPDNSE_REFCOUNT: WPDNSE_REFCOUNT Flag
|
|
0x20000: WPDNSE_DLLREFCOUNT: WPDNSE_DLLREFCOUNT Flag
|
|
0x40000: WPDNSE_CHANGENOTIFY: WPDNSE_CHANGENOTIFY Flag
|
|
0x80000: WPDNSE_TRANSCODE: WPDNSE_TRANSCODE Flag
|
|
|
|
{564F1E24-FC86-28E1-74F8-5CA0D950BEE0} MOF MSDAREM.1
|
|
|
|
{3B9E3DA4-70B8-46D3-9EF2-3DDF128BDED8} MOF SD Bus Trace
|
|
- keyword:
|
|
0x1: SDBUS_DEBUG_FAIL: SDBUS_DEBUG_FAIL Flag
|
|
0x2: SDBUS_DEBUG_WARNING: SDBUS_DEBUG_WARNING Flag
|
|
0x4: SDBUS_DEBUG_INFO: SDBUS_DEBUG_INFO Flag
|
|
0x8: SDBUS_DEBUG_PNP: SDBUS_DEBUG_PNP Flag
|
|
0x10: SDBUS_DEBUG_POWER: SDBUS_DEBUG_POWER Flag
|
|
0x20: SDBUS_DEBUG_ENUM: SDBUS_DEBUG_ENUM Flag
|
|
0x40: SDBUS_DEBUG_DEVINIT: SDBUS_DEBUG_DEVINIT Flag
|
|
0x80: SDBUS_DEBUG_DEVCFG: SDBUS_DEBUG_DEVCFG Flag
|
|
0x100: SDBUS_DEBUG_INTERFACE: SDBUS_DEBUG_INTERFACE Flag
|
|
0x200: SDBUS_DEBUG_DEVCMD: SDBUS_DEBUG_DEVCMD Flag
|
|
0x400: SDBUS_DEBUG_EVENT: SDBUS_DEBUG_EVENT Flag
|
|
0x800: SDBUS_DEBUG_CARD_EVT: SDBUS_DEBUG_CARD_EVT Flag
|
|
0x1000: SDBUS_DEBUG_SDCMD: SDBUS_DEBUG_SDCMD Flag
|
|
0x2000: SDBUS_DEBUG_SDRESP: SDBUS_DEBUG_SDRESP Flag
|
|
0x4000: SDBUS_DEBUG_DEVICE: SDBUS_DEBUG_DEVICE Flag
|
|
0x8000: SDBUS_DEBUG_RECOVERY: SDBUS_DEBUG_RECOVERY Flag
|
|
0x10000: SDBUS_DEBUG_TRANSFER: SDBUS_DEBUG_TRANSFER Flag
|
|
0x20000: SDBUS_DEBUG_INACTIVITY: SDBUS_DEBUG_INACTIVITY Flag
|
|
0x40000: SDBUS_DEBUG_EVT_HANDLING: SDBUS_DEBUG_EVT_HANDLING Flag
|
|
0x80000: SDBUS_DEBUG_WORKENG: SDBUS_DEBUG_WORKENG Flag
|
|
0x100000: SDBUS_DEBUG_WORKENG2: SDBUS_DEBUG_WORKENG2 Flag
|
|
0x200000: SDBUS_DEBUG_DUMP_REGS: SDBUS_DEBUG_DUMP_REGS Flag
|
|
|
|
{C100BECE-D33A-4A4B-BF23-BBEF4663D017} MOF Windows Connect Now
|
|
- keyword:
|
|
0x1: TR_DEFAULT: TR_DEFAULT Flag
|
|
0x2: TR_SM: TR_SM Flag
|
|
0x4: TR_BUF: TR_BUF Flag
|
|
0x8: TR_TLV: TR_TLV Flag
|
|
0x10: TR_CACHE: TR_CACHE Flag
|
|
0x20: TR_DLL: TR_DLL Flag
|
|
0x40: TR_RPC: TR_RPC Flag
|
|
0x80: TR_POLICY: TR_POLICY Flag
|
|
0x100: TR_PROTO: TR_PROTO Flag
|
|
0x200: TR_CRYPTO: TR_CRYPTO Flag
|
|
0x400: TR_WSD: TR_WSD Flag
|
|
0x800: TR_EAP: TR_EAP Flag
|
|
0x1000: TR_TRANS: TR_TRANS Flag
|
|
0x2000: TR_WQ: TR_WQ Flag
|
|
0x4000: TR_UTIL: TR_UTIL Flag
|
|
0x8000: TR_COM: TR_COM Flag
|
|
0x10000: TR_FD: TR_FD Flag
|
|
0x20000: TR_WIZ: TR_WIZ Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
0x6: Enter/Exit: Function enter/exit
|
|
|
|
{D75D8303-6C21-4BDE-9C98-ECC6320F9291} MOF File Kernel Trace; Operation Set 1
|
|
- keyword:
|
|
0x1: create: Create
|
|
0x2: createnamedpipe: Create Named Pipe
|
|
0x4: close: Close
|
|
0x8: read: Read
|
|
0x10: write: Write
|
|
0x20: queryinfo: Query Information
|
|
0x40: setinfo: Set Information
|
|
0x80: queryea: Query EA
|
|
0x100: setea: Set EA
|
|
0x200: flushbuffers: Flush Buffers
|
|
0x400: queryvolinfo: Query Volume Information
|
|
0x800: setvolinfo: Set Volume Information
|
|
0x1000: directorycontrol: Directory Control
|
|
0x2000: filesystemcontrol: File System Control
|
|
0x4000: devicecontrol: Device Control
|
|
0x8000: internaldevicecontrol: Internal Device Control
|
|
0x10000: shutdown: Shutdown
|
|
0x20000: lockcontrol: Lock Control
|
|
0x40000: cleanup: Cleanup
|
|
0x80000: createmailslot: Create Mailslot
|
|
0x100000: querysecurity: Query Security
|
|
0x200000: setsecurity: Set Security
|
|
0x400000: power: Power
|
|
0x800000: systemcontrol: System Control
|
|
0x1000000: devicechange: Device Change
|
|
0x2000000: queryquota: Query Quota
|
|
0x4000000: setquota: Set Quota
|
|
0x8000000: pnp: PNP
|
|
|
|
{C861D0E2-A2C1-4D36-9F9C-970BAB943A12} MOF Thread Pool
|
|
|
|
{8A3CF0B5-E0BC-450B-AE4B-61728FFA1D58} MOF Wireless Client Trace
|
|
- keyword:
|
|
0x1: Fatal: Fatal Flag
|
|
0x2: Error: Error Flag
|
|
0x4: Warning: Warning Flag
|
|
0x8: Information: Information Flag
|
|
0x10: Trace: Trace Flag
|
|
0x20: Noise: Noise Flag
|
|
0x40: Perf: Perf Flag
|
|
|
|
{07E397EC-C240-4ED7-8A2A-B9FF0FE5D581} MOF IMAPI2 Raw Image Writer
|
|
- keyword:
|
|
0x1: MsftDiscFormat2RawImage_DebugConstructor: MsftDiscFormat2RawImage_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2RawImage_DebugDestructor: MsftDiscFormat2RawImage_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2RawImage_DebugAddRef: MsftDiscFormat2RawImage_DebugAddRef Flag
|
|
0x8: MsftDiscFormat2RawImage_DebugRelease: MsftDiscFormat2RawImage_DebugRelease Flag
|
|
0x10: MsftDiscFormat2RawImage_DebugGeneral: MsftDiscFormat2RawImage_DebugGeneral Flag
|
|
0x20: MsftDiscFormat2RawImage_DebugX: MsftDiscFormat2RawImage_DebugX Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{6CC2405D-817F-4886-886F-D5D1643210F0} MOF Microsoft-Windows-NetAdapterCim-Diag
|
|
- keyword:
|
|
0x1: NDISWMI_TRACE_ADVPROP: NDISWMI_TRACE_ADVPROP Flag
|
|
0x2: NDISWMI_TRACE_BINDING: NDISWMI_TRACE_BINDING Flag
|
|
0x4: NDISWMI_TRACE_CALL: NDISWMI_TRACE_CALL Flag
|
|
0x8: NDISWMI_TRACE_CHKSUM: NDISWMI_TRACE_CHKSUM Flag
|
|
0x10: NDISWMI_TRACE_ENCAP: NDISWMI_TRACE_ENCAP Flag
|
|
0x20: NDISWMI_TRACE_GENERAL: NDISWMI_TRACE_GENERAL Flag
|
|
0x40: NDISWMI_TRACE_HWINFO: NDISWMI_TRACE_HWINFO Flag
|
|
0x80: NDISWMI_TRACE_LSO: NDISWMI_TRACE_LSO Flag
|
|
0x100: NDISWMI_TRACE_NETCFG: NDISWMI_TRACE_NETCFG Flag
|
|
0x200: NDISWMI_TRACE_POWER: NDISWMI_TRACE_POWER Flag
|
|
0x400: NDISWMI_TRACE_QOS: NDISWMI_TRACE_QOS Flag
|
|
0x800: NDISWMI_TRACE_RDMA: NDISWMI_TRACE_RDMA Flag
|
|
0x1000: NDISWMI_TRACE_RSC: NDISWMI_TRACE_RSC Flag
|
|
0x2000: NDISWMI_TRACE_RSS: NDISWMI_TRACE_RSS Flag
|
|
0x4000: NDISWMI_TRACE_SRIOV: NDISWMI_TRACE_SRIOV Flag
|
|
0x8000: NDISWMI_TRACE_STATS: NDISWMI_TRACE_STATS Flag
|
|
0x10000: NDISWMI_TRACE_VMQ: NDISWMI_TRACE_VMQ Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors
|
|
0x3: Warning: Warnings
|
|
0x4: Information: Information
|
|
0x5: Verbose: Detailed information
|
|
|
|
{94335EB3-79EA-44D5-8EA9-306F49B3A040} MOF Downlevel IPsec Service
|
|
- keyword:
|
|
0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag
|
|
0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag
|
|
0x4: TRC_INFORMATION: TRC_INFORMATION Flag
|
|
0x8: TRC_WARNING: TRC_WARNING Flag
|
|
0x10: TRC_ERROR: TRC_ERROR Flag
|
|
|
|
{485E7DE9-0A80-11D8-AD15-505054503030} MOF Wudfx02000_KmdfTraceGuid
|
|
- keyword:
|
|
0x1: FX_TRACE_API: FX_TRACE_API Flag
|
|
0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag
|
|
0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag
|
|
0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag
|
|
0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag
|
|
0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag
|
|
0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag
|
|
0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag
|
|
0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag
|
|
0x200: FX_TRACE_IO: FX_TRACE_IO Flag
|
|
0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag
|
|
0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag
|
|
0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag
|
|
0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag
|
|
0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag
|
|
0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag
|
|
0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag
|
|
0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag
|
|
0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag
|
|
0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag
|
|
0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag
|
|
0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag
|
|
0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag
|
|
0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag
|
|
0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag
|
|
0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag
|
|
0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag
|
|
0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag
|
|
0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag
|
|
0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag
|
|
0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag
|
|
0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{54DEA73A-ED1F-42A4-AF71-3E63D056F174} MOF Circular Kernel Session Provider
|
|
- keyword:
|
|
0x1: process: Process creations/deletions
|
|
0x2: thread: Thread creations/deletions
|
|
0x4: img: Image load
|
|
0x8: proccntr: Process counters
|
|
0x10: cswitch: Context switches
|
|
0x20: dpc: Deferred procedure calls
|
|
0x40: isr: Interrupts
|
|
0x80: syscall: System calls
|
|
0x100: disk: Disk IO
|
|
0x200: file: File details
|
|
0x400: diskinit: Disk IO entry
|
|
0x800: dispatcher: Dispatcher operations
|
|
0x1000: pf: Page faults
|
|
0x2000: hf: Hard page faults
|
|
0x4000: virtalloc: Virtual memory allocations
|
|
0x10000: net: Network TCP/IP
|
|
0x20000: registry: Registry details
|
|
0x100000: alpc: ALPC
|
|
0x200000: splitio: Split IO
|
|
0x800000: driver: Driver delays
|
|
0x1000000: profile: Sample based profiling
|
|
0x2000000: fileiocompletion: File IO completion
|
|
0x4000000: fileio: File IO
|
|
|
|
{76DBA919-5A36-FC80-2CAD-3185532B7CB1} MOF MSADCE.1
|
|
|
|
{19EE4CF9-5322-4843-B0D8-BAB81BE4E81E} MOF Microsoft-Windows-OfflineFiles-CscApi
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7EA0} MOF IMAPI2 Multisession Sequential
|
|
- keyword:
|
|
0x1: MsftMultisessionSequential_DebugConstructor: MsftMultisessionSequential_DebugConstructor Flag
|
|
0x2: MsftMultisessionSequential_DebugDestructor: MsftMultisessionSequential_DebugDestructor Flag
|
|
0x4: MsftMultisessionSequential_DebugGeneral: MsftMultisessionSequential_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{D451642C-63A6-11D7-9720-00B0D03E0347} MOF Windows Winlogon Trace
|
|
- keyword:
|
|
0x1: Core: Core Flag
|
|
0x2: Setup: Setup Flag
|
|
0x4: DataStore: DataStore Flag
|
|
0x8: Machine: Machine Flag
|
|
0x10: Session: Session Flag
|
|
0x20: User: User Flag
|
|
0x40: WMsg: WMsg Flag
|
|
0x80: Sas: Sas Flag
|
|
0x100: StateTrace: StateTrace Flag
|
|
0x200: Job: Job Flag
|
|
0x400: Timeout: Timeout Flag
|
|
0x800: Power: Power Flag
|
|
0x1000: Logon: Logon Flag
|
|
0x2000: Logoff: Logoff Flag
|
|
0x4000: Lock: Lock Flag
|
|
0x8000: Unlock: Unlock Flag
|
|
0x10000: ChangePassword: ChangePassword Flag
|
|
0x20000: ScreenSaver: ScreenSaver Flag
|
|
0x40000: Accessibility: Accessibility Flag
|
|
0x80000: SLActivate: SLActivate Flag
|
|
|
|
{651D672B-E11F-41B7-ADD3-C2F6A4023672} MOF IPMI Provider Trace
|
|
- keyword:
|
|
0x1: Function: Function Flag
|
|
0x2: FunctionParameter: FunctionParameter Flag
|
|
0x4: FunctionDetail: FunctionDetail Flag
|
|
|
|
{AEFE45F4-8548-42B4-B1C8-25673B07AD8B} MOF PrintFilterPipelineSvc_ObjectsGuid
|
|
- keyword:
|
|
0x1: Generic_Exception: Generic_Exception Flag
|
|
0x2: Generic_Error: Generic_Error Flag
|
|
0x4: Generic_Warn: Generic_Warn Flag
|
|
0x8: PipeMgr_Trace: PipeMgr_Trace Flag
|
|
0x10: PipeMgr_Reach: PipeMgr_Reach Flag
|
|
0x20: PipeBuf_Trace: PipeBuf_Trace Flag
|
|
0x40: PTConv_Trace: PTConv_Trace Flag
|
|
0x80: Framework_Trace: Framework_Trace Flag
|
|
0x100: Filter_Trace: Filter_Trace Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{8C50FA6E-394E-4B47-B6D1-A880A5F225A2} MOF RSS Platform Trace
|
|
- keyword:
|
|
0x1: Fatal: Fatal Flag
|
|
0x2: Error: Error Flag
|
|
0x4: Warning: Warning Flag
|
|
0x8: Info: Info Flag
|
|
0x10: API: API Flag
|
|
0x20: FuncCall: FuncCall Flag
|
|
0x40: HiFreq: HiFreq Flag
|
|
|
|
{2D333977-52E1-4886-801F-2D59EB8060AF} MOF IrDA Protocol Driver
|
|
- keyword:
|
|
0x1: DBG_0x00000001: DBG_0x00000001 Flag
|
|
0x2: DBG_NDIS: DBG_NDIS Flag
|
|
0x4: DBG_TIMER: DBG_TIMER Flag
|
|
0x8: DBG_IRMAC: DBG_IRMAC Flag
|
|
0x10: DBG_0x00000010: DBG_0x00000010 Flag
|
|
0x20: DBG_IRLAP: DBG_IRLAP Flag
|
|
0x40: DBG_IRLAPLOG: DBG_IRLAPLOG Flag
|
|
0x80: DBG_RXFRAME: DBG_RXFRAME Flag
|
|
0x100: DBG_TXFRAME: DBG_TXFRAME Flag
|
|
0x200: DBG_IRLMP: DBG_IRLMP Flag
|
|
0x400: DBG_IRLMP_CONN: DBG_IRLMP_CONN Flag
|
|
0x800: DBG_IRLMP_CRED: DBG_IRLMP_CRED Flag
|
|
0x1000: DBG_IRLMP_IAS: DBG_IRLMP_IAS Flag
|
|
0x2000: DBG_DISCOVERY: DBG_DISCOVERY Flag
|
|
0x4000: DBG_PRINT: DBG_PRINT Flag
|
|
0x8000: DBG_ADDR: DBG_ADDR Flag
|
|
0x10000: DBG_0x00010000: DBG_0x00010000 Flag
|
|
0x20000: DBG_REF: DBG_REF Flag
|
|
0x40000: DBG_TDI: DBG_TDI Flag
|
|
0x80000: DBG_TDI_IRP: DBG_TDI_IRP Flag
|
|
0x100000: DBG_0x00100000: DBG_0x00100000 Flag
|
|
0x200000: DBG_ALLOC: DBG_ALLOC Flag
|
|
0x400000: DBG_FUNCTION: DBG_FUNCTION Flag
|
|
0x800000: DBG_WARN: DBG_WARN Flag
|
|
0x1000000: DBG_ERROR: DBG_ERROR Flag
|
|
|
|
{9C88041D-349D-4647-8BFD-2C0A167BFE58} MOF MMC
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{BBBC81CF-E219-469C-A405-F820EE496194} MOF Microsoft-Windows-P2P-PNRP
|
|
- keyword:
|
|
0x1: NSP: NSP Flag
|
|
0x2: PNRPHLP: PNRPHLP Flag
|
|
0x4: API: API Flag
|
|
0x8: MT: MT Flag
|
|
0x10: PROTO: PROTO Flag
|
|
0x20: CPAST: CPAST Flag
|
|
0x40: CACHE: CACHE Flag
|
|
0x80: CLOUD: CLOUD Flag
|
|
0x100: CPASEC: CPASEC Flag
|
|
0x200: PERF: PERF Flag
|
|
0x400: RESOLVE: RESOLVE Flag
|
|
0x800: IM: IM Flag
|
|
- level:
|
|
0x1: Error: Severe errors that need logging
|
|
0x2: Warning: Warnings such as allocation failure
|
|
0x3: Information: Includes non-error cases
|
|
0x4: Verbose: Detailed traces from intermediate steps
|
|
|
|
{D5418619-C167-44D9-BC36-765BEB5D55F3} MOF Microsoft-Windows-OfflineFiles-CscDclUser
|
|
|
|
{94335EB3-79EA-44D5-8EA9-306F49B3A041} MOF Downlevel IPsec API
|
|
- keyword:
|
|
0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag
|
|
0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag
|
|
0x4: TRC_INFORMATION: TRC_INFORMATION Flag
|
|
0x8: TRC_WARNING: TRC_WARNING Flag
|
|
0x10: TRC_ERROR: TRC_ERROR Flag
|
|
|
|
{3AC66736-CC59-4CFF-8115-8DF50E39816B} MOF Critical Section Trace Provider
|
|
|
|
{485E7DEE-0A80-11D8-AD15-505054503030} MOF UMDF - Reflector Trace
|
|
- keyword:
|
|
0x1: RD_TRACE_DRIVER: RD_TRACE_DRIVER Flag
|
|
0x2: RD_TRACE_FDO: RD_TRACE_FDO Flag
|
|
0x4: RD_TRACE_DEVICE: RD_TRACE_DEVICE Flag
|
|
0x8: RD_TRACE_CONTROL: RD_TRACE_CONTROL Flag
|
|
0x10: RD_TRACE_DMCONTROL: RD_TRACE_DMCONTROL Flag
|
|
0x20: RD_TRACE_LPC: RD_TRACE_LPC Flag
|
|
0x40: RD_TRACE_DISPATCH: RD_TRACE_DISPATCH Flag
|
|
0x80: RD_TRACE_PNP: RD_TRACE_PNP Flag
|
|
0x100: RD_TRACE_PROCESS: RD_TRACE_PROCESS Flag
|
|
0x200: RD_TRACE_IO: RD_TRACE_IO Flag
|
|
0x400: RD_TRACE_CANCEL: RD_TRACE_CANCEL Flag
|
|
0x800: RD_TRACE_DEVIF: RD_TRACE_DEVIF Flag
|
|
0x1000: RD_TRACE_WMI: RD_TRACE_WMI Flag
|
|
0x2000: RD_TRACE_RESERVED_0d: RD_TRACE_RESERVED_0d Flag
|
|
0x4000: RD_TRACE_RESERVED_0e: RD_TRACE_RESERVED_0e Flag
|
|
0x8000: RD_TRACE_RESERVED_0f: RD_TRACE_RESERVED_0f Flag
|
|
0x10000: RD_TRACE_RESERVED_10: RD_TRACE_RESERVED_10 Flag
|
|
0x20000: RD_TRACE_RESERVED_11: RD_TRACE_RESERVED_11 Flag
|
|
0x40000: RD_TRACE_RESERVED_12: RD_TRACE_RESERVED_12 Flag
|
|
0x80000: RD_TRACE_RESERVED_13: RD_TRACE_RESERVED_13 Flag
|
|
0x100000: RD_TRACE_RESERVED_14: RD_TRACE_RESERVED_14 Flag
|
|
0x200000: RD_TRACE_RESERVED_15: RD_TRACE_RESERVED_15 Flag
|
|
0x400000: RD_TRACE_RESERVED_16: RD_TRACE_RESERVED_16 Flag
|
|
0x800000: RD_TRACE_RESERVED_17: RD_TRACE_RESERVED_17 Flag
|
|
0x1000000: RD_TRACE_RESERVED_18: RD_TRACE_RESERVED_18 Flag
|
|
0x2000000: RD_TRACE_RESERVED_19: RD_TRACE_RESERVED_19 Flag
|
|
0x4000000: RD_TRACE_RESERVED_1a: RD_TRACE_RESERVED_1a Flag
|
|
0x8000000: RD_TRACE_RESERVED_1b: RD_TRACE_RESERVED_1b Flag
|
|
0x10000000: RD_TRACE_RESERVED_1c: RD_TRACE_RESERVED_1c Flag
|
|
0x20000000: RD_TRACE_RESERVED_1d: RD_TRACE_RESERVED_1d Flag
|
|
0x40000000: RD_TRACE_RESERVED_1e: RD_TRACE_RESERVED_1e Flag
|
|
0x80000000: RD_TRACE_FUNCTION: RD_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{5A1600D2-68E5-4DE7-BCF4-1C2D215FE0FE} MOF FWPUCLNT Trace Provider
|
|
|
|
{A9C1A3B7-54F3-4724-ADCE-58BC03E3BC78} MOF Windows Media Player Trace
|
|
- keyword:
|
|
0x1: _DH_DEFAULT: _DH_DEFAULT Flag
|
|
0x2: _DH_WMP_DPF: _DH_WMP_DPF Flag
|
|
0x4: _DH_WMPGRAPH: _DH_WMPGRAPH Flag
|
|
0x8: _DH_WMPRENDER: _DH_WMPRENDER Flag
|
|
0x10: _DH_PLUGINS: _DH_PLUGINS Flag
|
|
0x20: _DH_PLAYER_FULLSCREEN: _DH_PLAYER_FULLSCREEN Flag
|
|
0x40: _DH_WMPDMOWRAPPER: _DH_WMPDMOWRAPPER Flag
|
|
0x80: _DH_WMPCD_DPF: _DH_WMPCD_DPF Flag
|
|
0x100: _DH_LAYOUTMAN_DOCKING: _DH_LAYOUTMAN_DOCKING Flag
|
|
0x200: _DH_WMHTML: _DH_WMHTML Flag
|
|
0x400: _DH_WMP_SYNC: _DH_WMP_SYNC Flag
|
|
0x800: _DH_WMP_DEVICE_CAPS: _DH_WMP_DEVICE_CAPS Flag
|
|
0x1000: _DH_WMP_DRM: _DH_WMP_DRM Flag
|
|
0x2000: _DH_WMP_DEVICES: _DH_WMP_DEVICES Flag
|
|
0x4000: _DH_WMP_CDBURN: _DH_WMP_CDBURN Flag
|
|
0x8000: _DH_WMP_CACHE_PROVIDER: _DH_WMP_CACHE_PROVIDER Flag
|
|
0x10000: _DH_WMP_LIBRARY: _DH_WMP_LIBRARY Flag
|
|
0x20000: _DH_WMP_SYNCMGR: _DH_WMP_SYNCMGR Flag
|
|
0x40000: _DH_WMP_SYNCWIZ: _DH_WMP_SYNCWIZ Flag
|
|
0x80000: _DH_WMP_LISL: _DH_WMP_LISL Flag
|
|
0x100000: _DH_WMP_SYNC_STATUS: _DH_WMP_SYNC_STATUS Flag
|
|
0x200000: _DH_WMP_HME: _DH_WMP_HME Flag
|
|
0x400000: _DH_WMP_MLS: _DH_WMP_MLS Flag
|
|
0x800000: _DH_WMP_FIRMWARE_UPDATE: _DH_WMP_FIRMWARE_UPDATE Flag
|
|
0x1000000: _DH_WMP_SYNC_PERF: _DH_WMP_SYNC_PERF Flag
|
|
0x2000000: _DH_WMP_SQM: _DH_WMP_SQM Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{106B464D-8043-46B1-8CB8-E92A0CD7A560} MOF IKEEXT Trace Provider
|
|
|
|
{467C1914-37F0-4C7D-B6DB-5CD7DFE7BD5E} MOF Mount Manager Trace
|
|
- keyword:
|
|
0x1: TracingGeneral: TracingGeneral Flag
|
|
0x2: TracingIoctl: TracingIoctl Flag
|
|
0x4: TracingMemory: TracingMemory Flag
|
|
0x8: TracingCache: TracingCache Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{EB004A05-9B1A-11D4-9123-0050047759BC} MOF TCPIP Service Trace
|
|
- keyword:
|
|
0x1: NETIO_TRACE_SEND: NETIO_TRACE_SEND Flag
|
|
0x2: NETIO_TRACE_RECEIVE: NETIO_TRACE_RECEIVE Flag
|
|
0x4: NETIO_TRACE_INTERFACE: NETIO_TRACE_INTERFACE Flag
|
|
0x8: NETIO_TRACE_NMR: NETIO_TRACE_NMR Flag
|
|
0x10: NETIO_TRACE_NSI: NETIO_TRACE_NSI Flag
|
|
0x20: NETIO_TRACE_FRAMING: NETIO_TRACE_FRAMING Flag
|
|
0x40: NETIO_TRACE_NETWORK: NETIO_TRACE_NETWORK Flag
|
|
0x80: NETIO_TRACE_TRANSPORT: NETIO_TRACE_TRANSPORT Flag
|
|
0x100: NETIO_TRACE_TUNNEL: NETIO_TRACE_TUNNEL Flag
|
|
0x200: NETIO_TRACE_TDX: NETIO_TRACE_TDX Flag
|
|
0x400: NETIO_TRACE_LEGACY: NETIO_TRACE_LEGACY Flag
|
|
0x800: NETIO_TRACE_PACER: NETIO_TRACE_PACER Flag
|
|
0x1000: WFP_TRACE_BASE: WFP_TRACE_BASE Flag
|
|
0x2000: WFP_TRACE_FE: WFP_TRACE_FE Flag
|
|
0x4000: WFP_TRACE_STM: WFP_TRACE_STM Flag
|
|
0x8000: WFP_TRACE_IPSEC: WFP_TRACE_IPSEC Flag
|
|
0x10000: WFP_TRACE_ALE: WFP_TRACE_ALE Flag
|
|
0x20000: NETIO_TRACE_EQOS: NETIO_TRACE_EQOS Flag
|
|
|
|
{9E814AAD-3204-11D2-9A82-006008A86939} MOF Windows Kernel Trace
|
|
- keyword:
|
|
0x1: process: Process creations/deletions
|
|
0x2: thread: Thread creations/deletions
|
|
0x4: img: Image load
|
|
0x8: proccntr: Process counters
|
|
0x10: cswitch: Context switches
|
|
0x20: dpc: Deferred procedure calls
|
|
0x40: isr: Interrupts
|
|
0x80: syscall: System calls
|
|
0x100: disk: Disk IO
|
|
0x200: file: File details
|
|
0x400: diskinit: Disk IO entry
|
|
0x800: dispatcher: Dispatcher operations
|
|
0x1000: pf: Page faults
|
|
0x2000: hf: Hard page faults
|
|
0x4000: virtalloc: Virtual memory allocations
|
|
0x10000: net: Network TCP/IP
|
|
0x20000: registry: Registry details
|
|
0x100000: alpc: ALPC
|
|
0x200000: splitio: Split IO
|
|
0x800000: driver: Driver delays
|
|
0x1000000: profile: Sample based profiling
|
|
0x2000000: fileiocompletion: File IO completion
|
|
0x4000000: fileio: File IO
|
|
|
|
{7EA56435-3F2F-3F63-A829-F0B35B5CAD41} MOF ADOMD.1
|
|
|
|
{D08BD885-501E-489A-BAC6-B7D24BFE6BBF} MOF ATA Port Driver Tracing Provider
|
|
- keyword:
|
|
0x1: TRACE_FLAG_GENERAL: This enables all configuration traces
|
|
0x2: TRACE_FLAG_PNP: This enables PNP traces
|
|
0x4: TRACE_FLAG_POWER: This enables power traces
|
|
0x8: TRACE_FLAG_RW: This enables read/write traces
|
|
0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces
|
|
0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces
|
|
0x40: TRACE_FLAG_WMI: This enables WMI traces
|
|
0x80: TRACE_FLAG_TIMER: This enables timer traces
|
|
0x100: TRACE_FLAG_INIT: This enables initilization traces
|
|
0x200: TRACE_FLAG_LOCK: This enables remove lock traces
|
|
0x400: TRACE_FLAG_DEBUG1: This flag is not used
|
|
0x800: TRACE_FLAG_DEBUG2: This flag is not used
|
|
0x1000: TRACE_FLAG_MCN: This enables media change notification traces
|
|
0x2000: TRACE_FLAG_ISR: This enables ISR traces
|
|
0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{3333D2FC-3AEE-479F-985D-8BEBAE552B99} MOF Microsoft-Windows-P2P-Mesh
|
|
- keyword:
|
|
0x1: PEER: PEER Flag
|
|
0x2: LINKMAN: LINKMAN Flag
|
|
0x4: GRAPHMAIN: GRAPHMAIN Flag
|
|
0x8: DATABASE: DATABASE Flag
|
|
0x10: GRAPHOBJ: GRAPHOBJ Flag
|
|
0x20: FLOODMAN: FLOODMAN Flag
|
|
0x40: SOCKMAN: SOCKMAN Flag
|
|
0x80: GROUPING_GO: GROUPING_GO Flag
|
|
0x100: EVENT: EVENT Flag
|
|
0x200: GROUPING: GROUPING Flag
|
|
0x400: GSM: GSM Flag
|
|
0x800: SSP: SSP Flag
|
|
- level:
|
|
0x1: Error: Severe errors that need logging
|
|
0x2: Warning: Warnings such as allocation failure
|
|
0x3: Information: Includes non-error cases
|
|
0x4: Verbose: Detailed traces from intermediate steps
|
|
|
|
{637A0F36-DFF5-4B2F-83DD-B106C1C725E2} MOF WLAN Diagnostics Trace
|
|
- keyword:
|
|
0x1: WD_LOG_FLAG_INIT: WD_LOG_FLAG_INIT Flag
|
|
0x2: WD_LOG_FLAG_RPC: WD_LOG_FLAG_RPC Flag
|
|
0x4: WD_LOG_FLAG_EVENT: WD_LOG_FLAG_EVENT Flag
|
|
0x8: WD_LOG_FLAG_INTERFACE: WD_LOG_FLAG_INTERFACE Flag
|
|
0x10: WD_LOG_FLAG_CONNECTION: WD_LOG_FLAG_CONNECTION Flag
|
|
0x20: WD_LOG_FLAG_CONTROL: WD_LOG_FLAG_CONTROL Flag
|
|
0x40: WD_LOG_FLAG_LOCKS: WD_LOG_FLAG_LOCKS Flag
|
|
0x80: WD_LOG_FLAG_MEMORY: WD_LOG_FLAG_MEMORY Flag
|
|
0x100: WD_LOG_FLAG_REFERENCES: WD_LOG_FLAG_REFERENCES Flag
|
|
0x200: WD_LOG_FLAG_FUNCTION_TRACE: WD_LOG_FLAG_FUNCTION_TRACE Flag
|
|
0x400: WD_LOG_FLAG_ASSERT: WD_LOG_FLAG_ASSERT Flag
|
|
|
|
{5E23B838-5B71-47E6-B123-6FE02EF573EF} MOF Microsoft-Windows-OfflineFiles-CscUM
|
|
|
|
{361F227C-AA14-4D19-9007-0C8D1A8A541B} MOF Microsoft-Windows-OfflineFiles-CscNetApi
|
|
|
|
{D4199645-41BE-4FD5-9D71-A612C508FDC6} MOF RdpCore Api Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
0x8: TS_TRACE_LEVEL_TEST: TS_TRACE_LEVEL_TEST Flag
|
|
|
|
{04C6E16D-B99F-4A3A-9B3E-B8325BBC781E} MOF Windows Remote Management Trace
|
|
- keyword:
|
|
0x1: SOAPTraceClient: SOAPTraceClient Flag
|
|
0x2: SOAPTraceListener: SOAPTraceListener Flag
|
|
0x4: Reserved2: Reserved2 Flag
|
|
0x8: Reserved3: Reserved3 Flag
|
|
0x10: Reserved4: Reserved4 Flag
|
|
0x20: Reserved5: Reserved5 Flag
|
|
0x40: Performance: Performance Flag
|
|
0x80: Assert: Assert Flag
|
|
0x100: RemotingError: RemotingError Flag
|
|
0x200: RemotingDebug: RemotingDebug Flag
|
|
0x400: ClientError: ClientError Flag
|
|
0x800: ClientDebug: ClientDebug Flag
|
|
0x1000: PSLError: PSLError Flag
|
|
0x2000: PSLDebug: PSLDebug Flag
|
|
0x4000: SubscriptionError: SubscriptionError Flag
|
|
0x8000: SubscriptionDebug: SubscriptionDebug Flag
|
|
0x10000: CatalogDebug: CatalogDebug Flag
|
|
0x20000: CatalogError: CatalogError Flag
|
|
0x40000: WSManWmiProvDebug: WSManWmiProvDebug Flag
|
|
0x80000: WSManWmiProvError: WSManWmiProvError Flag
|
|
0x100000: ConfigDebug: ConfigDebug Flag
|
|
0x200000: ConfigError: ConfigError Flag
|
|
0x400000: UtilError: UtilError Flag
|
|
0x800000: UtilDebug: UtilDebug Flag
|
|
0x1000000: WSManAutoError: WSManAutoError Flag
|
|
0x2000000: WSManAutoDebug: WSManAutoDebug Flag
|
|
0x4000000: WSManAutoFlow: WSManAutoFlow Flag
|
|
0x8000000: EventCount: EventCount Flag
|
|
0x10000000: SecurityDebug: SecurityDebug Flag
|
|
0x20000000: Unittest: Unittest Flag
|
|
0x40000000: MemoryDebug: MemoryDebug Flag
|
|
|
|
{6710597F-7319-4AAE-9B85-C8D87136A56B} MOF SBP2 Port Driver Tracing Provider
|
|
- keyword:
|
|
0x1: TRACE_FLAG_GENERAL: This enables all configuration traces
|
|
0x2: TRACE_FLAG_PNP: This enables PNP traces
|
|
0x4: TRACE_FLAG_POWER: This enables power traces
|
|
0x8: TRACE_FLAG_RW: This enables read/write traces
|
|
0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces
|
|
0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces
|
|
0x40: TRACE_FLAG_WMI: This enables WMI traces
|
|
0x80: TRACE_FLAG_TIMER: This enables timer traces
|
|
0x100: TRACE_FLAG_INIT: This enables initilization traces
|
|
0x200: TRACE_FLAG_LOCK: This enables remove lock traces
|
|
0x400: TRACE_FLAG_DEBUG1: This flag is not used
|
|
0x800: TRACE_FLAG_DEBUG2: This flag is not used
|
|
0x1000: TRACE_FLAG_MCN: This enables media change notification traces
|
|
0x2000: TRACE_FLAG_ISR: This enables ISR traces
|
|
0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{F1C521CA-DA82-4D79-9EE4-D7A375723B68} MOF FDPHost Service Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{2B240425-3141-43EE-931F-EC9F997C7D7E} MOF RSS Platform Perf Trace
|
|
- keyword:
|
|
0x1: Perf: Perf Flag
|
|
|
|
{058DD951-7604-414D-A5D6-A56D35367A46} MOF File Kernel Trace; Operation Set 2
|
|
- keyword:
|
|
0x1: acquireforsectionsynchronization: Acquire For Section Synchronization
|
|
0x2: releaseforsectionsynchronization: Release For Section Synchronization
|
|
0x4: acquireformodwrite: Acquire For Mod Write
|
|
0x8: releaseformodwrite: Release For Mod Write
|
|
0x10: acquireforccflush: Acquire For CC Flush
|
|
0x20: releaseforccflush: Release For CC Flush
|
|
0x40: notifystreamfileobject: Notify Stream File Object
|
|
0x1000: fastiocheckifpossible: Fast IO Check If Possible
|
|
0x2000: networkqueryopen: Network Query Open
|
|
0x4000: mdlread: MDL Read
|
|
0x8000: mdlreadcomplete: MDL Read Complete
|
|
0x10000: preparemdlwrite: Prepare MDL Write
|
|
0x20000: mdlwritecomplete: MDL Write Complete
|
|
0x40000: volumemount: Volume Mount
|
|
0x80000: volumedismount: Volume Dismount
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E92} MOF IMAPI2 Disc Recorder Enumerator
|
|
- keyword:
|
|
0x1: MsftEnumDiscRecorder2_DebugConstructor: MsftEnumDiscRecorder2_DebugConstructor Flag
|
|
0x2: MsftEnumDiscRecorder2_DebugDestructor: MsftEnumDiscRecorder2_DebugDestructor Flag
|
|
0x4: MsftEnumDiscRecorder2_DebugGeneral: MsftEnumDiscRecorder2_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{485E7DE9-0A80-11D8-AD15-505054503030} MOF UMDF - WDF Core
|
|
- keyword:
|
|
0x1: FX_TRACE_API: FX_TRACE_API Flag
|
|
0x2: FX_TRACE_DDI: FX_TRACE_DDI Flag
|
|
0x4: FX_TRACE_GENERAL: FX_TRACE_GENERAL Flag
|
|
0x8: FX_TRACE_OBJECT: FX_TRACE_OBJECT Flag
|
|
0x10: FX_TRACE_DRVMGR: FX_TRACE_DRVMGR Flag
|
|
0x20: FX_TRACE_DRIVER: FX_TRACE_DRIVER Flag
|
|
0x40: FX_TRACE_DEVICE: FX_TRACE_DEVICE Flag
|
|
0x80: FX_TRACE_REQUEST: FX_TRACE_REQUEST Flag
|
|
0x100: FX_TRACE_FILEOBJECT: FX_TRACE_FILEOBJECT Flag
|
|
0x200: FX_TRACE_IO: FX_TRACE_IO Flag
|
|
0x400: FX_TRACE_PNP: FX_TRACE_PNP Flag
|
|
0x800: FX_TRACE_LOADER: FX_TRACE_LOADER Flag
|
|
0x1000: FX_TRACE_IOTARGET: FX_TRACE_IOTARGET Flag
|
|
0x2000: FX_TRACE_FUNC: FX_TRACE_FUNC Flag
|
|
0x4000: FX_TRACE_INIT: FX_TRACE_INIT Flag
|
|
0x8000: FX_TRACE_USB_IOTARGET: FX_TRACE_USB_IOTARGET Flag
|
|
0x10000: FX_TRACE_WIN32_IOTARGET: FX_TRACE_WIN32_IOTARGET Flag
|
|
0x20000: FX_TRACE_REMOTE_IOTARGET: FX_TRACE_REMOTE_IOTARGET Flag
|
|
0x40000: FX_TRACE_REMOTE_INTERFACE: FX_TRACE_REMOTE_INTERFACE Flag
|
|
0x80000: FX_TRACE_RESERVED_13: FX_TRACE_RESERVED_13 Flag
|
|
0x100000: FX_TRACE_RESERVED_14: FX_TRACE_RESERVED_14 Flag
|
|
0x200000: FX_TRACE_RESERVED_15: FX_TRACE_RESERVED_15 Flag
|
|
0x400000: FX_TRACE_RESERVED_16: FX_TRACE_RESERVED_16 Flag
|
|
0x800000: FX_TRACE_RESERVED_17: FX_TRACE_RESERVED_17 Flag
|
|
0x1000000: FX_TRACE_RESERVED_18: FX_TRACE_RESERVED_18 Flag
|
|
0x2000000: FX_TRACE_RESERVED_19: FX_TRACE_RESERVED_19 Flag
|
|
0x4000000: FX_TRACE_RESERVED_1a: FX_TRACE_RESERVED_1a Flag
|
|
0x8000000: FX_TRACE_RESERVED_1b: FX_TRACE_RESERVED_1b Flag
|
|
0x10000000: FX_TRACE_RESERVED_1c: FX_TRACE_RESERVED_1c Flag
|
|
0x20000000: FX_TRACE_RESERVED_1d: FX_TRACE_RESERVED_1d Flag
|
|
0x40000000: FX_TRACE_RESERVED_1e: FX_TRACE_RESERVED_1e Flag
|
|
0x80000000: FX_TRACE_FUNCTION: FX_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{FA8DE7C4-ACDE-4443-9994-C4E2359A9EDB} MOF Classpnp Driver Tracing Provider
|
|
- keyword:
|
|
0x1: TRACE_FLAG_GENERAL: This enables all configuration traces
|
|
0x2: TRACE_FLAG_PNP: This enables PNP traces
|
|
0x4: TRACE_FLAG_POWER: This enables power traces
|
|
0x8: TRACE_FLAG_RW: This enables read/write traces
|
|
0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces
|
|
0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces
|
|
0x40: TRACE_FLAG_WMI: This enables WMI traces
|
|
0x80: TRACE_FLAG_TIMER: This enables timer traces
|
|
0x100: TRACE_FLAG_INIT: This enables initilization traces
|
|
0x200: TRACE_FLAG_LOCK: This enables remove lock traces
|
|
0x400: TRACE_FLAG_DEBUG1: This flag is not used
|
|
0x800: TRACE_FLAG_DEBUG2: This flag is not used
|
|
0x1000: TRACE_FLAG_MCN: This enables media change notification traces
|
|
0x2000: TRACE_FLAG_ISR: This enables ISR traces
|
|
0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{28C9F48F-D244-45A8-842F-DC9FBC9B6E92} MOF Windows Defender Firewall API
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E99} MOF IMAPI2 Track-at-Once CD Writer
|
|
- keyword:
|
|
0x1: MsftDiscFormat2Tao_DebugConstructor: MsftDiscFormat2Tao_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2Tao_DebugDestructor: MsftDiscFormat2Tao_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2Tao_DebugGeneral: MsftDiscFormat2Tao_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{8E6B6962-AB54-4335-8229-3255B919DD0E} MOF WMI_Tracing_Client_Operations
|
|
- keyword:
|
|
0x1: _WMI_TRACE_CLIENT_OPERATIONS_: _WMI_TRACE_CLIENT_OPERATIONS_ Flag
|
|
|
|
{04C8A86F-3369-12F8-4769-24E484A9E725} MOF ADODB.1
|
|
|
|
{A7EB57F6-145E-4F18-BD75-DBBF6F7E23A7} MOF WMP Network Sharing Service
|
|
- keyword:
|
|
0x1: EntryExit: EntryExit Flag
|
|
0x2: Service: Service Flag
|
|
0x4: Security: Security Flag
|
|
0x8: QueryParser: QueryParser Flag
|
|
0x10: Search: Search Flag
|
|
0x20: HttpServer: HttpServer Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{02FE721A-0725-469E-A26D-37B3C09FAAC1} MOF Portable Device Connectivity API Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
|
|
{51734B23-5B7E-4892-BA8E-45BC110B735C} MOF Microsoft-Windows-Remote-FileSystem-Monitor
|
|
|
|
{5A966D1C-6B48-11DA-8BDE-F66BAD1E3F3A} MOF TS Rdp Sound End Point Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
|
|
{72FB9358-A9B3-41E0-AE41-E8DECA41E3A8} MOF USB Storage Driver Tracing Provider
|
|
- keyword:
|
|
0x1: TRACE_FLAG_GENERAL: This enables all configuration traces
|
|
0x2: TRACE_FLAG_PNP: This enables PNP traces
|
|
0x4: TRACE_FLAG_POWER: This enables power traces
|
|
0x8: TRACE_FLAG_RW: This enables read/write traces
|
|
0x10: TRACE_FLAG_IOCTL: This enables IOCTL traces
|
|
0x20: TRACE_FLAG_QUEUE: This enables I/O queue traces
|
|
0x40: TRACE_FLAG_WMI: This enables WMI traces
|
|
0x80: TRACE_FLAG_TIMER: This enables timer traces
|
|
0x100: TRACE_FLAG_INIT: This enables initilization traces
|
|
0x200: TRACE_FLAG_LOCK: This enables remove lock traces
|
|
0x400: TRACE_FLAG_DEBUG1: This flag is not used
|
|
0x800: TRACE_FLAG_DEBUG2: This flag is not used
|
|
0x1000: TRACE_FLAG_MCN: This enables media change notification traces
|
|
0x2000: TRACE_FLAG_ISR: This enables ISR traces
|
|
0x4000: TRACE_FLAG_ENUM: This enables device enumeration traces
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{8B20D3E4-581F-4A27-8109-DF01643A7A93} MOF FD WNet Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{7DA1385C-F8F5-414D-B9D0-02FCA090F1EC} MOF File Kernel Trace; Optional Data
|
|
- keyword:
|
|
0x1: usercontext: User Context
|
|
0x2: sessionid: Session Id
|
|
0x4: lastaccesstime: Last Access Time
|
|
0x8: callparameters: Call Parameters
|
|
0x10: callresultdata: Call Result Data
|
|
0x20: previousdata: Previous Data
|
|
0x40: createonexistingfile: Create On Existing File
|
|
0x80: processwindowstation: Process Window Station
|
|
0x100: blockpagingio: Block Paging IO
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9B} MOF IMAPI2 Zero Stream
|
|
- keyword:
|
|
0x1: MsftDiscFormat2StreamZero_DebugConstructor: MsftDiscFormat2StreamZero_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2StreamZero_DebugDestructor: MsftDiscFormat2StreamZero_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2StreamZero_DebugGeneral: MsftDiscFormat2StreamZero_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{6165F3E2-AE38-45D4-9B23-6B4818758BD9} MOF Security: TSPkg
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Trace: Trace Flag
|
|
0x8: Creds: Credential Flag
|
|
0x10: Context: CTXT Flag
|
|
0x20: Calls: CALLS Flag
|
|
0x40: Auth: AUTH Flag
|
|
0x80: Session: SESS Flag
|
|
|
|
{6D2FD9C5-8BD8-4A5D-8AA8-01E5C3B2AE23} MOF Refsv1WppTrace
|
|
- keyword:
|
|
0x1: FATAL: FATAL Flag
|
|
0x2: ERROR: ERROR Flag
|
|
0x4: WARNING: WARNING Flag
|
|
0x8: READ: READ Flag
|
|
0x10: WRITE: WRITE Flag
|
|
0x20: COMPRESSED: COMPRESSED Flag
|
|
0x40: EFS: EFS Flag
|
|
0x80: MFT: MFT Flag
|
|
0x100: VOLBITMAP: VOLBITMAP Flag
|
|
0x200: CREATE: CREATE Flag
|
|
0x400: ALTSTREAMS: ALTSTREAMS Flag
|
|
0x800: OBJID: OBJID Flag
|
|
0x1000: INDEXES: INDEXES Flag
|
|
0x2000: TXFKTM: TXFKTM Flag
|
|
0x4000: TXFRECOVERY: TXFRECOVERY Flag
|
|
0x8000: TXFRM: TXFRM Flag
|
|
0x10000: TXFFCB: TXFFCB Flag
|
|
0x20000: SELFHEAL: SELFHEAL Flag
|
|
0x40000: HEALBITMAP: HEALBITMAP Flag
|
|
0x80000: USNJRNL: USNJRNL Flag
|
|
0x100000: DELNOTIFY: DELNOTIFY Flag
|
|
0x200000: MINSTORE: MINSTORE Flag
|
|
0x400000: SCRUB: SCRUB Flag
|
|
0x800000: TREEUPDATE: TREEUPDATE Flag
|
|
|
|
{6DA4DDCA-0901-4BAE-9AD4-7E6030BAB531} MOF WLAN HC Diagnostics Trace
|
|
- keyword:
|
|
0x1: WLANHC_AUTOCONFIG: WLANHC_AUTOCONFIG Flag
|
|
0x2: WLANHC_RNWFMSM: WLANHC_RNWFMSM Flag
|
|
0x4: WLANHC_FATMSM: WLANHC_FATMSM Flag
|
|
0x8: WLANHC_DLLMAIN: WLANHC_DLLMAIN Flag
|
|
0x10: WLANHC_TEST: WLANHC_TEST Flag
|
|
|
|
{87B93A44-1F73-EC83-7261-2DFC972D9B1E} MOF MSDATL3.1
|
|
|
|
{777BA8FF-2498-4875-933A-3067DE883070} MOF XWizard Framework
|
|
- keyword:
|
|
0x1: Critical: Critical Flag
|
|
0x2: Error: Error Flag
|
|
0x4: Warning: Warning Flag
|
|
0x8: Info: Info Flag
|
|
0x10: Verbose: Verbose Flag
|
|
- level:
|
|
0x1: Critical: Abnormal termination/exit
|
|
0x2: Error: Severe error events (usually internal)
|
|
0x3: Warning: Allocation/Resource/Stress failures
|
|
0x4: Info: User info (Registration/Wizard flow paths)
|
|
0x5: Verbose: Function entry/exit (Detail)
|
|
|
|
{0888E5EF-9B98-4695-979D-E92CE4247224} MOF RmClient_RestartManager
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0381564E-D5CB-4E48-AB35-BE24389B0F59} MOF WPD BusEnumService Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: PnP: PnP Flag
|
|
0x200: Service: Service Flag
|
|
0x400: GroupPolicy: GroupPolicy Flag
|
|
0x800: BthActiveConnect: BthActiveConnect Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
|
|
{485E7DEB-0A80-11D8-AD15-505054503030} MOF UMDF - Test Trace
|
|
- keyword:
|
|
0x1: TEST_TRACE_GENERAL: TEST_TRACE_GENERAL Flag
|
|
0x2: TEST_TRACE_APP: TEST_TRACE_APP Flag
|
|
0x4: TEST_TRACE_TSTDRIVER: TEST_TRACE_TSTDRIVER Flag
|
|
0x8: TEST_TRACE_FLTRDRIVER: TEST_TRACE_FLTRDRIVER Flag
|
|
0x10: TEST_TRACE_RESERVED_04: TEST_TRACE_RESERVED_04 Flag
|
|
0x20: TEST_TRACE_RESERVED_05: TEST_TRACE_RESERVED_05 Flag
|
|
0x40: TEST_TRACE_RESERVED_06: TEST_TRACE_RESERVED_06 Flag
|
|
0x80: TEST_TRACE_RESERVED_07: TEST_TRACE_RESERVED_07 Flag
|
|
0x100: TEST_TRACE_RESERVED_08: TEST_TRACE_RESERVED_08 Flag
|
|
0x200: TEST_TRACE_RESERVED_09: TEST_TRACE_RESERVED_09 Flag
|
|
0x400: TEST_TRACE_RESERVED_0a: TEST_TRACE_RESERVED_0a Flag
|
|
0x800: TEST_TRACE_RESERVED_0b: TEST_TRACE_RESERVED_0b Flag
|
|
0x1000: TEST_TRACE_RESERVED_0c: TEST_TRACE_RESERVED_0c Flag
|
|
0x2000: TEST_TRACE_RESERVED_0d: TEST_TRACE_RESERVED_0d Flag
|
|
0x4000: TEST_TRACE_RESERVED_0e: TEST_TRACE_RESERVED_0e Flag
|
|
0x8000: TEST_TRACE_RESERVED_0f: TEST_TRACE_RESERVED_0f Flag
|
|
0x10000: TEST_TRACE_RESERVED_10: TEST_TRACE_RESERVED_10 Flag
|
|
0x20000: TEST_TRACE_RESERVED_11: TEST_TRACE_RESERVED_11 Flag
|
|
0x40000: TEST_TRACE_RESERVED_12: TEST_TRACE_RESERVED_12 Flag
|
|
0x80000: TEST_TRACE_RESERVED_13: TEST_TRACE_RESERVED_13 Flag
|
|
0x100000: TEST_TRACE_RESERVED_14: TEST_TRACE_RESERVED_14 Flag
|
|
0x200000: TEST_TRACE_RESERVED_15: TEST_TRACE_RESERVED_15 Flag
|
|
0x400000: TEST_TRACE_RESERVED_16: TEST_TRACE_RESERVED_16 Flag
|
|
0x800000: TEST_TRACE_RESERVED_17: TEST_TRACE_RESERVED_17 Flag
|
|
0x1000000: TEST_TRACE_RESERVED_18: TEST_TRACE_RESERVED_18 Flag
|
|
0x2000000: TEST_TRACE_RESERVED_19: TEST_TRACE_RESERVED_19 Flag
|
|
0x4000000: TEST_TRACE_RESERVED_1a: TEST_TRACE_RESERVED_1a Flag
|
|
0x8000000: TEST_TRACE_RESERVED_1b: TEST_TRACE_RESERVED_1b Flag
|
|
0x10000000: TEST_TRACE_RESERVED_1c: TEST_TRACE_RESERVED_1c Flag
|
|
0x20000000: TEST_TRACE_RESERVED_1d: TEST_TRACE_RESERVED_1d Flag
|
|
0x40000000: TEST_TRACE_RESERVED_1e: TEST_TRACE_RESERVED_1e Flag
|
|
0x80000000: TEST_TRACE_FUNCTION: TEST_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{485E7DE8-0A80-11D8-AD15-505054503030} MOF UMDF - Platform Library Trace
|
|
- keyword:
|
|
0x1: PLATFORM_TRACE_DRIVERSTOP: PLATFORM_TRACE_DRIVERSTOP Flag
|
|
0x2: PLATFORM_TRACE_INIT: PLATFORM_TRACE_INIT Flag
|
|
0x4: PLATFORM_TRACE_CONFIG: PLATFORM_TRACE_CONFIG Flag
|
|
0x8: PLATFORM_TRACE_TRACING: PLATFORM_TRACE_TRACING Flag
|
|
0x10: PLATFORM_TRACE_ERROR_REPORTING: PLATFORM_TRACE_ERROR_REPORTING Flag
|
|
0x20: PLATFORM_TRACE_SECURITY: PLATFORM_TRACE_SECURITY Flag
|
|
0x40: PLATFORM_TRACE_LOG: PLATFORM_TRACE_LOG Flag
|
|
0x80: PLATFORM_TRACE_RESERVED_07: PLATFORM_TRACE_RESERVED_07 Flag
|
|
0x100: PLATFORM_TRACE_RESERVED_08: PLATFORM_TRACE_RESERVED_08 Flag
|
|
0x200: PLATFORM_TRACE_RESERVED_09: PLATFORM_TRACE_RESERVED_09 Flag
|
|
0x400: PLATFORM_TRACE_RESERVED_0a: PLATFORM_TRACE_RESERVED_0a Flag
|
|
0x800: PLATFORM_TRACE_RESERVED_0b: PLATFORM_TRACE_RESERVED_0b Flag
|
|
0x1000: PLATFORM_TRACE_RESERVED_0c: PLATFORM_TRACE_RESERVED_0c Flag
|
|
0x2000: PLATFORM_TRACE_RESERVED_0d: PLATFORM_TRACE_RESERVED_0d Flag
|
|
0x4000: PLATFORM_TRACE_RESERVED_0e: PLATFORM_TRACE_RESERVED_0e Flag
|
|
0x8000: PLATFORM_TRACE_RESERVED_0f: PLATFORM_TRACE_RESERVED_0f Flag
|
|
0x10000: PLATFORM_TRACE_RESERVED_10: PLATFORM_TRACE_RESERVED_10 Flag
|
|
0x20000: PLATFORM_TRACE_RESERVED_11: PLATFORM_TRACE_RESERVED_11 Flag
|
|
0x40000: PLATFORM_TRACE_RESERVED_12: PLATFORM_TRACE_RESERVED_12 Flag
|
|
0x80000: PLATFORM_TRACE_RESERVED_13: PLATFORM_TRACE_RESERVED_13 Flag
|
|
0x100000: PLATFORM_TRACE_RESERVED_14: PLATFORM_TRACE_RESERVED_14 Flag
|
|
0x200000: PLATFORM_TRACE_RESERVED_15: PLATFORM_TRACE_RESERVED_15 Flag
|
|
0x400000: PLATFORM_TRACE_RESERVED_16: PLATFORM_TRACE_RESERVED_16 Flag
|
|
0x800000: PLATFORM_TRACE_RESERVED_17: PLATFORM_TRACE_RESERVED_17 Flag
|
|
0x1000000: PLATFORM_TRACE_RESERVED_18: PLATFORM_TRACE_RESERVED_18 Flag
|
|
0x2000000: PLATFORM_TRACE_RESERVED_19: PLATFORM_TRACE_RESERVED_19 Flag
|
|
0x4000000: PLATFORM_TRACE_RESERVED_1a: PLATFORM_TRACE_RESERVED_1a Flag
|
|
0x8000000: PLATFORM_TRACE_RESERVED_1b: PLATFORM_TRACE_RESERVED_1b Flag
|
|
0x10000000: PLATFORM_TRACE_RESERVED_1c: PLATFORM_TRACE_RESERVED_1c Flag
|
|
0x20000000: PLATFORM_TRACE_RESERVED_1d: PLATFORM_TRACE_RESERVED_1d Flag
|
|
0x40000000: PLATFORM_TRACE_RESERVED_1e: PLATFORM_TRACE_RESERVED_1e Flag
|
|
0x80000000: PLATFORM_TRACE_FUNCTION: PLATFORM_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{28C9F48F-D244-45A8-842F-DC9FBC9B6E94} MOF Windows Defender Firewall NetShell Plugin
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
|
|
{9138500E-3648-4EDB-AA4C-859E9F7B7C38} MOF VSS tracing provider
|
|
|
|
{E159FC63-02FE-42F3-A234-028B9B8561CB} MOF Microsoft-Windows-LLTD-Responder
|
|
- keyword:
|
|
0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag
|
|
0x2: TRACE_CLASS_DISPATCH: TRACE_CLASS_DISPATCH Flag
|
|
0x4: TRACE_CLASS_REQUEST: TRACE_CLASS_REQUEST Flag
|
|
0x8: TRACE_CLASS_BINDING: TRACE_CLASS_BINDING Flag
|
|
0x10: TRACE_CLASS_SESSION: TRACE_CLASS_SESSION Flag
|
|
0x20: TRACE_CLASS_QUIESCENT: TRACE_CLASS_QUIESCENT Flag
|
|
0x40: TRACE_CLASS_HELLO: TRACE_CLASS_HELLO Flag
|
|
0x80: TRACE_CLASS_COMMAND: TRACE_CLASS_COMMAND Flag
|
|
0x100: TRACE_CLASS_EMIT: TRACE_CLASS_EMIT Flag
|
|
0x200: TRACE_CLASS_THREAD: TRACE_CLASS_THREAD Flag
|
|
0x400: TRACE_CLASS_TIMER: TRACE_CLASS_TIMER Flag
|
|
0x800: TRACE_CLASS_QOS: TRACE_CLASS_QOS Flag
|
|
0x1000: TRACE_CLASS_NLC: TRACE_CLASS_NLC Flag
|
|
|
|
{37D2C3CD-C5D4-4587-8531-4696C44244C8} MOF Security: SChannel
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Trace: Trace Flag
|
|
0x8: Alloc: Alloc Flag
|
|
0x10: Res: Res Flag
|
|
0x20: Func: Func Flag
|
|
0x40: Cred: Cred Flag
|
|
0x80: Ctxt: Ctxt Flag
|
|
0x100: Mapper: Mapper Flag
|
|
0x200: Buffers: Buffers Flag
|
|
|
|
{FB6A424F-B5D6-4329-B9D5-A975B3A93EAD} MOF Security: WDigest
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Trace: Trace Flag
|
|
0x8: TraceASC: ASC Flag
|
|
0x10: TraceICS: ISC Flag
|
|
0x20: TraceLSA: LSA Flag
|
|
0x40: TraceUser: User Flag
|
|
0x80: TraceFunc: Function Flag
|
|
0x100: TraceMem: Mem Flag
|
|
0x200: TraceStuff: Stuff Flag
|
|
|
|
{EBCCA1C2-AB46-4A1D-8C2A-906C2FF25F39} MOF Service Control Manager Trace
|
|
- keyword:
|
|
0x1: ERROR: ERROR Flag
|
|
0x2: WARNING: WARNING Flag
|
|
0x4: TRACE: TRACE Flag
|
|
0x8: INFO: INFO Flag
|
|
0x10: SECURITY: SECURITY Flag
|
|
0x20: CONFIG: CONFIG Flag
|
|
0x40: DEPEND: DEPEND Flag
|
|
0x80: DEPEND_DUMP: DEPEND_DUMP Flag
|
|
0x100: CONFIG_API: CONFIG_API Flag
|
|
0x200: LOCK_API: LOCK_API Flag
|
|
0x400: ACCOUNT: ACCOUNT Flag
|
|
0x800: USECOUNT: USECOUNT Flag
|
|
0x1000: NETBIOS: NETBIOS Flag
|
|
0x2000: THREADS: THREADS Flag
|
|
0x4000: BSM: BSM Flag
|
|
0x8000: SHUTDOWN: SHUTDOWN Flag
|
|
0x10000: WHY: WHY Flag
|
|
0x20000: BOOT: BOOT Flag
|
|
0x40000: HANDLE: HANDLE Flag
|
|
0x80000: LOCKS: LOCKS Flag
|
|
0x100000: CONTROL: CONTROL Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E91} MOF IMAPI2 Disc Master
|
|
- keyword:
|
|
0x1: MsftDiscMaster2_DebugConstructor: MsftDiscMaster2_DebugConstructor Flag
|
|
0x2: MsftDiscMaster2_DebugDestructor: MsftDiscMaster2_DebugDestructor Flag
|
|
0x4: MsftDiscMaster2_DebugGeneral: MsftDiscMaster2_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{4A8AAA94-CFC4-46A7-8E4E-17BC45608F0A} MOF BITS Service Trace
|
|
- keyword:
|
|
0x1: LogFlagInfo: LogFlagInfo Flag
|
|
0x2: LogFlagWarning: LogFlagWarning Flag
|
|
0x4: LogFlagError: LogFlagError Flag
|
|
0x8: LogFlagFunction: LogFlagFunction Flag
|
|
0x10: LogFlagRefCount: LogFlagRefCount Flag
|
|
0x20: LogFlagSerialize: LogFlagSerialize Flag
|
|
0x40: LogFlagDownload: LogFlagDownload Flag
|
|
0x80: LogFlagTask: LogFlagTask Flag
|
|
0x100: LogFlagLock: LogFlagLock Flag
|
|
0x200: LogFlagService: LogFlagService Flag
|
|
0x400: LogFlagDataBytes: LogFlagDataBytes Flag
|
|
0x800: LogFlagTransferDetails: LogFlagTransferDetails Flag
|
|
0x1000: LogFlagPeer: LogFlagPeer Flag
|
|
|
|
{8E598056-8993-11D2-819E-0000F875A064} MOF Active Directory Domain Services: SAM
|
|
|
|
{E4FF10D8-8A88-4FC6-82C8-8C23E9462FE5} MOF Downlevel IPsec NetShell Plugin
|
|
- keyword:
|
|
0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag
|
|
0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag
|
|
0x4: TRC_INFORMATION: TRC_INFORMATION Flag
|
|
0x8: TRC_WARNING: TRC_WARNING Flag
|
|
0x10: TRC_ERROR: TRC_ERROR Flag
|
|
|
|
{CA1CF55C-9E49-4AD3-8038-39CB6F66AF11} MOF RSS Platform Backgroundsync Perf Trace
|
|
- keyword:
|
|
0x1: Perf: Perf Flag
|
|
|
|
{5BBB6C18-AA45-49B1-A15F-085F7ED0AA90} MOF Security: NTLM Authentication
|
|
- keyword:
|
|
0x1: Error: Error Flag
|
|
0x2: Warning: Warning Flag
|
|
0x4: Init: Init Flag
|
|
0x8: Misc: Misc Flag
|
|
0x10: LogonSess: Logon Session Flag
|
|
0x20: Leak: Leak Track Flag
|
|
0x40: Lpc: Lpc Flag
|
|
0x80: LpcMore: Lpc More Flag
|
|
0x100: Api: Api Flag
|
|
0x200: ApiMore: Api More Flag
|
|
0x400: SKey: Session Keys Flag
|
|
0x800: Nego: Negotiate Flag
|
|
0x1000: Updates: Updates Flag
|
|
0x2000: NtLmV2: NTLM V2 Flag
|
|
0x4000: Cred: Credentials Flag
|
|
0x8000: Version: Protocol Version Flag
|
|
0x10000: Target: Target Flag
|
|
|
|
{F8036571-42D9-480A-BABB-DE7833CB059C} MOF IMAPI2FS Tracing
|
|
- keyword:
|
|
0x1: Constructor: Trace information from the constructors
|
|
0x2: Destructor: Trace information from the destructors
|
|
0x4: General: General Debugging Information
|
|
0x8: FunctionEntryExit: Trace all function entry/exits
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{F9BE9C98-10DB-4318-BB61-CB0DDEA08BF7} MOF UmBus Driver Trace
|
|
- keyword:
|
|
0x1: TraceEntryExit: TraceEntryExit Flag
|
|
0x2: TraceIoctl: TraceIoctl Flag
|
|
0x4: TraceParameter: TraceParameter Flag
|
|
0x8: TraceInit: TraceInit Flag
|
|
0x10: TraceInfo: TraceInfo Flag
|
|
0x20: TraceDriver: TraceDriver Flag
|
|
0x40: TraceCreateClose: TraceCreateClose Flag
|
|
0x80: TracePower: TracePower Flag
|
|
0x100: TracePnP: TracePnP Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{2E8D9EC5-A712-48C4-8CE0-631EB0C1CD65} MOF Layer2 Security HC Diagnostics Trace
|
|
- keyword:
|
|
0x1: SECHC_LOG_FLAG_ASSERT: SECHC_LOG_FLAG_ASSERT Flag
|
|
0x2: SECHC_LOG_FLAG_INIT: SECHC_LOG_FLAG_INIT Flag
|
|
0x4: SECHC_LOG_FLAG_DIAG: SECHC_LOG_FLAG_DIAG Flag
|
|
0x8: SECHC_LOG_FLAG_ONEX_DIAG: SECHC_LOG_FLAG_ONEX_DIAG Flag
|
|
0x10: SECHC_LOG_FLAG_REPAIR: SECHC_LOG_FLAG_REPAIR Flag
|
|
0x20: SECHC_LOG_FLAG_STATE: SECHC_LOG_FLAG_STATE Flag
|
|
0x40: SECHC_LOG_FLAG_EXT: SECHC_LOG_FLAG_EXT Flag
|
|
0x80: SECHC_LOG_FLAG_EVENT_LOG: SECHC_LOG_FLAG_EVENT_LOG Flag
|
|
0x100: SECHC_LOG_FLAG_FUNCTION: SECHC_LOG_FLAG_FUNCTION Flag
|
|
0x200: SECHC_LOG_FLAG_MEMORY: SECHC_LOG_FLAG_MEMORY Flag
|
|
0x400: SECHC_LOG_FLAG_LOCKS: SECHC_LOG_FLAG_LOCKS Flag
|
|
|
|
{58E8F67D-29E9-456C-B23D-C6489E341BB0} MOF WPD Types Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_Perf: WPD_Perf Flag
|
|
0x200: WPD_F2: WPD_F2 Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: WPD_F4: WPD_F4 Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: PortableDeviceTypes_General: PortableDeviceTypes_General Flag
|
|
0x20000: PortableDeviceTypes_Serialization: PortableDeviceTypes_Serialization Flag
|
|
0x40000: PortableDeviceTypes_Collections: PortableDeviceTypes_Collections Flag
|
|
0x80000: PortableDeviceTypes_Values: PortableDeviceTypes_Values Flag
|
|
|
|
{D2A60D61-0F87-4673-A86C-9C461457FE27} MOF Windows NetworkItemFactory Trace
|
|
- keyword:
|
|
0x1: tagDefault: tagDefault Flag
|
|
0x2: tagNetworkItemFactory: tagNetworkItemFactory Flag
|
|
|
|
{D5C6A3E9-FA9C-434E-9653-165B4FC869E4} MOF IPMI Driver Trace
|
|
- keyword:
|
|
0x1: TRACELEVELONE: TRACELEVELONE Flag
|
|
0x2: TRACELEVELTWO: TRACELEVELTWO Flag
|
|
|
|
{544D4C9D-942C-46D5-BF50-DF5CD9524A50} MOF KMDFv1 Trace Provider
|
|
- keyword:
|
|
0x1: TRACINGFULL: TRACINGFULL Flag
|
|
0x2: TRACINGERROR: TRACINGERROR Flag
|
|
0x4: TRACINGDBGPRINT: TRACINGDBGPRINT Flag
|
|
0x8: TRACINGFRAMEWORKS: TRACINGFRAMEWORKS Flag
|
|
0x10: TRACINGAPI: TRACINGAPI Flag
|
|
0x20: TRACINGAPIERROR: TRACINGAPIERROR Flag
|
|
0x40: TRACINGRESOURCES: TRACINGRESOURCES Flag
|
|
0x80: TRACINGLOCKING: TRACINGLOCKING Flag
|
|
0x100: TRACINGCONTEXT: TRACINGCONTEXT Flag
|
|
0x200: TRACINGPOOL: TRACINGPOOL Flag
|
|
0x400: TRACINGHANDLE: TRACINGHANDLE Flag
|
|
0x800: TRACINGPNP: TRACINGPNP Flag
|
|
0x1000: TRACINGIO: TRACINGIO Flag
|
|
0x2000: TRACINGIOTARGET: TRACINGIOTARGET Flag
|
|
0x4000: TRACINGDMA: TRACINGDMA Flag
|
|
0x8000: TRACINGREQUEST: TRACINGREQUEST Flag
|
|
0x10000: TRACINGDRIVER: TRACINGDRIVER Flag
|
|
0x20000: TRACINGDEVICE: TRACINGDEVICE Flag
|
|
0x40000: TRACINGUSEROBJECT: TRACINGUSEROBJECT Flag
|
|
0x80000: TRACINGOBJECT: TRACINGOBJECT Flag
|
|
0x100000: TRACINGPNPPOWERSTATES: TRACINGPNPPOWERSTATES Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{B809F4FF-3023-473C-971B-AB594429EA57} MOF WPD WiaCompat Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E93} MOF IMAPI2 Disc Recorder
|
|
- keyword:
|
|
0x1: MsftDiscRecorder2_DebugConstructor: MsftDiscRecorder2_DebugConstructor Flag
|
|
0x2: MsftDiscRecorder2_DebugDestructor: MsftDiscRecorder2_DebugDestructor Flag
|
|
0x4: MsftDiscRecorder2_DebugGeneral: MsftDiscRecorder2_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{DAA6CAF5-6678-43F8-A6FE-B40EE096E06E} MOF TS Client ActiveX Control Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{BFA655DC-6C51-11DA-8BDE-F66BAD1E3F3A} MOF TS RDP Shell Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
|
|
{485E7DED-0A80-11D8-AD15-505054503030} MOF UMDF - Lpc Driver Trace
|
|
- keyword:
|
|
0x1: LPCDRVR_TRACE_DRIVER: LPCDRVR_TRACE_DRIVER Flag
|
|
0x2: LPCDRVR_TRACE_DEVICE: LPCDRVR_TRACE_DEVICE Flag
|
|
0x4: LPCDRVR_TRACE_RESERVED_02: LPCDRVR_TRACE_RESERVED_02 Flag
|
|
0x8: LPCDRVR_TRACE_RESERVED_03: LPCDRVR_TRACE_RESERVED_03 Flag
|
|
0x10: LPCDRVR_TRACE_RESERVED_04: LPCDRVR_TRACE_RESERVED_04 Flag
|
|
0x20: LPCDRVR_TRACE_RESERVED_06: LPCDRVR_TRACE_RESERVED_06 Flag
|
|
0x40: LPCDRVR_TRACE_RESERVED_07: LPCDRVR_TRACE_RESERVED_07 Flag
|
|
0x80: LPCDRVR_TRACE_RESERVED_08: LPCDRVR_TRACE_RESERVED_08 Flag
|
|
0x100: LPCDRVR_TRACE_RESERVED_09: LPCDRVR_TRACE_RESERVED_09 Flag
|
|
0x200: LPCDRVR_TRACE_RESERVED_0a: LPCDRVR_TRACE_RESERVED_0a Flag
|
|
0x400: LPCDRVR_TRACE_RESERVED_0b: LPCDRVR_TRACE_RESERVED_0b Flag
|
|
0x800: LPCDRVR_TRACE_RESERVED_0c: LPCDRVR_TRACE_RESERVED_0c Flag
|
|
0x1000: LPCDRVR_TRACE_RESERVED_0d: LPCDRVR_TRACE_RESERVED_0d Flag
|
|
0x2000: LPCDRVR_TRACE_RESERVED_0e: LPCDRVR_TRACE_RESERVED_0e Flag
|
|
0x4000: LPCDRVR_TRACE_RESERVED_0f: LPCDRVR_TRACE_RESERVED_0f Flag
|
|
0x8000: LPCDRVR_TRACE_RESERVED_10: LPCDRVR_TRACE_RESERVED_10 Flag
|
|
0x10000: LPCDRVR_TRACE_RESERVED_11: LPCDRVR_TRACE_RESERVED_11 Flag
|
|
0x20000: LPCDRVR_TRACE_RESERVED_12: LPCDRVR_TRACE_RESERVED_12 Flag
|
|
0x40000: LPCDRVR_TRACE_RESERVED_13: LPCDRVR_TRACE_RESERVED_13 Flag
|
|
0x80000: LPCDRVR_TRACE_RESERVED_14: LPCDRVR_TRACE_RESERVED_14 Flag
|
|
0x100000: LPCDRVR_TRACE_RESERVED_15: LPCDRVR_TRACE_RESERVED_15 Flag
|
|
0x200000: LPCDRVR_TRACE_RESERVED_16: LPCDRVR_TRACE_RESERVED_16 Flag
|
|
0x400000: LPCDRVR_TRACE_RESERVED_17: LPCDRVR_TRACE_RESERVED_17 Flag
|
|
0x800000: LPCDRVR_TRACE_RESERVED_18: LPCDRVR_TRACE_RESERVED_18 Flag
|
|
0x1000000: LPCDRVR_TRACE_RESERVED_19: LPCDRVR_TRACE_RESERVED_19 Flag
|
|
0x2000000: LPCDRVR_TRACE_RESERVED_1a: LPCDRVR_TRACE_RESERVED_1a Flag
|
|
0x4000000: LPCDRVR_TRACE_RESERVED_1b: LPCDRVR_TRACE_RESERVED_1b Flag
|
|
0x8000000: LPCDRVR_TRACE_RESERVED_1c: LPCDRVR_TRACE_RESERVED_1c Flag
|
|
0x10000000: LPCDRVR_TRACE_RESERVED_1d: LPCDRVR_TRACE_RESERVED_1d Flag
|
|
0x20000000: LPCDRVR_TRACE_RESERVED_1e: LPCDRVR_TRACE_RESERVED_1e Flag
|
|
0x40000000: LPCDRVR_TRACE_FUNCTION: LPCDRVR_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E90} MOF IMAPI2 dll
|
|
- keyword:
|
|
0x1: IMAPI2_DebugGeneral: IMAPI2_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{1FF10429-99AE-45BB-8A67-C9E945B9FB6C} MOF IMAPI1 Shim
|
|
- keyword:
|
|
0x1: General: General Debugging Information
|
|
|
|
{CEB7253C-BB96-9DFE-51D1-53D966D0CF8B} MOF MSDART.1
|
|
|
|
{014DE49F-CE63-4779-BA2B-D616F6963A87} MOF Microsoft-Windows-NetworkConnectivityStatus
|
|
- keyword:
|
|
0x1: TM_NLAPROVIDER: TM_NLAPROVIDER Flag
|
|
0x2: TM_INTERFACEHOP: TM_INTERFACEHOP Flag
|
|
0x4: TM_MEDIA: TM_MEDIA Flag
|
|
0x8: TM_WEBPROBE: TM_WEBPROBE Flag
|
|
0x10: TM_SUPPORT: TM_SUPPORT Flag
|
|
0x20: TM_LOCK: TM_LOCK Flag
|
|
|
|
{D4199645-41BE-4FD5-9D71-A612C508FDC7} MOF RDPEncComTrace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
|
|
{F33959B4-DBEC-11D2-895B-00C04F79AB69} MOF Active Directory: NetLogon
|
|
|
|
{A676B545-4CFB-4306-A067-502D9A0F2220} MOF SetupAPI Trace
|
|
- keyword:
|
|
0x1: PNP_ERROR_LEVEL: PNP_ERROR_LEVEL Flag
|
|
0x2: PNP_WARNING_LEVEL: PNP_WARNING_LEVEL Flag
|
|
0x4: PNP_TRACE_LEVEL: PNP_TRACE_LEVEL Flag
|
|
0x8: PNP_INFO_LEVEL: PNP_INFO_LEVEL Flag
|
|
0x10: PNP_REGISTRY_WARNING_LEVEL: PNP_REGISTRY_WARNING_LEVEL Flag
|
|
0x20: PNP_REGISTRY_TRACE_LEVEL: PNP_REGISTRY_TRACE_LEVEL Flag
|
|
0x40: PNP_REGISTRY_INFO_LEVEL: PNP_REGISTRY_INFO_LEVEL Flag
|
|
0x80: PNP_REGISTRY_VERBOSE_LEVEL: PNP_REGISTRY_VERBOSE_LEVEL Flag
|
|
0x100: PNP_RESOURCE_WARNING_LEVEL: PNP_RESOURCE_WARNING_LEVEL Flag
|
|
0x200: PNP_RESOURCE_TRACE_LEVEL: PNP_RESOURCE_TRACE_LEVEL Flag
|
|
0x400: PNP_RESOURCE_INFO_LEVEL: PNP_RESOURCE_INFO_LEVEL Flag
|
|
0x800: PNP_RESOURCE_VERBOSE_LEVEL: PNP_RESOURCE_VERBOSE_LEVEL Flag
|
|
0x1000: PNP_EVENT_WARNING_LEVEL: PNP_EVENT_WARNING_LEVEL Flag
|
|
0x2000: PNP_EVENT_TRACE_LEVEL: PNP_EVENT_TRACE_LEVEL Flag
|
|
0x4000: PNP_EVENT_INFO_LEVEL: PNP_EVENT_INFO_LEVEL Flag
|
|
0x8000: PNP_EVENT_VERBOSE_LEVEL: PNP_EVENT_VERBOSE_LEVEL Flag
|
|
0x10000: PNP_INSTALL_WARNING_LEVEL: PNP_INSTALL_WARNING_LEVEL Flag
|
|
0x20000: PNP_INSTALL_TRACE_LEVEL: PNP_INSTALL_TRACE_LEVEL Flag
|
|
0x40000: PNP_INSTALL_INFO_LEVEL: PNP_INSTALL_INFO_LEVEL Flag
|
|
0x80000: PNP_INSTALL_VERBOSE_LEVEL: PNP_INSTALL_VERBOSE_LEVEL Flag
|
|
|
|
{C3C5D8AF-2FD5-4500-A8E7-379C2D0BBE2E} MOF WPD API Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: WPD_F1: WPD_F1 Flag
|
|
0x200: Event: WPD Event Flag
|
|
0x400: WPD_F3: WPD_F3 Flag
|
|
0x800: Perf: WPD Perf Flag
|
|
0x1000: WPD_F5: WPD_F5 Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: PortableDeviceAPI_General: PortableDeviceAPI_General Flag
|
|
0x20000: PortableDeviceAPI_DriverCommunication: PortableDeviceAPI_DriverCommunication Flag
|
|
0x40000: PortableDeviceAPI_Internal: PortableDeviceAPI_Internal Flag
|
|
0x80000: PortableDeviceAPI_Properties: PortableDeviceAPI_Properties Flag
|
|
0x100000: PortableDeviceAPI_Resources: PortableDeviceAPI_Resources Flag
|
|
0x200000: PortableDeviceAPI_Enumeration: PortableDeviceAPI_Enumeration Flag
|
|
0x400000: PortableDeviceAPI_Events: PortableDeviceAPI_Events Flag
|
|
0x800000: PortableDeviceAPI_Service: PortableDeviceAPI_Service Flag
|
|
0x1000000: PortableDeviceAPI_Automation: PortableDeviceAPI_Automation Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9A} MOF IMAPI2 Raw CD Writer
|
|
- keyword:
|
|
0x1: MsftDiscFormat2Raw_DebugConstructor: MsftDiscFormat2Raw_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2Raw_DebugDestructor: MsftDiscFormat2Raw_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2Raw_DebugGeneral: MsftDiscFormat2Raw_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{8B98D3F2-3CC6-0B9C-6651-9649CCE5C752} MOF MSDADIAG.ETW
|
|
|
|
{106B464A-8043-46B1-8CB8-E92A0CD7A560} MOF BFE Trace Provider
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E94} MOF IMAPI2 Utilities
|
|
- keyword:
|
|
0x1: MsftUtils_DebugConstructor: MsftUtils_DebugConstructor Flag
|
|
0x2: MsftUtils_DebugDestructor: MsftUtils_DebugDestructor Flag
|
|
0x4: MsftUtils_DebugGeneral: MsftUtils_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{4B647745-F438-0A42-F870-5DBD29949C99} MOF SQLSRV32.1
|
|
|
|
{0EFF663F-8B6E-4E6D-8182-087A8EAA29CB} MOF Windows Defender Firewall API - GP
|
|
- keyword:
|
|
0x1: TL_ERROR: TL_ERROR Flag
|
|
0x2: TL_WARN: TL_WARN Flag
|
|
0x4: TL_INFO: TL_INFO Flag
|
|
0x8: TL_FUNC: TL_FUNC Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E96} MOF IMAPI2 Write Engine
|
|
- keyword:
|
|
0x1: MsftWriteEngine2_DebugConstructor: MsftWriteEngine2_DebugConstructor Flag
|
|
0x2: MsftWriteEngine2_DebugDestructor: MsftWriteEngine2_DebugDestructor Flag
|
|
0x4: MsftWriteEngine2_DebugGeneral: MsftWriteEngine2_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{57AC2B71-75CD-4043-9B00-B51674B0DC71} MOF NSC IrDA Driver
|
|
- keyword:
|
|
0x1: DBG_LOG_ERROR: NSC IrDA Driver Error
|
|
0x2: DBG_LOG_INFO: NSC IrDA Driver Generic Info
|
|
0x4: DBG_LOG_FIR: NSC IrDA Driver FIR Info
|
|
0x8: DBG_LOG_SIR: NSC IrDA Driver SIR Info
|
|
|
|
{0741C7BE-DAAC-4A5B-B00A-4BD9A2D89D0E} MOF Microsoft-Windows-LLTD-MapperIO
|
|
- keyword:
|
|
0x1: TRACE_CLASS_CALL: TRACE_CLASS_CALL Flag
|
|
0x2: TRACE_CLASS_DISPATCH: TRACE_CLASS_DISPATCH Flag
|
|
0x4: TRACE_CLASS_BINDING: TRACE_CLASS_BINDING Flag
|
|
0x8: TRACE_CLASS_CONTEXT: TRACE_CLASS_CONTEXT Flag
|
|
0x10: TRACE_CLASS_QOS: TRACE_CLASS_QOS Flag
|
|
0x20: TRACE_CLASS_REQUEST: TRACE_CLASS_REQUEST Flag
|
|
|
|
{F01B7774-7ED7-401E-8088-B576793D7841} MOF Certificate Services Client Trace
|
|
- keyword:
|
|
0x1: TRC_FATAL: TRC_FATAL Flag
|
|
0x2: TRC_ERROR: TRC_ERROR Flag
|
|
0x4: TRC_WARNING: TRC_WARNING Flag
|
|
0x8: TRC_INFO: TRC_INFO Flag
|
|
0x10: TRC_DETAIL: TRC_DETAIL Flag
|
|
|
|
{4199EE71-D55D-47D7-9F57-34A1D5B2C904} MOF TerminalServer-MediaFoundationPlugin
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
0x8: TS_TRACE_LEVEL_TEST: TS_TRACE_LEVEL_TEST Flag
|
|
|
|
{96AB095A-9519-4F5C-81EE-C510B0A45463} MOF UMB Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{082DFF20-F430-11D9-8CD6-0800200C9A66} MOF Mobility Center Trace
|
|
- keyword:
|
|
0x1: TRACE_NONE: TRACE_NONE Flag
|
|
0x2: TRACE_FATAL: TRACE_FATAL Flag
|
|
0x4: TRACE_ERROR: TRACE_ERROR Flag
|
|
0x8: TRACE_WARNING: TRACE_WARNING Flag
|
|
0x10: TRACE_INFORMATION: TRACE_INFORMATION Flag
|
|
0x20: TRACE_VERBOSE: TRACE_VERBOSE Flag
|
|
0x40: TRACE_RESERVED6: TRACE_RESERVED6 Flag
|
|
0x80: TRACE_RESERVED7: TRACE_RESERVED7 Flag
|
|
0x100: TRACE_RESERVED8: TRACE_RESERVED8 Flag
|
|
0x200: TRACE_RESERVED9: TRACE_RESERVED9 Flag
|
|
0x400: TRACE_STACK: TRACE_STACK Flag
|
|
0x800: TRACE_RESERVED10: TRACE_RESERVED10 Flag
|
|
0x1000: TRACE_UNITTEST: TRACE_UNITTEST Flag
|
|
0x2000: TRACE_VERIFICATION: TRACE_VERIFICATION Flag
|
|
|
|
{24722B88-DF97-4FF6-E395-DB533AC42A1E} MOF BCP.1
|
|
|
|
{485E7DEA-0A80-11D8-AD15-505054503030} MOF UMDF - Driver Manager Trace
|
|
- keyword:
|
|
0x1: MGR_TRACE_MGR: MGR_TRACE_MGR Flag
|
|
0x2: MGR_TRACE_SERVICE_KEY: MGR_TRACE_SERVICE_KEY Flag
|
|
0x4: MGR_TRACE_DEVNODE: MGR_TRACE_DEVNODE Flag
|
|
0x8: MGR_TRACE_PROCESS: MGR_TRACE_PROCESS Flag
|
|
0x10: MGR_TRACE_LPC: MGR_TRACE_LPC Flag
|
|
0x20: MGR_TRACE_RESERVED_05: MGR_TRACE_RESERVED_05 Flag
|
|
0x40: MGR_TRACE_RESERVED_06: MGR_TRACE_RESERVED_06 Flag
|
|
0x80: MGR_TRACE_RESERVED_07: MGR_TRACE_RESERVED_07 Flag
|
|
0x100: MGR_TRACE_RESERVED_08: MGR_TRACE_RESERVED_08 Flag
|
|
0x200: MGR_TRACE_RESERVED_09: MGR_TRACE_RESERVED_09 Flag
|
|
0x400: MGR_TRACE_RESERVED_0a: MGR_TRACE_RESERVED_0a Flag
|
|
0x800: MGR_TRACE_RESERVED_0b: MGR_TRACE_RESERVED_0b Flag
|
|
0x1000: MGR_TRACE_RESERVED_0c: MGR_TRACE_RESERVED_0c Flag
|
|
0x2000: MGR_TRACE_RESERVED_0d: MGR_TRACE_RESERVED_0d Flag
|
|
0x4000: MGR_TRACE_RESERVED_0e: MGR_TRACE_RESERVED_0e Flag
|
|
0x8000: MGR_TRACE_RESERVED_0f: MGR_TRACE_RESERVED_0f Flag
|
|
0x10000: MGR_TRACE_RESERVED_10: MGR_TRACE_RESERVED_10 Flag
|
|
0x20000: MGR_TRACE_RESERVED_11: MGR_TRACE_RESERVED_11 Flag
|
|
0x40000: MGR_TRACE_RESERVED_12: MGR_TRACE_RESERVED_12 Flag
|
|
0x80000: MGR_TRACE_RESERVED_13: MGR_TRACE_RESERVED_13 Flag
|
|
0x100000: MGR_TRACE_RESERVED_14: MGR_TRACE_RESERVED_14 Flag
|
|
0x200000: MGR_TRACE_RESERVED_15: MGR_TRACE_RESERVED_15 Flag
|
|
0x400000: MGR_TRACE_RESERVED_16: MGR_TRACE_RESERVED_16 Flag
|
|
0x800000: MGR_TRACE_RESERVED_17: MGR_TRACE_RESERVED_17 Flag
|
|
0x1000000: MGR_TRACE_RESERVED_18: MGR_TRACE_RESERVED_18 Flag
|
|
0x2000000: MGR_TRACE_RESERVED_19: MGR_TRACE_RESERVED_19 Flag
|
|
0x4000000: MGR_TRACE_RESERVED_1a: MGR_TRACE_RESERVED_1a Flag
|
|
0x8000000: MGR_TRACE_RESERVED_1b: MGR_TRACE_RESERVED_1b Flag
|
|
0x10000000: MGR_TRACE_RESERVED_1c: MGR_TRACE_RESERVED_1c Flag
|
|
0x20000000: MGR_TRACE_RESERVED_1d: MGR_TRACE_RESERVED_1d Flag
|
|
0x40000000: MGR_TRACE_RESERVED_1e: MGR_TRACE_RESERVED_1e Flag
|
|
0x80000000: MGR_TRACE_FUNCTION: MGR_TRACE_FUNCTION Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{C2BA06E2-F7CE-44AA-9E7E-62652CDEFE97} MOF Windows Wininit Trace
|
|
- keyword:
|
|
0x1: Core: Core Flag
|
|
0x2: Boot: Boot Flag
|
|
0x4: Setup: Setup Flag
|
|
0x8: Shutdown: Shutdown Flag
|
|
0x10: Power: Power Flag
|
|
0x20: WMsg: WMsg Flag
|
|
0x40: Sas: Sas Flag
|
|
|
|
{D804A67F-4C25-43C1-896F-89FF78B3A911} MOF WMP Network Sharing Taskbar
|
|
- keyword:
|
|
0x1: EntryExit: EntryExit Flag
|
|
0x2: Ux: Ux Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{B2FC00C4-2941-4D11-983B-B16E8AA4E25D} MOF Ntfs_NtfsLog
|
|
|
|
{1AC55562-D4FF-4BC5-8EF3-A18E07C4668E} MOF Network Location Awareness Trace
|
|
- keyword:
|
|
0x1: TM_LIST: TM_LIST Flag
|
|
0x2: TM_LOCK: TM_LOCK Flag
|
|
0x4: TM_MEMORY: TM_MEMORY Flag
|
|
0x8: TM_REFOBJ: TM_REFOBJ Flag
|
|
0x10: TM_HANDLE: TM_HANDLE Flag
|
|
0x20: TM_FSM: TM_FSM Flag
|
|
0x40: TM_TRIEMAP: TM_TRIEMAP Flag
|
|
0x80: TM_CACHE: TM_CACHE Flag
|
|
0x100: TM_UNITTEST: TM_UNITTEST Flag
|
|
0x200: TM_DLLMAIN: TM_DLLMAIN Flag
|
|
0x400: TM_ME: TM_ME Flag
|
|
0x800: TM_STORE: TM_STORE Flag
|
|
0x1000: TM_PMUX: TM_PMUX Flag
|
|
0x2000: TM_FUSER: TM_FUSER Flag
|
|
0x4000: TM_PLGWORKER: TM_PLGWORKER Flag
|
|
0x8000: TM_PLGEXT: TM_PLGEXT Flag
|
|
0x10000: TM_PLGINT: TM_PLGINT Flag
|
|
0x20000: TM_IPPC: TM_IPPC Flag
|
|
0x40000: TM_APPSRV: TM_APPSRV Flag
|
|
0x80000: TM_NLAAPI: TM_NLAAPI Flag
|
|
0x100000: TM_NLASH: TM_NLASH Flag
|
|
0x200000: TM_PNP: TM_PNP Flag
|
|
0x400000: TM_INTRANET: TM_INTRANET Flag
|
|
0x800000: TM_INTERNET: TM_INTERNET Flag
|
|
0x1000000: TM_ARPND: TM_ARPND Flag
|
|
0x2000000: TM_COMPCLNT: TM_COMPCLNT Flag
|
|
0x4000000: TM_ICSC: TM_ICSC Flag
|
|
0x8000000: TM_NLAWPLG: TM_NLAWPLG Flag
|
|
0x10000000: TM_BWC: TM_BWC Flag
|
|
|
|
{8ED60A3A-8C12-49C5-A518-FDF451BC10FC} MOF WMP Network Sharing API
|
|
- keyword:
|
|
0x1: EntryExit: EntryExit Flag
|
|
0x2: API: API Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{42695762-EA50-497A-9068-5CBBB35E0B95} MOF Windows Notification Facility Provider
|
|
|
|
{C92CF544-91B3-4DC0-8E11-C580339A0BF8} MOF NTLM Security Protocol
|
|
|
|
{6C770D53-0441-AFD4-DCAB-1D89155FECFC} MOF MSADOX.1
|
|
|
|
{17ABF473-982C-4D0E-B502-3A59D89E71DE} MOF WPD WMDMCompat Trace
|
|
- keyword:
|
|
0x1: WPD_TRACE_LEVEL_CRITICAL: WPD_TRACE_LEVEL_CRITICAL Flag
|
|
0x2: WPD_TRACE_LEVEL_ERROR: WPD_TRACE_LEVEL_ERROR Flag
|
|
0x4: WPD_TRACE_LEVEL_WARNING: WPD_TRACE_LEVEL_WARNING Flag
|
|
0x8: WPD_TRACE_LEVEL_ASSERT: WPD_TRACE_LEVEL_ASSERT Flag
|
|
0x10: WPD_TRACE_LEVEL_FUNCTRACE: WPD_TRACE_LEVEL_FUNCTRACE Flag
|
|
0x20: WPD_TRACE_LEVEL_INFORMATION: WPD_TRACE_LEVEL_INFORMATION Flag
|
|
0x40: WPD_TRACE_LEVEL_VERBOSE: WPD_TRACE_LEVEL_VERBOSE Flag
|
|
0x80: WPD_TRACE_LEVEL_RESERVED: WPD_TRACE_LEVEL_RESERVED Flag
|
|
0x100: Enumeration: Enumeration Flag
|
|
0x200: DataXfer: DataXfer Flag
|
|
0x400: Properties: Properties Flag
|
|
0x800: Perf: Perf Flag
|
|
0x1000: PerfVerbose: PerfVerbose Flag
|
|
0x2000: WPD_F6: WPD_F6 Flag
|
|
0x4000: WPD_F7: WPD_F7 Flag
|
|
0x8000: WPD_F8: WPD_F8 Flag
|
|
0x10000: Janus: Janus Flag
|
|
0x20000: Extension: Extension Flag
|
|
|
|
{932B59F1-90C2-D8BA-0956-3975C344AE2B} MOF ODBCBCP.1
|
|
|
|
{94335EB3-79EA-44D5-8EA9-306F49B3A070} MOF Downlevel IPsec Policy Store
|
|
- keyword:
|
|
0x1: TRC_FN_ENTER: TRC_FN_ENTER Flag
|
|
0x2: TRC_FN_LEAVE: TRC_FN_LEAVE Flag
|
|
0x4: TRC_INFORMATION: TRC_INFORMATION Flag
|
|
0x8: TRC_WARNING: TRC_WARNING Flag
|
|
0x10: TRC_ERROR: TRC_ERROR Flag
|
|
|
|
{EF4109DC-68FC-45AF-B329-CA2825437209} MOF Certificate Services Client CredentialRoaming Trace
|
|
- keyword:
|
|
0x1: TRC_FATAL: TRC_FATAL Flag
|
|
0x2: TRC_ERROR: TRC_ERROR Flag
|
|
0x4: TRC_WARNING: TRC_WARNING Flag
|
|
0x8: TRC_INFO: TRC_INFO Flag
|
|
0x10: TRC_DETAIL: TRC_DETAIL Flag
|
|
|
|
{0C51B20C-F755-48A8-8123-BF6DA2ADC727} MOF TS Client Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
|
|
{D2C4D428-7B68-4563-AF51-96C13F95A807} MOF Infrared Monitor Service
|
|
- keyword:
|
|
0x1: IRMON_ERROR: Irmon Error Debug Msg
|
|
0x2: IRMON_WARN: Irmon Warn Debug Msg
|
|
0x4: IRMON_INFO: Irmon Info Debug Msg
|
|
0x8: IRMON_VERBOSE: Irmon Verbose Debug Msg
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E98} MOF IMAPI2 Standard Data Writer
|
|
- keyword:
|
|
0x1: MsftDiscFormat2Data_DebugConstructor: MsftDiscFormat2Data_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2Data_DebugDestructor: MsftDiscFormat2Data_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2Data_DebugGeneral: MsftDiscFormat2Data_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{D905AC1C-65E7-4242-99EA-FE66A8355DF8} MOF Native WIFI Filter Driver Trace
|
|
- keyword:
|
|
0x1: DOT11_ASSOCIATE: DOT11_ASSOCIATE Flag
|
|
0x2: DOT11_ROAMING: DOT11_ROAMING Flag
|
|
0x4: DOT11_1X: DOT11_1X Flag
|
|
0x8: DOT11_PNP: DOT11_PNP Flag
|
|
0x10: DOT11_SCAN: DOT11_SCAN Flag
|
|
0x20: DOT11_RECEIVE: DOT11_RECEIVE Flag
|
|
0x40: DOT11_SEND: DOT11_SEND Flag
|
|
0x80: DOT11_IOCTL: DOT11_IOCTL Flag
|
|
0x100: DOT11_OID: DOT11_OID Flag
|
|
0x200: DOT11_MISC: DOT11_MISC Flag
|
|
0x400: DOT11_UPCALL: DOT11_UPCALL Flag
|
|
0x800: DOT11_KEYMGR: DOT11_KEYMGR Flag
|
|
0x1000: DOT11_PEER: DOT11_PEER Flag
|
|
0x2000: DOT11_SOFTAP: DOT11_SOFTAP Flag
|
|
0x4000: DOT11_PAM: DOT11_PAM Flag
|
|
0x8000: DOT11_REPEATER: DOT11_REPEATER Flag
|
|
0x10000: DOT11_APROUTER: DOT11_APROUTER Flag
|
|
0x20000: DOT11_WME: DOT11_WME Flag
|
|
0x40000: DOT11_CONFIG: DOT11_CONFIG Flag
|
|
0x80000: DOT11_NOTIFY_OBJECT: DOT11_NOTIFY_OBJECT Flag
|
|
|
|
{E2EB5B52-08B1-4391-B670-F58317376247} MOF WLAN Extensibility Trace
|
|
- keyword:
|
|
0x1: DOT11_ISF: DOT11_ISF Flag
|
|
|
|
{AFF081FE-0247-4275-9C4E-021F3DC1DA35} MOF ASP.NET Events
|
|
- keyword:
|
|
0x1: Infrastructure: Infrastructure Events
|
|
0x2: Module: Pipeline Module Events
|
|
0x4: Page: Page Events
|
|
0x8: AppServices: Application Services Events
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors
|
|
0x3: Warning: Warnings
|
|
0x4: Information: Information
|
|
0x5: Verbose: Detailed information
|
|
|
|
{D3DE60B2-A663-45D5-9826-A0A5949D2CB0} MOF MUI Resource Trace
|
|
|
|
{649E3596-2620-4D58-A01F-17AEFE8185DB} MOF FD Publication Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E97} MOF IMAPI2 Media Eraser
|
|
- keyword:
|
|
0x1: MsftDiscFormat2Erase_DebugConstructor: MsftDiscFormat2Erase_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2Erase_DebugDestructor: MsftDiscFormat2Erase_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2Erase_DebugGeneral: MsftDiscFormat2Erase_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{13CD7F92-5BAA-8C7C-3D72-B69FAC139A46} MOF MSADDS.1
|
|
|
|
{480217A9-F824-4BD4-BBE8-F371CAAF9A0D} MOF FD Core Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{F34765F6-A1BE-4B9D-1400-B8A12921F704} MOF ODBC.1
|
|
|
|
{7311AD03-18D6-45AC-9B08-B020BDD6A590} MOF PNPX AssocDB Trace
|
|
- keyword:
|
|
0x1: DUMMY: DUMMY Flag
|
|
|
|
{DAB01D4D-2D48-477D-B1C3-DAAD0CE6F06B} MOF ACPI Driver Trace Provider
|
|
|
|
{C127C1A8-6CEB-11DA-8BDE-F66BAD1E3F3A} MOF TS Rdp Init Trace
|
|
- keyword:
|
|
0x1: TS_TRACE_LEVEL_NRM: TS_TRACE_LEVEL_NRM Flag
|
|
0x2: TS_TRACE_LEVEL_ERROR: TS_TRACE_LEVEL_ERROR Flag
|
|
0x4: TS_TRACE_LEVEL_ASSERT: TS_TRACE_LEVEL_ASSERT Flag
|
|
|
|
{64A552E0-6C60-B907-E59C-10F1DFF76B0D} MOF MSDAPRST.1
|
|
|
|
{4B6EFB94-30EA-49A7-BB29-E9ED9DCE67DA} MOF WPD Bluetooth MTP Emumerator Driver Trace
|
|
- keyword:
|
|
0x1: CRITICAL Flag: CRITICAL Flag
|
|
0x2: ERROR Flag: ERROR Flag
|
|
0x4: WARNING Flag: WARNING Flag
|
|
0x8: ASSERT Flag: ASSERT Flag
|
|
0x10: FUNC_TRACE Flag: FUNC_TRACE Flag
|
|
0x20: INFO Flag: INFO Flag
|
|
0x40: TRACE Flag: TRACE Flag
|
|
0x80: DEV_CONFIG Flag: DEV_CONFIG Flag
|
|
0x100: PnP Flag: PnP Flag
|
|
0x200: Event Flag: Event Flag
|
|
0x400: Cancel Flag: Cancel Flag
|
|
0x800: Perf Flag: Perf Flag
|
|
0x1000: PerfVerbose Flag: PerfVerbose Flag
|
|
0x2000: Bulk Flag: Bulk Flag
|
|
0x4000: MtpOp Flag: MtpOp Flag
|
|
0x8000: Config Flag: Config Flag
|
|
0x10000: L2CAP Flag: L2CAP Flag
|
|
0x20000: IO Flag: IO Flag
|
|
0x40000: Packet: Packet Flag
|
|
|
|
{0E85A5A5-4D5C-44B7-8BDA-5B7AB54F7E9C} MOF IMAPI2 Pseudo-Random Stream
|
|
- keyword:
|
|
0x1: MsftDiscFormat2StreamRandom_DebugConstructor: MsftDiscFormat2StreamRandom_DebugConstructor Flag
|
|
0x2: MsftDiscFormat2StreamRandom_DebugDestructor: MsftDiscFormat2StreamRandom_DebugDestructor Flag
|
|
0x4: MsftDiscFormat2StreamRandom_DebugGeneral: MsftDiscFormat2StreamRandom_DebugGeneral Flag
|
|
- level:
|
|
0x1: Fatal: Abnormal exit or termination
|
|
0x2: Error: Severe errors that need logging
|
|
0x3: Warning: Warnings such as allocation failure
|
|
0x4: Information: Includes non-error cases
|
|
0x5: Verbose: Detailed traces from intermediate steps
|
|
|
|
{101C0E21-EBBA-A60A-EC3D-58797788928A} MOF MSADCF.1
|
|
|
|
{0063715B-EEDA-4007-9429-AD526F62696E} Manifest Microsoft-Windows-Services
|
|
- channel:
|
|
0x10: Microsoft-Windows-Services/Diagnostic
|
|
- keyword:
|
|
0x10000: Performance
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Services/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{00B7E1DF-B469-4C69-9C41-53A6576E3DAD} Manifest Microsoft-Windows-Security-IdentityStore
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-IdentityStore/Performance
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-IdentityStore/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{01090065-B467-4503-9B28-533766761087} Manifest Microsoft-Windows-ParentalControls
|
|
- channel:
|
|
0x10: Microsoft-Windows-ParentalControls/Operational
|
|
- keyword:
|
|
0x10: WPC: WPC
|
|
0x20: ThirdParty: ThirdParty
|
|
0x8000000000000000: Microsoft-Windows-ParentalControls/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{01578F96-C270-4602-ADE0-578D9C29FC0C} Manifest Microsoft-Windows-VAN
|
|
- channel:
|
|
0x10: Microsoft-Windows-VAN/Diagnostic: Microsoft-Windows-VAN/Diagnostic
|
|
- keyword:
|
|
0x1: PerfLabTest
|
|
0x10: VAN-Performance
|
|
0x100: Aoac
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-VAN/Diagnostic: Microsoft-Windows-VAN/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{017247F2-7E96-11DC-8314-0800200C9A66} Manifest Microsoft-Windows-ErrorReportingConsole
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{017BA13C-9A55-4F1F-8200-323055AAC810} Manifest Microsoft-Windows-Registry-SQM-Provider
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{01979C6A-42FA-414C-B8AA-EEE2C8202018} Manifest Microsoft-Windows-WindowsBackup
|
|
- channel:
|
|
0x10: Microsoft-Windows-WindowsBackup/ActionCenter
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WindowsBackup/ActionCenter
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{02012A8A-ADF5-4FAB-92CB-CCB7BB3E689A} Manifest Microsoft-Windows-ShareMedia-ControlPanel
|
|
- channel:
|
|
0x10: Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{030F2F57-ABD0-4427-BCF1-3A3587D7DC7D} Manifest Microsoft-Windows-Diagnostics-PerfTrack
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfTrackStatus: PerfTrack Status
|
|
0x20000: SQMStatus: SQM Status
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{04268430-D489-424D-B914-0CFF741D6684} Manifest Microsoft-Windows-Bluetooth-MTPEnum
|
|
- channel:
|
|
0x10: Microsoft-Windows-Bluetooth-MTPEnum/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Bluetooth-MTPEnum/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{04A490D4-84C6-4920-9C22-51C80825FF2C} Manifest Microsoft-Windows-Telephony-PhoneUtil
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x1000: MISC
|
|
0x2000: SIMOM
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{04D66358-C4A1-419B-8023-23B73902DE2C} Manifest Microsoft-Windows-PDH
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{04ECCF8E-8490-4AD1-8ED5-0AE7750E69E6} Manifest Microsoft-Windows-MCCS-AccountsHost
|
|
|
|
{05921578-2261-42C7-A0D3-26DDBCE6C50D} Manifest Microsoft-Windows-Diagnosis-WDC
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-WDC/Analytic
|
|
- keyword:
|
|
0x200: memory
|
|
0x400: list
|
|
0x800: error
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-WDC/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{059C3E04-5535-4929-85E1-93030E78F47B} Manifest Microsoft-Windows-Shsvcs
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shsvcs/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Shsvcs/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{059F0F37-910E-4FF0-A7EE-AE8D49DD319B} Manifest Microsoft-Windows-ReFS-v1
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{05D7B0F0-2121-4EFF-BF6B-ED3F69B894D7} Manifest Microsoft-Windows-TaskbarCPL
|
|
- channel:
|
|
0x10: Microsoft-Windows-TaskbarCPL/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TaskbarCPL/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{05F02597-FE85-4E67-8542-69567AB8FD4F} Manifest Microsoft-Windows-LiveId
|
|
- channel:
|
|
0x10: Microsoft-Windows-LiveId/Analytic: Microsoft-Windows-LiveId/Analytic
|
|
0x11: Microsoft-Windows-LiveId/Operational: Microsoft-Windows-LiveId/Operational
|
|
- keyword:
|
|
0x1: Telemetry: Telemetry trigger events
|
|
0x2: Error: Error
|
|
0x4: Analytic: Analytic
|
|
0x8: Function: Function
|
|
0x10: Operational: Operational
|
|
0x20: Warning: Warning
|
|
0x40: Critical: Critical
|
|
0x80: RequestStart: Request Start
|
|
0x100: LiveSsp: livessp
|
|
0x200: CredProv: wlidcredprov
|
|
0x400: WlidNsp: wlidnsp
|
|
0x800: WlidSvc: wlidsvc
|
|
0x1000: WlidModern: wlidmodern
|
|
0x2000: WlidCli: wlidcli
|
|
0x4000: WlidProv: wlidprov
|
|
0x8000: WlidBho: wlidbho
|
|
0x10000: TokenProvider: TokenProvider
|
|
0x20000: Extension: MSA Extension API
|
|
0x40000: Cache: Cache
|
|
0x80000: Credentials: Credentials
|
|
0x100000: StateMachine: StateMachine
|
|
0x200000: SOAP: SOAP
|
|
0x400000: RPC: RPC
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-LiveId/Analytic: Microsoft-Windows-LiveId/Analytic
|
|
0x4000000000000000: Microsoft-Windows-LiveId/Operational: Microsoft-Windows-LiveId/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{0602ECEF-6381-4BC0-AEDA-EB9BB919B276} Manifest Microsoft-Windows-Bluetooth-Policy
|
|
- channel:
|
|
0x10: Microsoft-Windows-Bluetooth/Policy
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Bluetooth/Policy
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{06184C97-5201-480E-92AF-3A3626C5B140} Manifest Microsoft-Windows-Services-Svchost
|
|
- channel:
|
|
0x10: Microsoft-Windows-Services-Svchost/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Services-Svchost/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0657ADC1-9AE8-4E18-932D-E6079CDA5AB3} Manifest Microsoft-Windows-TimeBroker
|
|
- channel:
|
|
0x10: TimeBroker: Debug
|
|
- keyword:
|
|
0x1: Api: API
|
|
0x2: EventState: EventState
|
|
0x8000000000000000: TimeBroker: Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB} Manifest Microsoft-Windows-Time-Service
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Time-Service/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Time-Service/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{07DE7879-1C96-41CE-AFBD-C659A0E8E643} Manifest Microsoft-Windows-VolumeControl
|
|
- channel:
|
|
0x10: Microsoft-Windows-VolumeControl/Performance: Performance
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-VolumeControl/Performance: Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{08466062-AED4-4834-8B04-CDDB414504E5} Manifest Microsoft-Windows-Security-Audit-Configuration-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-Audit-Configuration-Client/Operational: Microsoft-Windows-Security-Audit-Configuration-Client/Operational
|
|
0x11: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-Audit-Configuration-Client/Operational: Microsoft-Windows-Security-Audit-Configuration-Client/Operational
|
|
0x4000000000000000: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic: Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{0888E5EF-9B98-4695-979D-E92CE4247224} Manifest Microsoft-Windows-RestartManager
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-RestartManager/Operational: Microsoft-Windows-RestartManager/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{088A803B-578D-41B1-9402-92B7CEB380C8} Manifest Microsoft-Windows-Telephony-TelephonyInteractiveUser
|
|
|
|
{08D945EB-C8BD-44AA-994F-86079D8DCE35} Manifest Microsoft-Windows-Shell-AppWizCpl
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-AppWizCpl/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Shell-AppWizCpl/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{093DA50C-0BB9-4D7D-B95C-3BB9FCDA5EE8} Manifest Microsoft-Windows-Winsock-SQM
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{09608C12-C1DA-4104-A6FE-B959CF57560A} Manifest Microsoft-Windows-WUSA
|
|
- channel:
|
|
0x10: Setup
|
|
0x11: Microsoft-Windows-WUSA/Debug
|
|
- keyword:
|
|
0x8000000000000000: Setup
|
|
0x4000000000000000: Microsoft-Windows-WUSA/Debug
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{099614A5-5DD7-4788-8BC9-E29F43DB28FC} Manifest Microsoft-Windows-LDAP-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-LDAP-Client/Debug
|
|
- keyword:
|
|
0x1: search
|
|
0x2: write
|
|
0x4: refcnt
|
|
0x8: heap
|
|
0x10: cache
|
|
0x20: ssl
|
|
0x40: spewsearch
|
|
0x80: serverdown
|
|
0x100: connect
|
|
0x200: reconnect
|
|
0x400: receivedata
|
|
0x800: bytes_sent
|
|
0x1000: eom
|
|
0x2000: ber
|
|
0x4000: outmemory
|
|
0x8000: controls
|
|
0x10000: bytes_received
|
|
0x20000: cldap
|
|
0x40000: filter
|
|
0x80000: bind
|
|
0x100000: network_errors
|
|
0x200000: verbose
|
|
0x400000: parse
|
|
0x800000: referrals
|
|
0x1000000: request
|
|
0x2000000: connection
|
|
0x4000000: init_term
|
|
0x8000000: api_errors
|
|
0x10000000: errors
|
|
0x8000000000000000: Microsoft-Windows-LDAP-Client/Debug
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{09AC07B9-6AC9-43BC-A50F-58419A797C69} Manifest Microsoft-Windows-SmartCard-Audit
|
|
- channel:
|
|
0x10: Microsoft-Windows-SmartCard-Audit/Authentication: Microsoft-Windows-SmartCard-Audit/Authentication
|
|
- keyword:
|
|
0x1: AuditFailure: Audit Failure
|
|
0x2: AuditSuccess: Audit Success
|
|
0x4: SmartCard: Smart Card
|
|
0x8: CHV: CHV
|
|
0x10: PIN: PIN
|
|
0x8000000000000000: Microsoft-Windows-SmartCard-Audit/Authentication: Microsoft-Windows-SmartCard-Audit/Authentication
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{09EC9687-D7AD-40CA-9C5E-78A04A5AE993} Manifest Microsoft-Windows-DeviceSync
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceSync/Operational
|
|
0x11: Microsoft-Windows-DeviceSync/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DeviceSync/Operational
|
|
0x4000000000000000: Microsoft-Windows-DeviceSync/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{0A002690-3839-4E3A-B3B6-96D8DF868D99} Manifest Microsoft-Antimalware-Engine
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0A88862D-20A3-4C1F-B76F-162C55ADBF93} Manifest Microsoft-Windows-ClearTypeTextTuner
|
|
- channel:
|
|
0x10: Microsoft-Windows-ClearTypeTextTuner/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-ClearTypeTextTuner/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0B886108-1899-4D3A-9C0D-42D8FC4B9108} Manifest Microsoft-Windows-CoreSystem-InitMachineConfig
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0B9FDCCC-451C-449C-9BD8-6756FCC6091A} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Storage-Filter
|
|
- channel:
|
|
0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug
|
|
0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- keyword:
|
|
0x1: Reset
|
|
0x2: PortNotification
|
|
0x4: PauseResume
|
|
0x8: IoPerfNotification
|
|
0x10: Config
|
|
0x20: Perf
|
|
0x80000: Logo_Performance: Logo Performance measurement
|
|
0x100000: IO_Performance: IO Performance measurement
|
|
0x200000: Read: Read request
|
|
0x400000: Write: Write request
|
|
0x800000: PagingRead: Paging Read request
|
|
0x1000000: PagingWrite: Paging Write request
|
|
0x2000000: LowMemoryRead: Low memory Read request
|
|
0x4000000: LowMemoryWrite: Low memory write request
|
|
0x8000000: NonReadWrite: Non-Read/Write request
|
|
0x10000000: PassThrough: Pass-Through request
|
|
0x20000000: Flush: Flush request
|
|
0x40000000: IOCTL: Device I/O control request
|
|
0x80000000: WMI: WMI request
|
|
0x100000000: Power: Power request
|
|
0x200000000: PnP: PnP request
|
|
0x400000000: Enum: Device enumeration handling
|
|
0x800000000: Queue: Queue-related operation
|
|
0x1000000000: ISR: Interrupt Service Routine processing
|
|
0x2000000000: DPC: Deferred Procedure Call handling
|
|
0x4000000000: Timer: Timer-related operation
|
|
0x8000000000: Protocol: Bus protocol specific operation
|
|
0x10000000000: Target: Target-related operation
|
|
0x20000000000: Adapter: Controller or Host Bus Adapter related operation
|
|
0x40000000000: Retry: Retry handling
|
|
0x80000000000: Timeout: Timeout handling
|
|
0x100000000000: ReSet: Reset handling
|
|
0x200000000000: MiniportInterface: Activity between port and miniport
|
|
0x800000000000: Test: Testing-specific processing
|
|
0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug
|
|
0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{0BD19909-EB6F-4B16-8074-6DCE803F091D} Manifest Microsoft-Windows-UserDataAccess-Poom
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: POOM_Appointment
|
|
0x8: POOM_Contacts
|
|
0x10: POOM_Photos
|
|
0x20: POOM_Feeds
|
|
0x40: POOM
|
|
0x100: debug: Debug
|
|
0x4000000000: Warning
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{0BD3506A-9030-4F76-9B88-3E8FE1F7CFB6} Manifest Microsoft-Windows-NWiFi
|
|
- channel:
|
|
0x10: Microsoft-Windows-NWiFi/Diagnostic: Microsoft-Windows-NWiFi/Diagnostic
|
|
- keyword:
|
|
0x1: Init
|
|
0x2: Ioctls
|
|
0x4: RSNA
|
|
0x8: AuthUpcall
|
|
0x10: IODisp
|
|
0x20: NDISReq
|
|
0x40: TKIPSec
|
|
0x80: Reset
|
|
0x100: AssocMgr
|
|
0x200: LWF
|
|
0x400: SOFTAP
|
|
0x800: PowerMgmt
|
|
0x1000: SleepResume
|
|
0x2000: LwtDiagnostic
|
|
0x4000: DisconnectedStandby
|
|
0x10000000: TelemetryReserved28
|
|
0x20000000: Telemetry
|
|
0x40000000: Measures
|
|
0x80000000: CriticalData
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NWiFi/Diagnostic: Microsoft-Windows-NWiFi/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0BF2FB94-7B60-4B4D-9766-E82F658DF540} Manifest Microsoft-Windows-Kernel-ShimEngine
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-ShimEngine/Debug
|
|
0x11: Microsoft-Windows-Kernel-ShimEngine/Operational: Microsoft-Windows-Kernel-ShimEngine/Operational
|
|
0x12: Microsoft-Windows-Kernel-ShimEngine/Diagnostic
|
|
- keyword:
|
|
0x1: ShimEngineEvents
|
|
0x2: ShimEngineMessages
|
|
0x100: DriverScopeGeneral
|
|
0x200: DriverScopePnp
|
|
0x400: DriverScopePower
|
|
0x800: DriverScopeIrps
|
|
0x1000: DriverScopePool
|
|
0x2000: SkipDriverUnloadGeneral
|
|
0x8000000000000000: Microsoft-Windows-Kernel-ShimEngine/Debug
|
|
0x4000000000000000: Microsoft-Windows-Kernel-ShimEngine/Operational: Microsoft-Windows-Kernel-ShimEngine/Operational
|
|
0x2000000000000000: Microsoft-Windows-Kernel-ShimEngine/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{0C478C5B-0351-41B1-8C58-4A6737DA32E3} Manifest Microsoft-Windows-WFP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IKE/Operational
|
|
0x11: Microsoft-Windows-WFP/Operational
|
|
0x12: Microsoft-Windows-WFP/Analytic
|
|
0x13: Microsoft-Windows-IKEDBG/Debug
|
|
0x14: Microsoft-Windows-VPN/Operational
|
|
- keyword:
|
|
0x1: ut:Transfer
|
|
0x10: ut:AOAC
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-IKE/Operational
|
|
0x4000000000000000: Microsoft-Windows-WFP/Operational
|
|
0x2000000000000000: Microsoft-Windows-WFP/Analytic
|
|
0x1000000000000000: Microsoft-Windows-IKEDBG/Debug
|
|
0x800000000000000: Microsoft-Windows-VPN/Operational
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0CC157B3-CF07-4FC2-91EE-31AC92E05FE1} Manifest Microsoft-Windows-AppSruProv
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppSruProv
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-AppSruProv
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0D4FDC09-8C27-494A-BDA0-505E4FD8ADAE} Manifest Microsoft-Windows-Directory-Services-SAM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0D759F0F-CFF9-4902-8867-EB9E29D7A98B} Manifest Microsoft-Windows-WMP-Setup_WM
|
|
- channel:
|
|
0x10: WMPSetup
|
|
- keyword:
|
|
0x8000000000000000: WMPSetup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0DD4D48E-2BBF-452F-A7EC-BA3DBA8407AE} Manifest Microsoft-Windows-ActionQueue
|
|
- channel:
|
|
0x10: Microsoft-Windows-ActionQueue/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-ActionQueue/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0F177893-4A9C-4709-B921-F432D67F43D5} Manifest Microsoft-Windows-Complus
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{0F352580-E9E2-46C2-8336-6AC66E986416} Manifest Microsoft-Windows-OOBE-Machine-Plugins-Wireless
|
|
- channel:
|
|
0x10: Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic
|
|
- keyword:
|
|
0x1: msoobe
|
|
0x8000000000000000: Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{0F67E49F-FE51-4E9F-B490-6F2948CC6027} Manifest Microsoft-Windows-Kernel-Processor-Power
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-Processor-Power/Diagnostic
|
|
- keyword:
|
|
0x1: Perf
|
|
0x2: Diag
|
|
0x4: PowerDiagnostics
|
|
0x8: Lpi
|
|
0x10: SleepStudy
|
|
0x20: Algorithm
|
|
0x40: Profiles
|
|
0x80: PerfDiag
|
|
0x100: EnergyEstimation
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Processor-Power/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{0FA2EE03-1FEB-5057-3BB3-EB25521B8482} Manifest Microsoft-Windows-PersistentMemory-PmemDisk
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-PersistentMemory-PmemDisk/Analytic
|
|
0x11: Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic
|
|
0x12: Microsoft-Windows-PersistentMemory-PmemDisk/Operational
|
|
- keyword:
|
|
0x2: Hardware_Events: Hardware events
|
|
0x100000000: Read: Read request
|
|
0x200000000: Write: Write request
|
|
0x400000000: PagingRead: Paging Read request
|
|
0x800000000: PagingWrite: Paging Write request
|
|
0x1000000000: NonReadWrite: Non-Read/Write request
|
|
0x2000000000: IOCTL: Device I/O control request
|
|
0x4000000000: PnP: PnP request
|
|
0x8000000000: IO_Performance: IO Performance measurement
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Analytic
|
|
0x2000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-PersistentMemory-PmemDisk/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{0FF1C24B-7F05-45C0-ABDC-3C8521BE4F62} Manifest Microsoft-Windows-Mobile-Broadband-Experience-SmsApi
|
|
- channel:
|
|
0x10: SMSApi
|
|
0x11: Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic
|
|
- keyword:
|
|
0x1: Default
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: SMSApi
|
|
0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{10A208DD-A372-421C-9D99-4FAD6DB68B62} Manifest Microsoft-Windows-ApplicabilityEngine
|
|
- channel:
|
|
0x10: Microsoft-Windows-ApplicabilityEngine/Operational
|
|
0x11: Microsoft-Windows-ApplicabilityEngine/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-ApplicabilityEngine/Operational
|
|
0x4000000000000000: Microsoft-Windows-ApplicabilityEngine/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1139C61B-B549-4251-8ED3-27250A1EDEC8} Manifest Microsoft-Windows-RemoteDesktopServices-RdpCoreTS
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin
|
|
0x11: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
|
|
0x12: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin
|
|
0x4000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational
|
|
0x2000000000000000: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug: Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{11A75546-3234-465E-BEC8-2D301CB501AC} Manifest Microsoft-Windows-WindowsSystemAssessmentTool
|
|
- channel:
|
|
0x10: Microsoft-Windows-WindowsSystemAssessmentTool/Operational
|
|
0x11: Microsoft-Windows-WindowsSystemAssessmentTool/Tracing
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WindowsSystemAssessmentTool/Operational
|
|
0x4000000000000000: Microsoft-Windows-WindowsSystemAssessmentTool/Tracing
|
|
0x2000000000000000: Application: Application
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
|
|
{11BD2A68-77FF-4991-9658-F451F2EB6CE1} Manifest Microsoft-Windows-Shell-OpenWith
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-OpenWith/Diagnostic
|
|
- keyword:
|
|
0x1: OpenWith
|
|
0x8000000000000000: Microsoft-Windows-Shell-OpenWith/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{11C5D8AD-756A-42C2-8087-EB1B4A72A846} Manifest Microsoft-Windows-NdisImPlatformEventProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-NdisImPlatform/Operational: Microsoft-Windows-NdisImPlatform/Operational
|
|
- keyword:
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-NdisImPlatform/Operational: Microsoft-Windows-NdisImPlatform/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{11CD958A-C507-4EF3-B3F2-5FD9DFBD2C78} Manifest Microsoft-Windows-Windows Defender
|
|
- channel:
|
|
0x10: Microsoft-Windows-Windows Defender/Operational
|
|
0x11: Microsoft-Windows-Windows Defender/WHC
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Windows Defender/Operational
|
|
0x4000000000000000: Microsoft-Windows-Windows Defender/WHC
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{121D3DA8-BAF1-4DCB-929F-2D4C9A47F7AB} Manifest Microsoft-Windows-Base-Filtering-Engine-Connections
|
|
- channel:
|
|
0x10: Microsoft-Windows-Base-Filtering-Engine-Connections/Operational: BFE IPsec Connections Operational Log
|
|
- keyword:
|
|
0x20000000000: ut:PiiPresent
|
|
0x8000000000000000: Microsoft-Windows-Base-Filtering-Engine-Connections/Operational: BFE IPsec Connections Operational Log
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{125F2CF1-2768-4D33-976E-527137D080F8} Manifest Microsoft-Windows-SmartCard-TPM-VCard-Module
|
|
- channel:
|
|
0x10: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin
|
|
0x11: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin: Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin
|
|
0x4000000000000000: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational: Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{126CDB97-D346-4894-8A34-658DA5EEA1B6} Manifest Microsoft-Windows-System-Restore
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x1: Performance: Performance
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{126DED58-A28D-4113-8E7A-59D7444B2AF1} Manifest Microsoft-Windows-Ncasvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-Ncasvc/Operational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Ncasvc/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{127E0DC5-E13B-4935-985E-78FD508B1D80} Manifest Microsoft-Windows-TerminalServices-RdpSoundDriver
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback
|
|
0x11: Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{12E3DA5B-14E4-4F76-8E35-C540763EF300} Manifest Microsoft-Windows-Globalization
|
|
- channel:
|
|
0x10: Windows.Globalization/Analytic: Microsoft Windows.Globalization API Analytic Channel
|
|
- keyword:
|
|
0x8000000000000000: Windows.Globalization/Analytic: Microsoft Windows.Globalization API Analytic Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{13480A22-D79F-4334-9D32-AA239398AD3C} Manifest Microsoft-Windows-Speech-UserExperience
|
|
- channel:
|
|
0x10: Microsoft-Windows-Speech-UserExperience/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Speech-UserExperience/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{134EA407-755D-4A93-B8A6-F290CD155023} Manifest Microsoft-Windows-HomeGroup-ControlPanel
|
|
- channel:
|
|
0x10: Microsoft-Windows-HomeGroup Control Panel/Operational: Microsoft-Windows-HomeGroup Control Panel/Operational
|
|
0x11: Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic
|
|
- keyword:
|
|
0x10000: HomeGroup
|
|
0x8000000000000000: Microsoft-Windows-HomeGroup Control Panel/Operational: Microsoft-Windows-HomeGroup Control Panel/Operational
|
|
0x4000000000000000: Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{13B197BD-7CEE-4B4E-8DD0-59314CE374CE} Manifest Microsoft-Windows-Perflib
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{13BC4371-4E21-4E46-A84F-8C0FFB548CED} Manifest Microsoft-Windows-DataIntegrityScan
|
|
- channel:
|
|
0x10: Microsoft-Windows-DataIntegrityScan/Admin
|
|
0x11: Microsoft-Windows-DataIntegrityScan/CrashRecovery
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DataIntegrityScan/Admin
|
|
0x4000000000000000: Microsoft-Windows-DataIntegrityScan/CrashRecovery
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1418EF04-B0B4-4623-BF7E-D74AB47BBDAA} Manifest Microsoft-Windows-WMI-Activity
|
|
- channel:
|
|
0x10: Microsoft-Windows-WMI-Activity/Trace
|
|
0x11: Microsoft-Windows-WMI-Activity/Operational
|
|
0x12: Microsoft-Windows-WMI-Activity/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WMI-Activity/Trace
|
|
0x4000000000000000: Microsoft-Windows-WMI-Activity/Operational
|
|
0x2000000000000000: Microsoft-Windows-WMI-Activity/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{14371053-1813-471A-9510-1CF1D0A055A8} Manifest Microsoft-Windows-IME-JPSetting
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-JPSetting/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-JPSetting/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{152FBE4B-C7AD-4F68-BADA-A4FCC1464F6C} Manifest Microsoft-Windows-Hyper-V-Netvsc
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Hyper-V-NETVSC/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Hyper-V-NETVSC/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{152FDB2B-6E9D-4B60-B317-815D5F174C4A} Manifest Microsoft-Windows-Crypto-RSAEnh
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-RSAEnh/Analytic: Microsoft-Windows-Crypto-RSAEnh/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Crypto-RSAEnh/Analytic: Microsoft-Windows-Crypto-RSAEnh/Analytic
|
|
|
|
{155CB334-3D7F-4FF1-B107-DF8AFC3C0363} Manifest Microsoft-Windows-MSDTC Client 2
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED} Manifest Microsoft-Windows-Dhcp-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dhcp-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational
|
|
0x11: Microsoft-Windows-Dhcp-Client/Admin: Microsoft-Windows-DHCP Client Events/Admin
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: DHCP_AOAC
|
|
0x200000000000: ms:Telemetry
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Dhcp-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational
|
|
0x4000000000000000: Microsoft-Windows-Dhcp-Client/Admin: Microsoft-Windows-DHCP Client Events/Admin
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{15CA44FF-4D7A-4BAA-BBA5-0998955E531E} Manifest Microsoft-Windows-Kernel-Boot
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-Boot/Analytic
|
|
0x11: Microsoft-Windows-Kernel-Boot/Operational
|
|
- keyword:
|
|
0x1: SoftRestart
|
|
0x2: MemoryPreservation
|
|
0x4: MemoryBlockRundown
|
|
0x8: PhysicalMemory
|
|
0x10: MemoryMapRundown
|
|
0x20: MemoryPartitions
|
|
0x40: EfiVariables
|
|
0x80000000000: LOG_TO_BOOTSTAT
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Boot/Analytic
|
|
0x2000000000000000: Microsoft-Windows-Kernel-Boot/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{16A1ADC1-9B7F-4CD9-94B3-D8296AB1B130} Manifest Microsoft-Windows-Kernel-AppCompat
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-AppCompat/General
|
|
0x11: Microsoft-Windows-Kernel-AppCompat/Performance
|
|
- keyword:
|
|
0x8: RegWrpAccessDenied
|
|
0x8000000000000000: Microsoft-Windows-Kernel-AppCompat/General
|
|
0x4000000000000000: Microsoft-Windows-Kernel-AppCompat/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{16C6501A-FF2D-46EA-868D-8F96CB0CB52D} Manifest Microsoft-Windows-SEC
|
|
- keyword:
|
|
0x1: Event1
|
|
0x2: Event22
|
|
0x4: Event19
|
|
0x8: Event18
|
|
0x10: Event23
|
|
0x20: Event20
|
|
0x40: Event4
|
|
0x80: Event7
|
|
0x100: Event6
|
|
0x200: Event5
|
|
0x400: Event8
|
|
0x800: Event10
|
|
0x1000: Event11
|
|
0x2000: Event12
|
|
0x4000: Event9
|
|
0x8000: Event13
|
|
0x10000: Event16
|
|
0x40000: Event21
|
|
0x80000: IHs
|
|
0x100000: Event17
|
|
0x200000: Event24
|
|
0x400000: Event25
|
|
0x1000000: Event27
|
|
0x2000000: Event28
|
|
0x4000000: Event29
|
|
0x8000000: Event30
|
|
0x10000000: Event31
|
|
0x20000000: Event32
|
|
0x40000000: Event33
|
|
0x80000000: Event34
|
|
0x100000000: KEID
|
|
0x200000000: KSTD
|
|
0x400000000: X86AE
|
|
0x1000000000: Event36
|
|
0x2000000000: Event37
|
|
0x4000000000: Event35
|
|
0x8000000000: KIC
|
|
0x10000000000: Event38
|
|
0x20000000000: Event39
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{178DADAF-7AC4-4593-AB3E-A45FDA6D0D55} Manifest Microsoft-Windows-Diagnosis-AdvancedTaskManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic
|
|
- keyword:
|
|
0x200: memory
|
|
0x400: list
|
|
0x800: error
|
|
0x1000: dashboard
|
|
0x2000: ui
|
|
0x4000: datamonitor
|
|
0x200000000000: ms:Telemetry
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{17D6E590-F5FE-11DC-95FF-0800200C9A66} Manifest Microsoft-Windows-ApplicationExperience-SwitchBack
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{17E92E2A-3D08-413E-BAEB-A79A262BF486} Manifest Microsoft-Windows-MsiServer
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{17F14A23-551D-40CC-A086-E4194D64ED4C} Manifest Microsoft-Windows-WABSyncProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-WABSyncProvider/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WABSyncProvider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{18F4A5FD-FD3B-40A5-8FC2-E5D261C5D02E} Manifest Microsoft-Windows-ApplicationExperience-LookupServiceTrigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{192EDE41-9175-4C86-AC02-9D003C9D43AB} Manifest Microsoft-Windows-DisplaySwitch
|
|
- channel:
|
|
0x10: Microsoft-Windows-DisplaySwitch/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DisplaySwitch/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{199FE037-2B82-40A9-82AC-E1D46C792B99} Manifest LsaSrv
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-LSA/Performance
|
|
0x11: Microsoft-Windows-LSA/Operational: Operational
|
|
0x12: Microsoft-Windows-LSA/Diagnostic: Diagnostic
|
|
- keyword:
|
|
0x1: WPDBusEnumStartTrigger
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-LSA/Performance
|
|
0x2000000000000000: Microsoft-Windows-LSA/Operational: Operational
|
|
0x1000000000000000: Microsoft-Windows-LSA/Diagnostic: Diagnostic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{19A4C69A-28EB-4D4B-8D94-5F19055A1B5C} Manifest Microsoft-Windows-AsynchronousCausality
|
|
- channel:
|
|
0x10: Microsoft-Windows-AsynchronousCausality/Causality
|
|
- keyword:
|
|
0x1: AsynchronousOperation: Identifies events for asynchronous operations.
|
|
0x2: SynchronousWorkItem: Identifies events for synchronous work items.
|
|
0x4: Relation: Identifies events relating synchronous work items to asynchronous operations.
|
|
0x10: OperationWork: Identifies events for work done by asynchronous operations.
|
|
0x100: SystemOperation: Identifies events orginated by system components.
|
|
0x200: LibraryOperation: Identifies events originated by libraries and language projections.
|
|
0x400: ApplicationOperation: Identifies events originated by an application.
|
|
0x800: OperationCreate: Identifies events originated by the creation of an asynchronous operation.
|
|
0x8000000000000000: Microsoft-Windows-AsynchronousCausality/Causality
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x3: win:Warning: Warning
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{19D2C934-EE9B-49E5-AAEB-9CCE721D2C65} Manifest Microsoft-Windows-OLEACC
|
|
- channel:
|
|
0x10: Microsoft-Windows-OLEACC/Diagnostic
|
|
0x12: Microsoft-Windows-OLEACC/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-OLEACC/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-OLEACC/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{1A396961-5F3C-4C71-8310-44C653C0BF8A} Manifest Microsoft-Windows-DiagCpl
|
|
- channel:
|
|
0x10: Microsoft-Windows-DiagCpl/Debug: Microsoft-Windows-DiagCpl/Debug
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DiagCpl/Debug: Microsoft-Windows-DiagCpl/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1A772F65-BE1E-4FC6-96BB-248E03FA60F5} Manifest Microsoft-Windows-EnergyEfficiencyWizard
|
|
- channel:
|
|
0x10: Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1A870028-F191-4699-8473-6FCD299EAB77} Manifest Microsoft-Windows-Remotefs-Rdbss
|
|
- channel:
|
|
0x10: Microsoft-Windows-Remotefs-Rdbss/Diagnostic: Microsoft-Windows-Remotefs-Rdbss/Diagnostic
|
|
0x11: Microsoft-Windows-Remotefs-Rdbss/Operational: Microsoft-Windows-Remotefs-Rdbss/Operational
|
|
- keyword:
|
|
0x1: Rdbss_Perf
|
|
0x2: Rdbss_Info
|
|
0x400000000000: ut:Diagnostic
|
|
0x8000000000000000: Microsoft-Windows-Remotefs-Rdbss/Diagnostic: Microsoft-Windows-Remotefs-Rdbss/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-Remotefs-Rdbss/Operational: Microsoft-Windows-Remotefs-Rdbss/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{1A9443D4-B099-44D6-8EB1-829B9C2FE290} Manifest Microsoft-Windows-PCI
|
|
- channel:
|
|
0x10: Microsoft-Windows-PCI/Diagnostic
|
|
- keyword:
|
|
0x1: Diag
|
|
0x8000000000000000: Microsoft-Windows-PCI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1B562E86-B7AA-4131-BADC-B6F3A001407E} Manifest Microsoft-Windows-DistributedCOM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{1B6B0772-251B-4D42-917D-FACA166BC059} Manifest TPM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{1B734B40-A458-4B81-954F-AD7C9461BED8} Manifest Microsoft-Windows-IME-CustomerFeedbackManagerUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1B8B402D-78DC-46FB-BF71-46E64AEDF165} Manifest Microsoft-Windows-RemoteApp and Desktop Connections
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-RemoteApp and Desktop Connections/Admin
|
|
0x11: Microsoft-Windows-RemoteApp and Desktop Connections/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-RemoteApp and Desktop Connections/Admin
|
|
0x2000000000000000: Microsoft-Windows-RemoteApp and Desktop Connections/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1BDA2AB1-BBC1-4ACB-A849-C0EF2B249672} Manifest Microsoft-Windows-Spellchecking-Host
|
|
- channel:
|
|
0x10: Microsoft-Windows-Spellchecking-Host/Analytic: Microsoft Windows Spell Checking Host Analytic Channel
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Spellchecking-Host/Analytic: Microsoft Windows Spell Checking Host Analytic Channel
|
|
0x4000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{1BE1A88D-8E34-4170-9123-F503375BBCEF} Manifest Microsoft-Windows-StorSqm
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D} Manifest Microsoft-Windows-DNS-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-DNS-Client/Operational: Microsoft-Windows-DNS Client Events/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x100: ut:GenericEvent
|
|
0x10000000: ut:DnsAutoLogKeyword
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:PolicyTable
|
|
0x400000000000: ut:PerfCheckPoints
|
|
0x800000000000: ut:RegistrationEvent
|
|
0x8000000000000000: Microsoft-Windows-DNS-Client/Operational: Microsoft-Windows-DNS Client Events/Operational
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1D5990C1-EC62-49F0-9E37-1F4DB12DB41E} Manifest Microsoft-Windows-DeviceConfidence
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceConfidence/Analytic
|
|
- keyword:
|
|
0x1: Default
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DeviceConfidence/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{1D5E499D-739C-45A6-A3E1-8CBE0A352BEB} Manifest Microsoft-Windows-Deduplication-Change
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1D75856D-36A7-4ECB-A3F5-B13152222D29} Manifest Microsoft-Windows-MSPaint
|
|
- channel:
|
|
0x10: Microsoft-Windows-MSPaint/Admin
|
|
0x11: Microsoft-Windows-MSPaint/Diagnostic
|
|
0x12: Microsoft-Windows-MSPaint/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-MSPaint/Admin
|
|
0x4000000000000000: Microsoft-Windows-MSPaint/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-MSPaint/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D} Manifest Microsoft-Windows-Backup
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-Backup: Microsoft-Windows-Backup/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-Backup: Microsoft-Windows-Backup/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1DB8DAD0-7CA6-4F18-B357-43BFDD8C9806} Manifest Microsoft-Windows-Telephony-PhoneProviders
|
|
|
|
{1DE130E1-C026-4CBF-BA0F-AB608E40AEEA} Manifest Microsoft-Windows-BitLocker-Driver-Performance
|
|
- channel:
|
|
0x10: Microsoft-Windows-BitLocker-Driver-Performance/Operational
|
|
- keyword:
|
|
0x20: fve:Performance
|
|
0x40: fve:CryptoPerformance
|
|
0x8000000000000000: Microsoft-Windows-BitLocker-Driver-Performance/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1E2462BE-B025-48DA-8C1F-7B60B8CCAE53} Manifest Microsoft-Windows-AppModel-MessagingDataModel
|
|
|
|
{1E39B4CE-D1E6-46CE-B65B-5AB05D6CC266} Manifest Microsoft-Windows-Networking-RealTimeCommunication
|
|
- channel:
|
|
0x10: Microsoft-Windows-Networking-RealTimeCommunication/Tracing
|
|
- keyword:
|
|
0x1: Aoac: Aoac
|
|
0x8000000000000000: Microsoft-Windows-Networking-RealTimeCommunication/Tracing
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{1E9A4978-78C2-441E-8858-75B5D1326BC5} Manifest Microsoft-Windows-NetworkProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetworkProvider/Operational: Microsoft-Windows-NetworkProvider/Operational
|
|
- keyword:
|
|
0x100: UncHardening: UNC Hardening
|
|
0x8000000000000000: Microsoft-Windows-NetworkProvider/Operational: Microsoft-Windows-NetworkProvider/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{1ED6976A-4171-4764-B415-7EA08BC46C51} Manifest Microsoft-User Experience Virtualization-App Agent
|
|
- channel:
|
|
0x10: Microsoft-User Experience Virtualization-App Agent/Operational: Operational
|
|
0x11: Microsoft-User Experience Virtualization-App Agent/Debug
|
|
0x12: Microsoft-User Experience Virtualization-App Agent/Analytic: Analytic
|
|
- keyword:
|
|
0x1: DebugTrace: Debug Out Messages.
|
|
0x8000000000000000: Microsoft-User Experience Virtualization-App Agent/Operational: Operational
|
|
0x4000000000000000: Microsoft-User Experience Virtualization-App Agent/Debug
|
|
0x2000000000000000: Microsoft-User Experience Virtualization-App Agent/Analytic: Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F} Manifest Microsoft-Windows-WMI
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1EE3ABDB-C1FC-4B43-9E56-11064ABBA866} Manifest Microsoft-Windows-XAudio2
|
|
- channel:
|
|
0x10: Microsoft-Windows-XAudio2/Debug: Microsoft Windows XAudio2 debug logging
|
|
0x11: Microsoft-Windows-XAudio2/Performance: Microsoft Windows XAudio2 performance metrics
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-XAudio2/Debug: Microsoft Windows XAudio2 debug logging
|
|
0x4000000000000000: Microsoft-Windows-XAudio2/Performance: Microsoft Windows XAudio2 performance metrics
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: Performance: Performance measurements
|
|
|
|
{1F678132-5938-4686-9FDC-C8FF68F15C85} Manifest Schannel
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{1F84007D-19CE-4B15-9E81-8A3DD8EB9ECB} Manifest Microsoft-Windows-Shell-ZipFolder
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-ZipFolder/Diagnostic
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-Shell-ZipFolder/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{206F6DEA-D3C5-4D10-BC72-989F03C8B84B} Manifest Microsoft-Windows-Wininit
|
|
- channel:
|
|
0x10: Microsoft-Windows-Wininit/Diagnostic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-Wininit/Diagnostic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{21B7C16E-C5AF-4A69-A74A-7245481C1B97} Manifest Microsoft-Windows-WPD-MTPClassDriver
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-MTPClassDriver/Operational: Operational
|
|
0x11: Microsoft-Windows-WPD-MTPClassDriver/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-MTPClassDriver/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-WPD-MTPClassDriver/Analytic: Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{21D79DB0-8E03-41CD-9589-F3EF7001A92A} Manifest Microsoft-User Experience Virtualization-IPC
|
|
- channel:
|
|
0x10: Microsoft-User Experience Virtualization-IPC/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-User Experience Virtualization-IPC/Operational: Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{22B6D684-FA63-4578-87C9-EFFCBE6643C7} Manifest Microsoft-Windows-WebdavClient-LookupServiceTrigger
|
|
|
|
{22FB2CD6-0E7B-422B-A0C7-2FAD1FD0E716} Manifest Microsoft-Windows-Kernel-Process
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Process/Analytic
|
|
- keyword:
|
|
0x10: WINEVENT_KEYWORD_PROCESS
|
|
0x20: WINEVENT_KEYWORD_THREAD
|
|
0x40: WINEVENT_KEYWORD_IMAGE
|
|
0x80: WINEVENT_KEYWORD_CPU_PRIORITY
|
|
0x100: WINEVENT_KEYWORD_OTHER_PRIORITY
|
|
0x200: WINEVENT_KEYWORD_PROCESS_FREEZE
|
|
0x400: WINEVENT_KEYWORD_JOB
|
|
0x800: WINEVENT_KEYWORD_ENABLE_PROCESS_TRACING_CALLBACKS
|
|
0x1000: WINEVENT_KEYWORD_JOB_IO
|
|
0x2000: WINEVENT_KEYWORD_WORK_ON_BEHALF
|
|
0x4000: WINEVENT_KEYWORD_JOB_SILO
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Process/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{239CFB83-CBB7-4BBC-A02E-9BDB496AA7C2} Manifest Microsoft-Windows-WlanConn
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLANConnectionFlow/Diagnostic: Microsoft-Windows-WlanConn/Diagnostic
|
|
- keyword:
|
|
0x1: WlanCfe-Performance
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WLANConnectionFlow/Diagnostic: Microsoft-Windows-WlanConn/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{23B8D46B-67DD-40A3-B636-D43E50552C6D} Manifest Microsoft-Windows-User Device Registration
|
|
- channel:
|
|
0x10: Microsoft-Windows-User Device Registration/Admin
|
|
0x11: Microsoft-Windows-User Device Registration/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-User Device Registration/Admin
|
|
0x4000000000000000: Microsoft-Windows-User Device Registration/Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{245F975D-909D-49ED-B8F9-9A75691D6B6B} Manifest Microsoft-Windows-URLMon
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinURLMon/Analytic
|
|
- keyword:
|
|
0x1: URLMON_KEYWORD: Flagged on all URLMon IE events
|
|
0x8000000000000000: Microsoft-Windows-WinURLMon/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{24989972-0967-4E21-A926-93854033638E} Manifest Microsoft-Windows-RRAS
|
|
- channel:
|
|
0x10: Microsoft-Windows-RRAS/Debug: Notification Channel
|
|
0x11: Microsoft-Windows-RRAS/Operational: Admin Channel
|
|
- keyword:
|
|
0x1: ut:RrasAdmin
|
|
0x2: ut:Mprdim
|
|
0x4: ut:Rtrmgr
|
|
0x8: ut:Vpnike
|
|
0x10: ut:Vpnikeapi
|
|
0x20: ut:Rtm
|
|
0x40: ut:Mprapi
|
|
0x80: ut:SstpSvc
|
|
0x100: ut:Rasppp
|
|
0x200: ut:Mprddm
|
|
0x400: ut:RasGre
|
|
0x8000000000000000: Microsoft-Windows-RRAS/Debug: Notification Channel
|
|
0x4000000000000000: Microsoft-Windows-RRAS/Operational: Admin Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{25B99A4C-2F80-4FCD-982D-69CD1F77BADF} Manifest Microsoft-Windows-MCCS-NetworkHelper
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Debug
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2683B597-3CCA-410A-97FE-6F7EE3D09B94} Manifest Microsoft-Windows-UserAccountControl
|
|
- channel:
|
|
0x10: Microsoft-Windows-UserAccountControl/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-UserAccountControl/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{271C5228-C3FE-4E47-831F-48C3652CE5AC} Manifest Microsoft-Windows-DxpTaskSyncProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-DxpTaskSyncProvider/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DxpTaskSyncProvider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{272A979B-34B5-48EC-94F5-7225A59C85A0} Manifest Microsoft-Windows-RPC-Proxy-LBS
|
|
- channel:
|
|
0x10: Microsoft-Windows-RPC-Proxy/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RPC-Proxy/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{27A8C1E2-EB19-463E-8424-B399DF27A216} Manifest Microsoft-Windows-TerminalServices-PnPDevices
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-PnPDevices/Admin: Admin
|
|
0x11: Microsoft-Windows-TerminalServices-PnPDevices/Analytic: Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-PnPDevices/Operational: Operational
|
|
0x13: Microsoft-Windows-TerminalServices-PnPDevices/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Analytic: Analytic
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Operational: Operational
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-PnPDevices/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{28058203-D394-4AFC-B2A6-2F9155A3BB95} Manifest Microsoft-Windows-Proximity-Common
|
|
- channel:
|
|
0x10: Microsoft-Windows-Proximity-Common/Informational
|
|
0x11: Microsoft-Windows-Proximity-Common/Performance
|
|
0x12: Microsoft-Windows-Proximity-Common/Diagnostic
|
|
- keyword:
|
|
0x1: ProximityAssociation
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Proximity-Common/Informational
|
|
0x4000000000000000: Microsoft-Windows-Proximity-Common/Performance
|
|
0x2000000000000000: Microsoft-Windows-Proximity-Common/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{287D59B6-79BA-4741-A08B-2FEDEEDE6435} Manifest Microsoft-Windows-EDP-Audit-TCB
|
|
- channel:
|
|
0x10: Microsoft-Windows-EDP-Audit-TCB/Admin: Microsoft Windows Information Protection Audit TCB Channel
|
|
- keyword:
|
|
0x10: EDP-Audit-Keyword-ProtectionRemoved: Windows Information Protection Audit Protection Removed Keyword
|
|
0x8000000000000000: Microsoft-Windows-EDP-Audit-TCB/Admin: Microsoft Windows Information Protection Audit TCB Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{28AA95BB-D444-4719-A36F-40462168127E} Manifest Microsoft-Windows-TerminalServices-ClientActiveXCore
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-TerminalServices-RDPClient/Operational
|
|
0x11: Microsoft-Windows-TerminalServices-RDPClient/Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-RDPClient/Debug
|
|
- keyword:
|
|
0x100: AccessDenied: Access Denied
|
|
0x200: Disconnected: Client has disconnected
|
|
0x400: AuthFailed: Authentication Failure
|
|
0x800: LicenseError: Failed to get a license
|
|
0x1000: TimedOut: Operation has timed out
|
|
0x2000: InvalidState: Invalid State
|
|
0x4000: GatewayConnectFailed: Connection to gateway server failed
|
|
0x8000: NetworkUnAvailable: Network Unavailable
|
|
0x10000: DnsResolutionFailure: DNS resolution failure
|
|
0x20000: SignVerifFailed: Sign verification failed
|
|
0x40000: ResourceFailure: Resource check failed
|
|
0x80000: LogonFailed: Logon failed
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Operational
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Analytic
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-RDPClient/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{28CB46C7-4003-4E50-8BD9-442086762D12} Manifest Microsoft-AppV-Client-StreamingUX
|
|
- channel:
|
|
0x10: Microsoft-AppV-Client-Streamingux/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-AppV-Client-Streamingux/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{28E25B07-C47F-473D-8B24-2E171CCA808A} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task
|
|
- channel:
|
|
0x10: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Analytic
|
|
0x11: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{292A52C4-FA27-4461-B526-54A46430BD54} Manifest Microsoft-Windows-Dwm-Api
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dwm-API/Diagnostic
|
|
- keyword:
|
|
0x1: DwmApi
|
|
0x8000000000000000: Microsoft-Windows-Dwm-API/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2957313D-FCAA-5D4A-2F69-32CE5F0AC44E} Manifest Microsoft-Windows-COM-RundownInstrumentation
|
|
- channel:
|
|
0x10: Microsoft-Windows-COM/RundownInstrumentation
|
|
- keyword:
|
|
0x1: RundownInstrumentation
|
|
0x8000000000000000: Microsoft-Windows-COM/RundownInstrumentation
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2992E9CF-4F99-48F5-A0B6-B99B11CD387D} Manifest Microsoft-Windows-P2PIMSvc
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{29D13147-1C2E-48EC-9994-E29DFE496EB3} Manifest Microsoft-Windows-RasServer
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{2A274310-42D5-4019-B816-E4B8C7ABE95C} Manifest Microsoft-Windows-ReadyBoostDriver
|
|
- channel:
|
|
0x10: Microsoft-Windows-ReadyBoostDriver/Analytic
|
|
0x11: Microsoft-Windows-ReadyBoostDriver/Operational: Microsoft-Windows-ReadyBoostDriver/Operational
|
|
- keyword:
|
|
0x10: StoreOps
|
|
0x20: ReadyBoot
|
|
0x40: StoreDiag
|
|
0x80: StoreContentsRundown
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-ReadyBoostDriver/Analytic
|
|
0x4000000000000000: Microsoft-Windows-ReadyBoostDriver/Operational: Microsoft-Windows-ReadyBoostDriver/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2A45D52E-BBF3-4843-8E18-B356ED5F6A65} Manifest Microsoft-Windows-IPMIProvider
|
|
- channel:
|
|
0x10: HardwareEvents
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: HardwareEvents
|
|
|
|
{2A49DE31-8A5B-4D3A-A904-7FC7409AE90D} Manifest Microsoft-Windows-MFH264Enc
|
|
- channel:
|
|
0x10: WINDOWS_MFH264Enc_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_MFH264Enc_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2A576B87-09A7-520E-C21A-4942F0271D67} Manifest Microsoft-Antimalware-Scan-Interface
|
|
- channel:
|
|
0x10: AMSI/Operational
|
|
- keyword:
|
|
0x1: Event1
|
|
0x8000000000000000: AMSI/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2AABD03B-F48B-419A-B4CE-7A14403F4A46} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal
|
|
- channel:
|
|
0x10: Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{2C3E6D9F-8298-450F-8E5D-49B724F1216F} Manifest Microsoft-Windows-TabletPC-Platform-Input-Ninput
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2CD58181-0BB6-463E-828A-056FF837F966} Manifest Microsoft-Windows-Security-EnterpriseData-FileRevocationManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational
|
|
0x4000000000000000: Application: Application
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2D318B91-E6E7-4C46-BD04-BFE6DB412CF9} Manifest Microsoft-Windows-TZUtil
|
|
- channel:
|
|
0x10: Microsoft-Windows-TZUtil/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TZUtil/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{2D4C0C5E-6704-493A-A44B-F5ADD4FC9283} Manifest Microsoft-Windows-OOBE-FirstLogonAnim
|
|
- channel:
|
|
0x10: Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic
|
|
- keyword:
|
|
0x1: FirstLogonAnim
|
|
0x8000000000000000: Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2D4EBCA6-EA64-453F-A292-AE2EA0EE513B} Manifest Microsoft-Windows-Direct3DShaderCache
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3DShaderCache/Default
|
|
- keyword:
|
|
0x1: Objects
|
|
0x2: APIs
|
|
0x4: Events
|
|
0x8: Profiling
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-Direct3DShaderCache/Default
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2D7904D8-5C90-4209-BA6A-4C08F409934C} Manifest Microsoft-Windows-StartLmhosts
|
|
- keyword:
|
|
0x1: Keyword_StartLmhosts
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2E2BBB16-0C36-4B9B-A567-40924A199FD5} Manifest Microsoft-Windows-Mobile-Broadband-Experience-Api
|
|
- channel:
|
|
0x10: Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{2E35AAEB-857F-4BEB-A418-2E6C0E54D988} Manifest Microsoft-Windows-DriverFrameworks-UserMode
|
|
- channel:
|
|
0x10: Microsoft-Windows-DriverFrameworks-UserMode/Operational: Operational
|
|
0x11: Microsoft-Windows-Kernel-Power/Diagnostic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: umdf:PowerTransition
|
|
0x8000000000000000: Microsoft-Windows-DriverFrameworks-UserMode/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Power/Diagnostic
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2E6CB42E-161D-413B-A6C1-84CA4C1E5890} Manifest Microsoft-Windows-WindowsToGo-StartupOptions
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{2ED299D2-2F6B-411D-8D15-F4CC6FDE0C70} Manifest Microsoft-Windows-AllJoyn
|
|
- channel:
|
|
0x10: Microsoft-Windows-AllJoyn/Operational: Operational
|
|
0x11: Microsoft-Windows-AllJoyn/Debug: Debug
|
|
- keyword:
|
|
0x1: AJKeyword: AJ
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-AllJoyn/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-AllJoyn/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2ED6006E-4729-4609-B423-3EE7BCD678EF} Manifest Microsoft-Windows-NDIS-PacketCapture
|
|
- channel:
|
|
0x10: Microsoft-Windows-NDIS-PacketCapture/Diagnostic
|
|
- keyword:
|
|
0x1: Ethernet802.3
|
|
0x200: WirelessWAN
|
|
0x8000: Tunnel
|
|
0x10000: Native802.11
|
|
0x1000000: VMSwitch
|
|
0x2000000: PacketTruncated
|
|
0x40000000: PacketStart
|
|
0x80000000: PacketEnd
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NDIS-PacketCapture/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2F07E2EE-15DB-40F1-90EF-9D7BA282188A} Manifest Microsoft-Windows-TCPIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-TCPIP/Diagnostic
|
|
0x11: Microsoft-Windows-TCPIP/Operational: Operational
|
|
- keyword:
|
|
0x1: ut:TcpipEndpoint
|
|
0x2: ut:TcpipListener
|
|
0x4: ut:TcpipTcb
|
|
0x8: ut:TcpipBind
|
|
0x10: ut:TcpipInterface
|
|
0x20: ut:TcpipRoute
|
|
0x40: ut:TcpipCtcp
|
|
0x80: ut:TcpipDiagnosis
|
|
0x100: ut:Transfer
|
|
0x200: ut:ProcessIdHint
|
|
0x400: ut:Endpoint
|
|
0x800: ut:Rss
|
|
0x1000: ut:TcpipNdkpi
|
|
0x2000: ut:TcpipCsDiag
|
|
0x4000: ut:Teredo
|
|
0x8000: ut:AleRemoteEndpoint
|
|
0x10000: ut:AleMemory
|
|
0x20000: ut:AlePartition
|
|
0x40000: ut:Ledbat
|
|
0x80000: ut:Nrt
|
|
0x100000: ut:NsiNotification
|
|
0x200000: ut:TcpipRouter
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:Summary
|
|
0x8000000000000000: Microsoft-Windows-TCPIP/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-TCPIP/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: TcpSummary
|
|
0x11: TcpIpPerPacket
|
|
|
|
{2F94E1CC-A8C5-4FE7-A1C3-53D7BDA8E73E} Manifest Microsoft-WindowsPhone-ConfigManager2
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Trace: Trace
|
|
0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{2F959466-24D4-4972-8729-0D5E3539EBC3} Manifest Microsoft-Windows-Dism-Cli
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dism-Cli/Analytic
|
|
- keyword:
|
|
0x1: DismCliEvent
|
|
0x8000000000000000: Microsoft-Windows-Dism-Cli/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2FD7A9A5-B1A1-4FC7-B95C-C32FED818F30} Manifest Microsoft-Windows-TabletPC-Platform-Manipulations
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{2FF3E6B7-CB90-4700-9621-443F389734ED} Manifest Microsoft-Windows-Kernel-WDI
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-WDI/Analytic: Microsoft-Windows-Kernel-WDI/Analytic
|
|
0x11: Microsoft-Windows-Kernel-WDI/Debug: Microsoft-Windows-Kernel-WDI/Debug
|
|
0x12: Microsoft-Windows-Kernel-WDI/Operational: Microsoft-Windows-Kernel-WDI/Operational
|
|
- keyword:
|
|
0x100000000: context: Verbose context events
|
|
0x200000000: diag: Scenario trigger events
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-Kernel-WDI/Analytic: Microsoft-Windows-Kernel-WDI/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Kernel-WDI/Debug: Microsoft-Windows-Kernel-WDI/Debug
|
|
0x2000000000000000: Microsoft-Windows-Kernel-WDI/Operational: Microsoft-Windows-Kernel-WDI/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{30336ED4-E327-447C-9DE0-51B652C86108} Manifest Microsoft-Windows-Shell-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-Core/Diagnostic
|
|
0x11: Microsoft-Windows-Shell-Core/ActionCenter
|
|
0x12: Microsoft-Windows-Shell-Core/Operational
|
|
0x13: Microsoft-Windows-Shell-Core/AppDefaults
|
|
0x14: Microsoft-Windows-Shell-Core/LogonTasksChannel
|
|
- keyword:
|
|
0x10000: Shell
|
|
0x20000: Properties
|
|
0x40000: FileClassStoreAndIconCache
|
|
0x80000: Controls
|
|
0x100000: APICalls
|
|
0x200000: InternetExplorer
|
|
0x400000: ShutdownUX
|
|
0x800000: CopyEngine
|
|
0x1000000: Tasks
|
|
0x2000000: WDI
|
|
0x4000000: StartupPerf
|
|
0x8000000: StructuredQuery
|
|
0x10000000: Grep
|
|
0x20000000: ItemCollection
|
|
0x40000000: SearchPerf
|
|
0x80000000: ActiveSetup
|
|
0x100000000: ExplorerPerf
|
|
0x200000000: LogonPerformance
|
|
0x400000000: ElizaPrototype: Eliza Prototype
|
|
0x800000000: CloudExperienceHost
|
|
0x1000000000: Restore
|
|
0x2000000000: OOBEHealth
|
|
0x200000000000: ms:Telemetry
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-Shell-Core/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-Shell-Core/ActionCenter
|
|
0x2000000000000000: Microsoft-Windows-Shell-Core/Operational
|
|
0x1000000000000000: Microsoft-Windows-Shell-Core/AppDefaults
|
|
0x800000000000000: Microsoft-Windows-Shell-Core/LogonTasksChannel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{305FC87B-002A-5E26-D297-60223012CA9C} Manifest Microsoft-Windows-User-Diagnostic
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{306C4E0B-E148-543D-315B-C618EB93157C} Manifest Microsoft-Windows-Power-Meter-Polling
|
|
- channel:
|
|
0x10: Microsoft-Windows-Power-Meter-Polling/Diagnostic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: OneSecond
|
|
0x4: FiveSecond
|
|
0x8: ThirtySecond
|
|
0x10: FiveMinute
|
|
0x20: ThirtyMinute
|
|
0x8000000000000000: Microsoft-Windows-Power-Meter-Polling/Diagnostic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{30E1D284-5D88-459C-83FD-6345B39B19EC} Manifest Microsoft-Windows-USB-USBXHCI
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-USB-USBXHCI-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI driver are sent.
|
|
0x11: Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI trustlet are sent from VTL1.
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: USBError
|
|
0x4: IRP
|
|
0x8: Power
|
|
0x10: PnP
|
|
0x20: Performance
|
|
0x40: HeadersBusTrace
|
|
0x80: PartialDataBusTrace
|
|
0x100: FullDataBusTrace
|
|
0x200: StateMachine
|
|
0x400: Enumeration
|
|
0x800: VerifyDriver
|
|
0x1000: HWVerifyHost
|
|
0x2000: HWVerifyHub
|
|
0x4000: HWVerifyDevice
|
|
0x8000: Rundown
|
|
0x10000: Device
|
|
0x20000: Hub
|
|
0x40000: Compat
|
|
0x80000: ControllerCommand
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-USB-USBXHCI-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI driver are sent.
|
|
0x2000000000000000: Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic: This is the Analytic channel to which internal Analytic events from the USBXHCI trustlet are sent from VTL1.
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{313B0545-BF9C-492E-9173-8DE4863B8573} Manifest Microsoft-Windows-WMVENCOD
|
|
- channel:
|
|
0x10: WINDOWS_VC1ENC_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_VC1ENC_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{314B2B0D-81EE-4474-B6E0-C2AAEC0DDBDE} Manifest Microsoft-Windows-VWiFi
|
|
- channel:
|
|
0x10: Microsoft-Windows-VWiFi/Diagnostic: Microsoft-Windows-VWiFi/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-VWiFi/Diagnostic: Microsoft-Windows-VWiFi/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{314DE49F-CE63-4779-BA2B-D616F6963A88} Manifest Microsoft-Windows-NCSI
|
|
- channel:
|
|
0x10: Microsoft-Windows-NCSI/Analytic: Microsoft-Windows-NCSI/Analytic
|
|
0x11: Microsoft-Windows-NCSI/Operational: Microsoft-Windows-NCSI/Operational
|
|
- keyword:
|
|
0x1: NlaDiagnostics
|
|
0x20: LwtDiagnostic
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NCSI/Analytic: Microsoft-Windows-NCSI/Analytic
|
|
0x4000000000000000: Microsoft-Windows-NCSI/Operational: Microsoft-Windows-NCSI/Operational
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{31569DCF-9C6F-4B8E-843A-B7C1CC7FFCBA} Manifest Microsoft-Windows-WPD-API
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-API/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-API/Analytic: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{315A8872-923E-4EA2-9889-33CD4754BF64} Manifest Microsoft-Windows-Immersive-Shell
|
|
- channel:
|
|
0x10: Microsoft-Windows-TWinUI/Diagnostic
|
|
0x11: Microsoft-Windows-TWinUI/Operational
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x2: PLMComponent: Process Lifetime Manager
|
|
0x4: NotificationE2E: Notifications end-to-end
|
|
0x8: wpndebug_TileParsingErrors: Developer Debug: Debugging Tile or Badge XML Parsing Errors
|
|
0x10: wpndebug_LocalImageErrors: Developer Debug: Debugging Tile or Toast Local Image Rendering Errors
|
|
0x20: wpndebug_ToastParsingErrors: Developer Debug: Debugging Toast XML Parsing Errors
|
|
0x40: LwNetDiag
|
|
0x80: LockScreenCallBroker
|
|
0x100: PLMComponentCostly
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-TWinUI/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-TWinUI/Operational
|
|
0x2000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{319122A9-1485-4E48-AF35-7DB2D93B8AD2} Manifest Microsoft-Windows-User-ControlPanel
|
|
- channel:
|
|
0x10: Microsoft-Windows-User Control Panel/Diagnostic
|
|
0x11: Microsoft-Windows-User Control Panel Performance/Diagnostic
|
|
0x12: Microsoft-Windows-User Control Panel Usage/Diagnostic
|
|
0x13: Microsoft-Windows-User Control Panel/Operational: Microsoft-Windows-User Control Panel/Operational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-User Control Panel/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-User Control Panel Performance/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-User Control Panel Usage/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-User Control Panel/Operational: Microsoft-Windows-User Control Panel/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{31BCAC7F-4AB8-47A1-B73A-A161EE68D585} Manifest Microsoft-Windows-IME-JPAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-JPAPI/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-JPAPI/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{31F60101-3703-48EA-8143-451F8DE779D2} Manifest Microsoft-Windows-DesktopWindowManager-Diag
|
|
- channel:
|
|
0x10: Microsoft-Windows-DesktopWindowManager-Diag/Diagnostic
|
|
- keyword:
|
|
0x2000000: DesktopWindowManager-WDI
|
|
0x8000000000000000: Microsoft-Windows-DesktopWindowManager-Diag/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{32254F6C-AA33-46F0-A5E3-1CBCC74BF683} Manifest Microsoft-Windows-SMBWitnessClient
|
|
- channel:
|
|
0x10: Microsoft-Windows-SMBWitnessClient/Admin
|
|
0x11: Microsoft-Windows-SMBWitnessClient/Informational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SMBWitnessClient/Admin
|
|
0x4000000000000000: Microsoft-Windows-SMBWitnessClient/Informational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{3239EB6F-C7FC-4953-AA15-646829A4CA4C} Manifest Microsoft-Windows-DisplayColorCalibration
|
|
- channel:
|
|
0x10: Microsoft-Windows-DisplayColorCalibration/Operational
|
|
0x11: Microsoft-Windows-DisplayColorCalibration/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DisplayColorCalibration/Operational
|
|
0x4000000000000000: Microsoft-Windows-DisplayColorCalibration/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{323DAD74-D3EC-44A8-8B9D-CAFEB4999274} Manifest Microsoft-Windows-WLAN-MediaManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLAN-MediaManager/Diagnostic: Microsoft-Windows-WLAN-MediaManager/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WLAN-MediaManager/Diagnostic: Microsoft-Windows-WLAN-MediaManager/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{32DD13DF-9C0B-4C3B-B854-EE76C050F5F4} Manifest Microsoft-Windows-DesktopActivityModerator
|
|
- channel:
|
|
0x10: Microsoft-Windows-DesktopActivityModerator/Diagnostic
|
|
- keyword:
|
|
0x1: StartStopDriver
|
|
0x2: Control
|
|
0x4: ProcessActivity
|
|
0x8: Policy
|
|
0x10: Pdc
|
|
0x20: IoTracking
|
|
0x40: PerfTrackContext
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DesktopActivityModerator/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{331C3B3A-2005-44C2-AC5E-77220C37D6B4} Manifest Microsoft-Windows-Kernel-Power
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-Power/Diagnostic
|
|
0x11: Microsoft-Windows-Kernel-Power/Thermal-Diagnostic
|
|
0x12: Microsoft-Windows-Kernel-Power/Thermal-Operational: Thermal-Operational
|
|
- keyword:
|
|
0x1: po:Scenario
|
|
0x2: po:Simple
|
|
0x4: po:Diagnostic
|
|
0x8: po:Performance
|
|
0x10: po:Idle
|
|
0x20: po:Thermal
|
|
0x40: po:PerfTrackContext
|
|
0x80: po:PowerSetting
|
|
0x100: po:RuntimeFx
|
|
0x200: po:SleepStudy
|
|
0x400: po:DiagnosticLight
|
|
0x800: po:PerformanceLight
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Power/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-Kernel-Power/Thermal-Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-Kernel-Power/Thermal-Operational: Thermal-Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{33693E1D-246A-471B-83BE-3E75F47A832D} Manifest Microsoft-Windows-BTH-BTHUSB
|
|
- channel:
|
|
0x10: Microsoft-Windows-BTH-BTHUSB/Diagnostic: Microsoft-Windows-BTH-BTHUSB/Operational
|
|
0x11: Microsoft-Windows-BTH-BTHUSB/Performance: Microsoft-Windows-BTH-BTHUSB/Operational
|
|
- keyword:
|
|
0x1: Diagnostic
|
|
0x8000000000000000: Microsoft-Windows-BTH-BTHUSB/Diagnostic: Microsoft-Windows-BTH-BTHUSB/Operational
|
|
0x4000000000000000: Microsoft-Windows-BTH-BTHUSB/Performance: Microsoft-Windows-BTH-BTHUSB/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3419DE6D-5D7F-4668-ACC8-F80566814D96} Manifest Microsoft-Windows-System-Profile-HardwareId
|
|
- channel:
|
|
0x10: Microsoft-Windows-System-Profile-HardwareId/Diagnostic
|
|
- keyword:
|
|
0x1: SYSTEMPROFILE_KEYWORD: Windows.System.Profile.HardwareId
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-System-Profile-HardwareId/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{34A3697E-0F10-4E48-AF3C-F869B5BABEBB} Manifest Microsoft-Windows-WorkFolders
|
|
- channel:
|
|
0x10: Microsoft-Windows-WorkFolders/Operational: Operational
|
|
0x11: Microsoft-Windows-WorkFolders/Debug: Debug
|
|
0x12: Microsoft-Windows-WorkFolders/Analytic: Analytic
|
|
0x13: Microsoft-Windows-WorkFolders/WHC: ManagementAgent
|
|
- keyword:
|
|
0x1: SyncPartnership
|
|
0x8000000000000000: Microsoft-Windows-WorkFolders/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-WorkFolders/Debug: Debug
|
|
0x2000000000000000: Microsoft-Windows-WorkFolders/Analytic: Analytic
|
|
0x1000000000000000: Microsoft-Windows-WorkFolders/WHC: ManagementAgent
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{3527CB55-1298-49D4-AB94-1243DB0FCAFF} Manifest Microsoft-Windows-TZSync
|
|
- channel:
|
|
0x10: Microsoft-Windows-TZSync/Analytic: Analytic
|
|
0x11: Microsoft-Windows-TZSync/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TZSync/Analytic: Analytic
|
|
0x4000000000000000: Microsoft-Windows-TZSync/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{355C44FE-0C8E-4BF8-BE28-8BC7B5A42720} Manifest Microsoft-Windows-WPD-CompositeClassDriver
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-CompositeClassDriver/Operational: Operational
|
|
0x11: Microsoft-Windows-WPD-CompositeClassDriver/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-CompositeClassDriver/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-WPD-CompositeClassDriver/Analytic: Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{35642CF5-DA5E-410B-9D9C-A45F3638042B} Manifest Microsoft-Windows-SendTo
|
|
- channel:
|
|
0x10: Microsoft-Windows-SendTo/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SendTo/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{35AC6CE8-6104-411D-976C-877F183D2D32} Manifest Microsoft-Windows-EventLog-WMIProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-EventLog-WMIProvider/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EventLog-WMIProvider/Debug: Debug
|
|
|
|
{36008301-E154-466C-ACEC-5F4CBD6B4694} Manifest Microsoft-Windows-MMCSS
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3629DD4D-D6F1-4302-A623-0768B51501C7} Manifest Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{3635D4B6-77E3-4375-8124-D545B7149337} Manifest Microsoft-Windows-Kernel-WSService-StartServiceTrigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3663A992-84BE-40EA-BBA9-90C7ED544222} Manifest Microsoft-Windows-EFS
|
|
- channel:
|
|
0x10: Microsoft-Windows-EFS/Debug
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EFS/Debug
|
|
0x4000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{36B6F488-AAD7-48C2-AFE3-D4EC2C8B46FA} Manifest Microsoft-Windows-Performance-Recorder-Control
|
|
- channel:
|
|
0x10: Microsoft-Windows-Performance-Recorder-Control/Operational: Operational
|
|
0x11: Microsoft-Windows-Performance-Recorder-Control/Diagnostic
|
|
- keyword:
|
|
0x1000: PerfStatusVerbose: Perf Status Verbose
|
|
0x10000: PerfStatus: Perf Status
|
|
0x20000: DebugStatus: Debug Status
|
|
0x40000: Informational: Informational
|
|
0x8000000000000000: Microsoft-Windows-Performance-Recorder-Control/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-Performance-Recorder-Control/Diagnostic
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{36C23E18-0E66-11D9-BBEB-505054503030} Manifest Microsoft-Windows-Diagnostics-Networking
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnostics-Networking/Operational: Microsoft-Windows-Diagnostics-Networking/Operational
|
|
0x8: System: System
|
|
0x11: Microsoft-Windows-Diagnostics-Networking/Debug: Microsoft-Windows-Diagnostics-Networking/Debug
|
|
- keyword:
|
|
0x1: ndf:NDFCoreEvents: Core Events
|
|
0x2: ndf:NDFHelperClassEvents: Helper Class Events
|
|
0x4: ndf:Performance: Performance Events
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x400000000000: ut:Diagnostic
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Diagnostics-Networking/Operational: Microsoft-Windows-Diagnostics-Networking/Operational
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: Microsoft-Windows-Diagnostics-Networking/Debug: Microsoft-Windows-Diagnostics-Networking/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{36DA592D-E43A-4E28-AF6F-4BC57C5A11E8} Manifest Microsoft-Windows-USB-UCX
|
|
- channel:
|
|
0x10: Microsoft-Windows-USB-UCX-Analytic: This is the Analytic channel to which internal Analytic events from the UCX driver are sent.
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: USBError
|
|
0x4: IRP
|
|
0x8: Power
|
|
0x10: PnP
|
|
0x20: Performance
|
|
0x40: HeadersBusTrace
|
|
0x80: PartialDataBusTrace
|
|
0x100: FullDataBusTrace
|
|
0x200: StateMachine
|
|
0x400: Enumeration
|
|
0x800: VerifyDriver
|
|
0x1000: HWVerifyHost
|
|
0x2000: HWVerifyHub
|
|
0x4000: HWVerifyDevice
|
|
0x8000: Rundown
|
|
0x10000: Device
|
|
0x20000: Hub
|
|
0x40000: Compat
|
|
0x80000: ControllerCommand
|
|
0x8000000000000000: Microsoft-Windows-USB-UCX-Analytic: This is the Analytic channel to which internal Analytic events from the UCX driver are sent.
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{37945DC2-899B-44D1-B79C-DD4A9E57FF98} Manifest Microsoft-Windows-MPS-CLNT
|
|
- channel:
|
|
0x10: Microsoft-Windows-MPS-CLNT/Diagnostic
|
|
- keyword:
|
|
0x10000: Client
|
|
0x8000000000000000: Microsoft-Windows-MPS-CLNT/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3903D5B9-988D-4C31-9CCD-4022F96703F0} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin: Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin: Admin
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{39A63500-7D76-49CD-994F-FFD796EF5A53} Manifest Microsoft-Windows-TextPredictionEngine
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3A5BEF13-D0F7-4E7F-9EC8-5E707DF711D0} Manifest Microsoft-Windows-Mprddm
|
|
- channel:
|
|
0x10: Microsoft-Windows-Mprddm/Operational: Notification Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Mprddm/Operational: Notification Channel
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
|
|
{3A718A68-6974-4075-ABD3-E8243CAEF398} Manifest Microsoft-Windows-Push-To-Install-Service
|
|
- channel:
|
|
0x10: Microsoft-Windows-Store/Operational
|
|
- keyword:
|
|
0x1: PushToInstallService
|
|
0x2: Messages
|
|
0x8000000000000000: Microsoft-Windows-Store/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3AA52B8B-6357-4C18-A92E-B53FB177853B} Manifest Microsoft-Windows-International
|
|
- channel:
|
|
0x10: Microsoft-Windows-International/Operational: Microsoft-Windows-International/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-International/Operational: Microsoft-Windows-International/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3AD571F3-BDAE-4942-8733-4D1B85870A1E} Manifest Microsoft-Windows-IME-JPPRED
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-JPPRED/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-JPPRED/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3AE1EA61-C002-47FB-B06C-4022A8C98929} Manifest Microsoft-Windows-WebAuthN
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebAuthN/Operational
|
|
- keyword:
|
|
0x1: WebAuthN: WebAuthN
|
|
0x2: Ctap: Ctap
|
|
0x4: Cbor: Cbor
|
|
0x8: Usb: Usb
|
|
0x10: Nfc: Nfc
|
|
0x20: Test: Test
|
|
0x40: Ngc: Ngc
|
|
0x8000000000000000: Microsoft-Windows-WebAuthN/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: Success: Success
|
|
|
|
{3C088E51-65BE-40D1-9B90-62BFEC076737} Manifest Microsoft-Windows-VPN-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-VPN-Client/Operational: Microsoft-Windows-VPN-Client/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VPN-Client/Operational: Microsoft-Windows-VPN-Client/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{3C6C422B-019B-4F48-B67B-F79A3FA8B4ED} Manifest Microsoft-Windows-Security-IdentityListener
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-IdentityListener/Operational: Operation log
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-IdentityListener/Operational: Operation log
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{3CB2A168-FE19-4A4E-BDAD-DCF422F13473} Manifest Microsoft-Windows-AppID
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppID/Operational: Microsoft-Windows-AppID/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-AppID/Operational: Microsoft-Windows-AppID/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{3CB2A168-FE34-4A4E-BDAD-DCF422F34473} Manifest Microsoft-Windows-SmartScreen
|
|
- channel:
|
|
0x10: Microsoft-Windows-SmartScreen/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SmartScreen/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3CB40AAA-1145-4FB8-B27B-7E30F0454316} Manifest Microsoft-Windows-WWAN-SVC-EVENTS
|
|
- channel:
|
|
0x10: Microsoft-Windows-WWAN-SVC-Events/Diagnostic: WWAN Diagnostic Channel
|
|
0x11: Microsoft-Windows-WWAN-SVC-Events/Operational: WWAN Operational Channel
|
|
- keyword:
|
|
0x20: LwtDiagnostic
|
|
0x40: MbaeUpdater
|
|
0x100: WwanOid
|
|
0x1000: InterfaceEnum
|
|
0x2000: WwanUICC
|
|
0x4000: ContextLifeCycle
|
|
0x8000: ProfileManagement
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x4000000000: ut:Configuration
|
|
0x200000000000: ut:StateTransition
|
|
0x400000000000: HighLevelTriage
|
|
0x800000000000: WilFallbackError
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WWAN-SVC-Events/Diagnostic: WWAN Diagnostic Channel
|
|
0x4000000000000000: Microsoft-Windows-WWAN-SVC-Events/Operational: WWAN Operational Channel
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3CC2D4AF-DA5E-4ED4-BCBE-3CF995940483} Manifest Microsoft-Windows-DirectShow-KernelSupport
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-DirectShow-KernelSupport/Performance
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-DirectShow-KernelSupport/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3D42A67D-9CE8-4284-B755-2550672B0CE0} Manifest Microsoft-Windows-EapMethods-Sim
|
|
- channel:
|
|
0x10: Microsoft-Windows-EapMethods-Sim/Operational: Operational Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EapMethods-Sim/Operational: Operational Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{3DA494E4-0FE2-415C-B895-FB5265C5C83B} Manifest Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin: Admin
|
|
0x11: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational: Operational
|
|
0x12: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug: Debug
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Debug
|
|
0x4: Trace
|
|
0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational: Operational
|
|
0x2000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3E59A529-B0B3-4A11-8129-9FFE6BB46EB9} Manifest Microsoft-Windows-Fat-SQM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3EB875EB-8F4A-4800-A00B-E484C97D7551} Manifest Microsoft-Windows-Network-Connection-Broker
|
|
- channel:
|
|
0x10: Microsoft-Windows-Network-Connection-Broker
|
|
- keyword:
|
|
0x1: Aoac: Aoac
|
|
0x8000000000000000: Microsoft-Windows-Network-Connection-Broker
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3F471139-ACB7-4A01-B7A7-FF5DA4BA2D43} Manifest Microsoft-Windows-AppXDeployment-Server
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppXDeploymentServer/Diagnostic: Microsoft-Windows-AppXDeploymentServer/Diagnostic
|
|
0x11: Microsoft-Windows-AppXDeploymentServer/Operational: Microsoft-Windows-AppXDeploymentServer/Operational
|
|
0x12: Microsoft-Windows-AppXDeploymentServer/Debug: Microsoft-Windows-AppXDeploymentServer/Debug
|
|
0x13: Microsoft-Windows-AppXDeploymentServer/Restricted: Microsoft-Windows-AppXDeploymentServer/Restricted
|
|
- keyword:
|
|
0x1: APPXDEPLOYMENTSERVER_KEYWORD: AppXDeploymentServer Keyword
|
|
0x2: VISUALELEMENTS_EXTENSION_KEYWORD: VisualElements Extension Handler Keyword
|
|
0x4: OSIM_KEYWORD: OSIM Keyword
|
|
0x8: STATE_DEH_KEYWORD: State Extension Handler Keyword
|
|
0x10: AUTOPLAY_DEH_KEYWORD: AutoPlay Extension Handler Keyword
|
|
0x20: COLLECTOREXTENSION_DEH_KEYWORD: CollectorExtension Extension Handler Keyword
|
|
0x40: PACKAGED_COM_DEH_KEYWORD: PackagedCom Extension Handler Keyword
|
|
0x100: FILETYPE_DEH_KEYWORD: FileType Extension Handler Keyword
|
|
0x200: TRUST_DEH_KEYWORD: Trust Extension Handler Keyword
|
|
0x400: LICENSING_DEH_KEYWORD: Licensing Extension Handler Keyword
|
|
0x800: DATAPACKAGEHOST_DEH_KEYWORD: Data Package Host Extension Handler Keyword
|
|
0x1000: CERTIFICATES_DEH_KEYWORD: Certificates Extension Handler Keyword
|
|
0x2000: APPX_BASE_DEH_KEYWORD: AppX Base Extension Handler Keyword
|
|
0x4000: PROTOCOL_DEH_KEYWORD: Protocol Extension Handler Keyword
|
|
0x8000: MOCOM_HELPER_KEYWORD: MoCOM Extension Handler Keyword
|
|
0x10000: RUNTIME_DEH_KEYWORD: Runtime Extension Handler Keyword
|
|
0x20000: BACKGROUND_TASKS_DEH_KEYWORD: BackgroundTasks Extension Handler Keyword
|
|
0x40000: DOWNLOAD_DEH_KEYWORD: Download Extension Handler Keyword
|
|
0x80000: APPXDEPLOYMENTSERVER_PERF_KEYWORD: AppXDeploymentServerPerf Keyword
|
|
0x100000: MRT_DEH_KEYWORD: Mrt Extension Handler Keyword
|
|
0x200000: DSM_DEH_KEYWORD: DSM Extension Handler Keyword
|
|
0x400000: APPMODEL_RUNTIME_DMR_KEYWORD: Package Runtime Information Keyword
|
|
0x800000: RESTRICTED_LAUNCH_DEH_KEYWORD: RestrictedLaunch Extension Handler Keyword
|
|
0x1000000: DEVICEACCESS_DEH_KEYWORD: DeviceAccess Extension Handler Keyword
|
|
0x2000000: INDEXEDDB_DEH_KEYWORD: IndexedDB Extension Handler Keyword
|
|
0x4000000: MSAC_SIGNOUT_DEH_KEYWORD: MSAC SignOut Extension Handler Keyword
|
|
0x8000000: SEARCHINDEXER_EXTENSION_KEYWORD: SearchIndexer Extension Handler Keyword
|
|
0x10000000: APPSYNC_DEH_KEYWORD: AppSync Extension Handler Keyword
|
|
0x20000000: APPLYDATA_DEH_KEYWORD: Apply Data Extension Handler Keyword
|
|
0x40000000: ALARM_DEH_KEYWORD: Alarm Extension Handler Keyword
|
|
0x80000000: GEOLOCATION_DEH_KEYWORD: Geolocation Extension Handler Keyword
|
|
0x100000000: PREINSTALLED_CONFIG_TASK_DEH_KEYWORD: PreInstalledConfigTask Extension Handler Keyword
|
|
0x200000000: UPDATE_MIGRATION_TASK_DEH_KEYWORD: UpdateMigrationTask Extension Handler Keyword
|
|
0x400000000: WEB_ACCOUNT_PROVIDER_DEH_KEYWORD: WebAccountProvider Extension Handler Keyword
|
|
0x800000000: APPSERVICE_DEH_KEYWORD: AppService Extension Handler Keyword
|
|
0x1000000000: USERDATAACCESS_EXTENSION_KEYWORD: UserDataAccess Extension Handler Keyword
|
|
0x2000000000: DIALPROTOCOL_DEH_KEYWORD: DialProtocol Extension Handler Keyword
|
|
0x4000000000: AOWAPP_DEH_KEYWORD: AoW App Extension Handler Keyword
|
|
0x8000000000: COMMUNICATION_BLOCKING_APP_DEH_KEYWORD: CommunicationBlockingAppProvider Extension Handler Keyword
|
|
0x10000000000: PHONECALLORIGIN_DEH_KEYWORD: PhoneCallOriginProvider Extension Handler Keyword
|
|
0x20000000000: WMIPROVIDER_EXTENSION_KEYWORD: WmiProvider Extension Handler Keyword
|
|
0x40000000000: LXP_DEH_KEYWORD: Local Experience Pack Extension Handler Keyword
|
|
0x80000000000: SERVER_EXTENSION_KEYWORD: Server Common Extension Handler Keyword
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-AppXDeploymentServer/Diagnostic: Microsoft-Windows-AppXDeploymentServer/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-AppXDeploymentServer/Operational: Microsoft-Windows-AppXDeploymentServer/Operational
|
|
0x2000000000000000: Microsoft-Windows-AppXDeploymentServer/Debug: Microsoft-Windows-AppXDeploymentServer/Debug
|
|
0x1000000000000000: Microsoft-Windows-AppXDeploymentServer/Restricted: Microsoft-Windows-AppXDeploymentServer/Restricted
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{3F51786B-B787-4B2F-84FC-272B76348F6D} Manifest EsifUmdf2EtwProvider
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: DPTF
|
|
0x4: Shell
|
|
0x8: UF
|
|
0x10: Action
|
|
0x20: App
|
|
0x40: Conjure
|
|
0x80: Domain
|
|
0x100: DSP
|
|
0x200: Event
|
|
0x400: IPC
|
|
0x800: Participant
|
|
0x1000: Primitive
|
|
0x2000: Service
|
|
0x4000: Datavault
|
|
0x8000: Webserver
|
|
0x10000: Windows
|
|
0x20000: ACT
|
|
0x40000: UMDF
|
|
0x80000: ThermalAPI
|
|
0x100000: Linux
|
|
0x200000: Logging
|
|
0x400000: ApiTrace
|
|
0x800000: Power
|
|
0x1000000: Pnp
|
|
0x2000000: TableObject
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{3F7B2F99-B863-4045-AD05-F6AFB62E7AF1} Manifest Microsoft-Windows-TerminalServices-MediaRedirection
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-MediaRedirection/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-MediaRedirection/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{3F9E07BD-0E26-4241-A5A5-28CAFA150A75} Manifest Microsoft-Windows-WMPDMCUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-WMPDMCUI/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WMPDMCUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482} Manifest Microsoft-Windows-Ntfs
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Ntfs/Operational
|
|
0x11: Microsoft-Windows-Ntfs/WHC
|
|
0x12: Microsoft-Windows-Ntfs/Performance
|
|
- keyword:
|
|
0x1: GlobalCorruptionActionStateChange
|
|
0x2: VolumeCorruptionActionStateChange
|
|
0x4: SdsCompaction
|
|
0x8: LogFlushFailed
|
|
0x10: Rundown
|
|
0x20: VolumeMountDismount
|
|
0x40: TPMapBitNotSet
|
|
0x100: LogFileFull
|
|
0x200: Checkpoint
|
|
0x400: CleanCheckpoint
|
|
0x800: PeriodicCheckpoint
|
|
0x1000: MftRecordRead
|
|
0x2000: MftRecordWrite
|
|
0x10000: WorkItem
|
|
0x100000: DirectoryStream
|
|
0x200000: Statistics: Statistics
|
|
0x400000: FileMetadataOptimization
|
|
0x800000: EfsTest
|
|
0x1000000: BadClusterHotFix: BadClusterHotFix
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Ntfs/Operational
|
|
0x2000000000000000: Microsoft-Windows-Ntfs/WHC
|
|
0x1000000000000000: Microsoft-Windows-Ntfs/Performance
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4025D192-273D-42EC-BDF8-940EC34EEDCA} Manifest Microsoft-Windows-MCCS-AccountAccessor
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
0x80000000000: SyncSelfHost: SyncSelfHost
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{40783728-8921-45D0-B231-919037B4B4FD} Manifest Microsoft-Windows-Security-UserConsentVerifier
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-UserConsentVerifier/Audit: Microsoft-Windows-Security-UserConsentVerifier/Audit
|
|
- keyword:
|
|
0x1: UCV: User Consent Verification
|
|
0x2: Biometrics: Biometrics
|
|
0x4: Fingerprint: Fingerprint
|
|
0x10000000000000: win:AuditFailure: Audit Failure
|
|
0x20000000000000: win:AuditSuccess: Audit Success
|
|
0x8000000000000000: Microsoft-Windows-Security-UserConsentVerifier/Audit: Microsoft-Windows-Security-UserConsentVerifier/Audit
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{40AB57C2-1C53-4DF9-9324-FF7CF898A02C} Manifest Microsoft-Windows-Diagnosis-Scheduled
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-Scheduled/Operational: Microsoft-Windows-Diagnosis-Scheduled/Operational
|
|
- keyword:
|
|
0x400000000: notification: WHC Notification Keyword
|
|
0x800000000: lifecycle: Lifecycle Keyword
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-Scheduled/Operational: Microsoft-Windows-Diagnosis-Scheduled/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x4: win:Informational: Information
|
|
|
|
{40AE003C-6F3D-4590-AE1C-0E8BE526B50F} Manifest Microsoft-Windows-PeerToPeerDrtEventProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-PeerToPeerDrtEventProvider/Diagnostic: Microsoft-Windows-PeerToPeerDrtEventProvider/DiagnosticChannel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PeerToPeerDrtEventProvider/Diagnostic: Microsoft-Windows-PeerToPeerDrtEventProvider/DiagnosticChannel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{412BDFF2-A8C4-470D-8F33-63FE0D8C20E2} Manifest Microsoft-Windows-Partition
|
|
- channel:
|
|
0x10: Microsoft-Windows-Partition/Diagnostic
|
|
0x11: Microsoft-Windows-Partition/Analytic
|
|
- keyword:
|
|
0x1: power
|
|
0x8000000000000000: Microsoft-Windows-Partition/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-Partition/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4154A29C-40D9-445F-8D65-24DA473E8F65} Manifest Microsoft-Windows-UxInit
|
|
- channel:
|
|
0x10: Microsoft-Windows-UxInit/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-UxInit/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4180C4F7-E238-5519-338F-EC214F0B49AA} Manifest Microsoft.Windows.ResourceManager
|
|
|
|
{41862974-DA3B-4F0B-97D5-BB29FBB9B71E} Manifest Microsoft-OneCore-OnlineSetup
|
|
- channel:
|
|
0x10: Microsoft-OneCore-Setup/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x2: keyDiagnostic: Diagnostic
|
|
0x8000000000000000: Microsoft-OneCore-Setup/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{41877CB4-11FC-4188-B590-712C143C881D} Manifest Microsoft-Windows-Runtime-Web-Http
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-Web-Http/Tracing
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Runtime-Web-Http/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{4214DCD2-7C33-4F74-9898-719CCCEEC20F} Manifest Microsoft-Windows-TunnelDriver-SQM-Provider
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{422088E6-CD0C-4F99-BD0B-6985FA290BDF} Manifest Microsoft-Windows-UxTheme
|
|
- channel:
|
|
0x10: Microsoft-Windows-UxTheme/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-UxTheme/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{42D5F8CB-0D2B-4522-8059-C35A37C94A77} Manifest Microsoft-Windows-PortableWorkspaces-Creator-Tool
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
|
|
{435F8E4B-8CC4-430E-9796-28CAE4976576} Manifest Microsoft-Windows-StorageManagement-WSP-FS
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageManagement/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageManagement/Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{43D1A55C-76D6-4F7E-995C-64C711E5CAFE} Manifest Microsoft-Windows-WinINet
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinINet/Analytic
|
|
0x11: Microsoft-Windows-WinINet/UsageLog
|
|
0x12: Microsoft-Windows-WinINet/WebSocket
|
|
- keyword:
|
|
0x1: WININET_KEYWORD_HANDLES: Flagged on all WinINet events dealing with creation or destruction of INTERNET handles
|
|
0x2: WININET_KEYWORD_HTTP: Flagged on all WinINet events dealing with processing of HTTP requests and responses
|
|
0x4: WININET_KEYWORD_CONNECTION: Flagged on all WinINet events dealing with network operations (TCP, DNS)
|
|
0x8: WININET_KEYWORD_AUTH: Flagged on all WinINet events dealing with authentication
|
|
0x10: WININET_KEYWORD_HTTPS: Flagged on all WinINet events dealing with HTTPS
|
|
0x20: WININET_KEYWORD_AUTOPROXY: Flagged on all WinINet events dealing with AUTOPROXY
|
|
0x40: WININET_KEYWORD_COOKIES: Flagged on all WinINet events dealing with Cookies
|
|
0x80: WININET_KEYWORD_IE: Flagged on all WinINet IE events
|
|
0x100: WININET_KEYWORD_AOAC
|
|
0x100000000: WININET_KEYWORD_SEND: Flagged on all WinINet events dealing with sending packet capture
|
|
0x200000000: WININET_KEYWORD_RECEIVE: Flagged on all WinINet events dealing with receiving packet capture
|
|
0x400000000: WININET_KEYWORD_MOBILE: Flagged on all WinINet events relevant only to Mobile SKUs
|
|
0x20000000000: WININET_KEYWORD_PII_PRESENT: Flagged on all WinINet events dealing with potential personally identifiable information
|
|
0x40000000000: WININET_KEYWORD_PACKET: Flagged on all WinINet events dealing with packet capture
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WinINet/Analytic
|
|
0x4000000000000000: Microsoft-Windows-WinINet/UsageLog
|
|
0x2000000000000000: Microsoft-Windows-WinINet/WebSocket
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{43DAD447-735F-4829-A6FF-9829A87419FF} Manifest Microsoft-Windows-Crypto-DSSEnh
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-DSSEnh/Analytic: Microsoft-Windows-Crypto-DSSEnh/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Crypto-DSSEnh/Analytic: Microsoft-Windows-Crypto-DSSEnh/Analytic
|
|
|
|
{43E63DA5-41D1-4FBF-ADED-1BBED98FDD1D} Manifest Microsoft-Windows-Subsys-SMSS
|
|
- channel:
|
|
0x10: Microsoft-Windows-Subsys-SMSS/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x10000: smss:Diagnostics
|
|
0x8000000000000000: Microsoft-Windows-Subsys-SMSS/Operational
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{442C11C5-304B-45A4-AE73-DC2194C4E876} Manifest Microsoft-Windows-Compat-Appraiser
|
|
|
|
{45EEC9E5-4A1B-5446-7AD8-A4AB1313C437} Manifest Microsoft-Windows-Security-LessPrivilegedAppContainer
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational: Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{46098845-8A94-442D-9095-366A6BCFEFA9} Manifest Microsoft-Windows-WLGPA
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4637124C-1D40-4B4D-892F-2AAECF24FF06} Manifest Microsoft-Windows-WinJson
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Debug
|
|
0x4: Trace
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{46C78E5C-A213-46A8-8A6B-622F6916201D} Manifest Microsoft-Windows-OverlayFilter
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{478EA8A8-00BE-4BA6-8E75-8B9DC7DB9F78} Manifest Microsoft-Windows-ESE
|
|
- channel:
|
|
0x10: Microsoft-Windows-ESE/Operational
|
|
0x11: Microsoft-Windows-ESE/IODiagnose
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Trace: Trace
|
|
0x8: Transaction: Transaction
|
|
0x10: Space: Space
|
|
0x20: BF: BF
|
|
0x40: IO: IO
|
|
0x80: LOG: LOG
|
|
0x100: Task: Task
|
|
0x200: Test: Test
|
|
0x400: BFRESMGR: BFRESMGR
|
|
0x800: StationId: StationId
|
|
0x1000: JETTraceTag: JETTraceTag
|
|
0x2000: StallLatencies: StallLatencies
|
|
0x4000: DataWorkingSet: DataWorkbccingSet
|
|
0x8000: IOEX: IOEX
|
|
0x100000000: CompressExp: CompressExp
|
|
0x8000000000000000: Microsoft-Windows-ESE/Operational
|
|
0x4000000000000000: Microsoft-Windows-ESE/IODiagnose
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{47BC9477-A8BA-452E-B951-4F2ED3593CF9} Manifest Microsoft-Windows-Serial-ClassExtension
|
|
- channel:
|
|
0x10: Microsoft-Windows-Serial-ClassExtension/Analytic: Analytic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Serial-ClassExtension/Analytic: Analytic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{47BFA2B7-BD54-4FAC-B70B-29021084CA8F} Manifest Application Popup
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{486A5C7C-11CC-46C5-9DE7-43DFE0BB57C1} Manifest Microsoft-Windows-DriverFrameworks-KernelMode-Performance
|
|
|
|
{48D445A8-2F64-4D49-B093-A5774D8DC531} Manifest Microsoft-Windows-SrumTelemetry
|
|
- channel:
|
|
0x10: Microsoft-Windows-SrumTelemetry
|
|
- keyword:
|
|
0x1000: E3Rundown1day
|
|
0x2000: E3Rundown3day
|
|
0x4000: E3Rundown7day
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-SrumTelemetry
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{494E7A3D-8DB9-4EC4-B43E-2844AF6E38D6} Manifest Microsoft-Windows-exFAT-SQM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{49C2C27C-FE2D-40BF-8C4E-C3FB518037E7} Manifest Microsoft-Windows-Search-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-Search-Core/Diagnostic
|
|
- keyword:
|
|
0x1: Performance: Flag for events used for performance measurements
|
|
0x2: GroupPolicy: Group Policy events, GP extension
|
|
0x4: Indexing: Indexing-related high level events
|
|
0x8: IndexingItem: Events reported per each item indexed
|
|
0x10: IndexingChunk: Events reported per each chunk
|
|
0x20: Querying: Query-related events
|
|
0x40: ReservedKeyword1
|
|
0x80: ReservedKeyword2
|
|
0x100: Common: Events in common functionality, such as data structures
|
|
0x200: Service: Search service high-level status change events, startup, shutdown and setup
|
|
0x400: Gatherer: Gathering manager, transaction queues, crawler, pusher
|
|
0x2000: CPL: Control Panel applet
|
|
0x4000: ProtocolHost: Events related to Protocol Host
|
|
0x8000: FilterHost: Events related to Filter Host
|
|
0x10000: Wordbreakers: Wordbreaker activity
|
|
0x20000: CSM: Crawl Scope Manager
|
|
0x40000: PropStorePI: Property Store plug-in
|
|
0x80000: PTypePI: Perceived Type plug-in
|
|
0x100000: IndexPI: Indexing plug-in
|
|
0x200000: USN: USN notifications
|
|
0x400000: Backoff: Backoff controller
|
|
0x800000: ReservedKeyword5
|
|
0x1000000: ReservedKeyword6
|
|
0x2000000: ReservedKeyword7
|
|
0x4000000: ReservedKeyword8
|
|
0x8000000: ReservedKeyword9
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Search-Core/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{49D6AD7B-52C4-4F79-A164-4DCD908391E4} Manifest NisDrvWFP Provider
|
|
|
|
{4A104570-EC6D-4560-A40F-858FA955E84F} Manifest Microsoft-Windows-Storage-Tiering
|
|
- channel:
|
|
0x10: Microsoft-Windows-Storage-Tiering/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Storage-Tiering/Admin
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4A155F10-25AD-47E6-ABA8-2C4F5EEE7846} Manifest Microsoft-Windows-MCCS-ActiveSyncProvider
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x1000000000: CommsService: CommsService
|
|
0x2000000000: PeopleSync: PeopleSync
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
0x80000000000: SyncSelfHost: SyncSelfHost
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4A933674-FB3D-4E8D-B01D-17EE14E91A3E} Manifest Microsoft-Windows-BranchCacheSMB
|
|
- channel:
|
|
0x10: Microsoft-Windows-BranchCacheSMB/Operational: Microsoft-Windows-BranchCacheSMB/Operational
|
|
0x11: Microsoft-Windows-BranchCacheSMB/Analytic: Microsoft-Windows-BranchCacheSMB/Analytic
|
|
- keyword:
|
|
0x800: CscEvtKeywd_SMBBranchCache: SMB BranchCache
|
|
0x8000000000000000: Microsoft-Windows-BranchCacheSMB/Operational: Microsoft-Windows-BranchCacheSMB/Operational
|
|
0x4000000000000000: Microsoft-Windows-BranchCacheSMB/Analytic: Microsoft-Windows-BranchCacheSMB/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4AF188AC-E9C4-4C11-B07B-1FABC07DFEB2} Manifest Microsoft-Windows-Bluetooth-BthLEPrepairing
|
|
- channel:
|
|
0x10: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational: Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4B7EAC67-FC53-448C-A49D-7CC6DB524DA7} Manifest Microsoft-Windows-MediaFoundation-MFReadWrite
|
|
- channel:
|
|
0x10: Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader
|
|
0x11: Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter
|
|
0x12: Microsoft-Windows-MediaFoundation-MFReadWrite/Transform
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader
|
|
0x4000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter
|
|
0x2000000000000000: Microsoft-Windows-MediaFoundation-MFReadWrite/Transform
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{4BD2826E-54A1-4BA9-BF63-92B73EA1AC4A} Manifest Microsoft-Windows-Diagnostics-LoggingChannel
|
|
- keyword:
|
|
0x1: K_LogMsg
|
|
0x2: K_LogPair
|
|
0x4: K_ActivityLogging
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{4CB314DF-C11F-47D7-9C04-65FB0051561B} Manifest Microsoft-Windows-Program-Compatibility-Assistant
|
|
- channel:
|
|
0x10: Microsoft-Windows-Program-Compatibility-Assistant/Analytic: Analytic
|
|
0x11: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant
|
|
0x12: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
|
|
0x13: Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade: Analytic
|
|
- keyword:
|
|
0x100: WDI
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-Program-Compatibility-Assistant/Analytic: Analytic
|
|
0x4000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant
|
|
0x2000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
|
|
0x1000000000000000: Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade: Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{4CEC9C95-A65F-4591-B5C4-30100E51D870} Manifest Microsoft-Windows-Kernel-Tm
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{4D13548F-C7B8-4174-BB7A-D7F64BF22D29} Manifest Microsoft-WindowsPhone-LocationServiceProvider
|
|
- channel:
|
|
0x10: Microsoft-WindowsPhone-LocationServiceProvider/Debug: Debug
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Selfhost: Selfhost
|
|
0x8: WiFiTracing: WiFiTracing
|
|
0x10: Init: Init
|
|
0x20: Position: Position
|
|
0x40: FixSession: FixSession
|
|
0x80: CompositePe: CompositePe
|
|
0x100: Gnss: Gnss
|
|
0x200: CellPe: CellPe
|
|
0x400: WifiPe: WifiPe
|
|
0x800: ClientApi: ClientApi
|
|
0x1000: Orion: Orion
|
|
0x2000: Supl: Supl
|
|
0x4000: Crowdsource: Crowdsource
|
|
0x8000: ManagedApi: ManagedApi
|
|
0x10000: GeofenceTracking: GeofenceTracing
|
|
0x20000: GeofenceStore: GeofenceStore
|
|
0x8000000: WebproxyTracing: WebproxyTracing
|
|
0x20000000: CellPeAdvanceTracing : CellPeAdvanceTracing
|
|
0x40000000: SpeedEstimatorTracing: SpeedEstimatorTracing
|
|
0x80000000: VenuePE: VenuePE
|
|
0x8000000000000000: Microsoft-WindowsPhone-LocationServiceProvider/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{4D20DF22-E177-4514-A369-F1759FEEDEB3} Manifest Microsoft-Windows-VIRTDISK
|
|
- channel:
|
|
0x10: Microsoft-Windows-VIRTDISK-Analytic: Microsoft-Windows-VIRTDISK-Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VIRTDISK-Analytic: Microsoft-Windows-VIRTDISK-Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4DD778B8-379C-4D8C-B659-517A43D6DF7D} Manifest Microsoft-Windows-TSF-UIManager
|
|
- channel:
|
|
0x10: UIManager_Channel
|
|
- keyword:
|
|
0x10000: TSF_UIManager
|
|
0x8000000000000000: UIManager_Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4DE9BC9C-B27A-43C9-8994-0915F1A5E24F} Manifest Microsoft-Windows-AAD
|
|
- channel:
|
|
0x10: Microsoft-Windows-AAD/Analytic: Microsoft-Windows-AAD/Analytic
|
|
0x11: Microsoft-Windows-AAD/Operational: Microsoft-Windows-AAD/Operational
|
|
- keyword:
|
|
0x1: Telemetry: Telemetry trigger events
|
|
0x2: Error: Error
|
|
0x4: Analytic: Analytic
|
|
0x8: Function: Function
|
|
0x10: Operational: Operational
|
|
0x20: Warning: Warning
|
|
0x40: Critical: Critical
|
|
0x100: AadCloudAPPlugin: AadCloudAPPlugin
|
|
0x200: AadCredProv: aadcredprov
|
|
0x8000000000000000: Microsoft-Windows-AAD/Analytic: Microsoft-Windows-AAD/Analytic
|
|
0x4000000000000000: Microsoft-Windows-AAD/Operational: Microsoft-Windows-AAD/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4EACB4D0-263B-4B93-8CD6-778A278E5642} Manifest Microsoft-Windows-GenericRoaming
|
|
- channel:
|
|
0x10: Microsoft-Windows-GenericRoaming/Admin: Microsoft-Windows-GenericRoaming/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-GenericRoaming/Admin: Microsoft-Windows-GenericRoaming/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{4EDBE902-9ED3-4CF0-93E8-B8B5FA920299} Manifest Microsoft-Windows-TunnelDriver
|
|
- channel:
|
|
0x10: Microsoft-Windows-TunnelDriver: Tunnel Driver Etw Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TunnelDriver: Tunnel Driver Etw Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4EE76BD8-3CF4-44A0-A0AC-3937643E37A3} Manifest Microsoft-Windows-CodeIntegrity
|
|
- channel:
|
|
0x10: Microsoft-Windows-CodeIntegrity/Operational: Microsoft-Windows-CodeIntegrity/Operational
|
|
0x11: Microsoft-Windows-CodeIntegrity/Verbose: Microsoft-Windows-CodeIntegrity/Verbose
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CodeIntegrity/Operational: Microsoft-Windows-CodeIntegrity/Operational
|
|
0x4000000000000000: Microsoft-Windows-CodeIntegrity/Verbose: Microsoft-Windows-CodeIntegrity/Verbose
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{4F768BE8-9C69-4BBC-87FC-95291D3F9D0C} Manifest Microsoft-Windows-osk
|
|
- channel:
|
|
0x10: Microsoft-Windows-osk/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-osk/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{4FBA1227-F606-4E5F-B9E8-FAB9AB5740F3} Manifest Microsoft-Windows-TSF-msctf
|
|
- channel:
|
|
0x10: Microsoft-Windows-TSF-msctf/Diagnostic
|
|
0x11: Microsoft-Windows-TSF-msctf/Debug
|
|
- keyword:
|
|
0x10000: Status
|
|
0x20000: Perf
|
|
0x40000: CUAS
|
|
0x80000: CiceroHook
|
|
0x100000: Focus
|
|
0x200000: ALPC
|
|
0x400000: Editing
|
|
0x800000: TSFAPI
|
|
0x1000000: TSFEvent
|
|
0x2000000: OOPIME
|
|
0x8000000000000000: Microsoft-Windows-TSF-msctf/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-TSF-msctf/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{4FCBF664-A33A-4652-B436-9D558983D955} Manifest Microsoft-Windows-Smartcard-Server
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{50B3E73C-9370-461D-BB9F-26F32D68887D} Manifest Microsoft-Windows-WebIO
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebIO/Diagnostic
|
|
0x11: Microsoft-Windows-WebIO-NDF/Diagnostic
|
|
- keyword:
|
|
0x1: Keyword.API: API
|
|
0x100000000: Keyword.SEND: SEND
|
|
0x200000000: Keyword.RECEIVE: RECEIVE
|
|
0x400000000: Keyword.L3_CONNECT: L3_CONNECT
|
|
0x1000000000: Keyword.CLOSE: CLOSE
|
|
0x2000000000: Keyword.SECURITY: SECURITY
|
|
0x4000000000: Keyword.CONFIGURATION: CONFIGURATION
|
|
0x8000000000: Keyword.GLOBAL: GLOBAL
|
|
0x10000000000: Keyword.DROPPED: DROPPED
|
|
0x20000000000: Keyword.PII_PRESENT: PII_PRESENT
|
|
0x40000000000: Keyword.PACKET: PACKET
|
|
0x80000000000: Keyword.ADDRESS: ADDRESS
|
|
0x100000000000: Keyword.CONTEXT_EVENT: CONTEXT_EVENT
|
|
0x200000000000: Keyword.STATE_TRANSITION: STATE_TRANSITION
|
|
0x8000000000000000: Microsoft-Windows-WebIO/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-WebIO-NDF/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{50B9E206-9D55-4092-92E8-F157A8235799} Manifest Microsoft-Windows-SmbWmiProvider
|
|
- channel:
|
|
0x10: SmbWmiAnalytic
|
|
- keyword:
|
|
0x8000000000000000: SmbWmiAnalytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{50BD1BFD-936B-4DB3-86BE-E25B96C25898} Manifest Microsoft-Windows-MPS-DRV
|
|
- channel:
|
|
0x10: Microsoft-Windows-MPS-DRV/Diagnostic
|
|
- keyword:
|
|
0x20000: Driver
|
|
0x8000000000000000: Microsoft-Windows-MPS-DRV/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{50DF9E12-A8C4-4939-B281-47E1325BA63E} Manifest Microsoft-Windows-DSC
|
|
|
|
{50F99B2D-96D2-421F-BE4C-222C4140DA9F} Manifest Microsoft-Windows-EDP-Audit-Regular
|
|
- channel:
|
|
0x10: Microsoft-Windows-EDP-Audit-Regular/Admin: Microsoft Windows Information Protection Audit Regular Channel
|
|
- keyword:
|
|
0x10: EDP-Audit-Keyword-DataCopied: Windows Information Protection Audit Data Copied Keyword
|
|
0x20: EDP-Audit-Keyword-ApplicationGenerated: Windows Information Protection Audit Application Generated Keyword
|
|
0x8000000000000000: Microsoft-Windows-EDP-Audit-Regular/Admin: Microsoft Windows Information Protection Audit Regular Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{51311DE3-D55E-454A-9C58-43DC7B4C01D2} Manifest Microsoft-Windows-MSMPEG2ADEC
|
|
- channel:
|
|
0x10: WINDOWS_MSMPEG2ADEC_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_MSMPEG2ADEC_CHANNEL
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{51AEDB05-890B-4ADE-8BA1-0BA14B8E8973} Manifest Microsoft-Windows-ELS-Hyphenation
|
|
- channel:
|
|
0x10: Els_Hyphenation/Analytic: Microsoft Windows ELS Hyphenation Analytic Channel
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Els_Hyphenation/Analytic: Microsoft Windows ELS Hyphenation Analytic Channel
|
|
0x4000000000000000: Application: Application
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{52F82079-1974-4C67-81DA-807B892778BB} Manifest Microsoft-Windows-IE-SmartScreen
|
|
- channel:
|
|
0x10: Microsoft-Windows-IE-SmartScreen
|
|
- keyword:
|
|
0x1: functionality
|
|
0x2: info
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IE-SmartScreen
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{52FC89F8-995E-434C-A91E-199986449890} Manifest Microsoft-Windows-Hyper-V-Hypervisor
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Hyper-V-Hypervisor-Admin
|
|
0x11: Microsoft-Windows-Hyper-V-Hypervisor-Operational
|
|
0x12: Microsoft-Windows-Hyper-V-Hypervisor-Analytic
|
|
- keyword:
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Admin
|
|
0x2000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Operational
|
|
0x1000000000000000: Microsoft-Windows-Hyper-V-Hypervisor-Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{530FB9B9-C515-4472-9313-FB346F9255E3} Manifest Microsoft-Windows-SetupPlatform
|
|
- channel:
|
|
0x10: Microsoft-Windows-SetupPlatform/Analytic
|
|
0x11: Setup
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-SetupPlatform/Analytic
|
|
0x4000000000000000: Setup
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{531A35AB-63CE-4BCF-AA98-F88C7A89E455} Manifest Microsoft-Windows-XAML
|
|
- channel:
|
|
0x10: Microsoft-Windows-XAML/Default
|
|
- keyword:
|
|
0x1: Detailed
|
|
0x2: Temporary
|
|
0x4: Core
|
|
0x8: Managed
|
|
0x10: Parser
|
|
0x20: Text
|
|
0x40: Layout
|
|
0x80: Controls
|
|
0x100: Appmodel
|
|
0x200: Databinding
|
|
0x400: Templates
|
|
0x800: Media
|
|
0x1000: Rendering
|
|
0x2000: Animation
|
|
0x4000: CachedComposition
|
|
0x8000: Input
|
|
0x10000: DComp
|
|
0x20000: Images
|
|
0x40000: Stackwalk
|
|
0x80000: ApiCall
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-XAML/Default
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: Diagnostic: Diagnostic
|
|
0x64: Debugging: Debugging
|
|
|
|
{5322D61A-9EFA-4BC3-A3F9-14BE95C144F8} Manifest Microsoft-Windows-Kernel-Prefetch
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Prefetch/Diagnostic
|
|
- keyword:
|
|
0x20: BasicInformation
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Prefetch/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{538CBBAD-4877-4EB2-B26E-7CAEE8F0F8CB} Manifest Microsoft-Windows-FunctionDiscoveryHost
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x40: core: Event originating from the fdphost service
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{5402E5EA-1BDD-4390-82BE-E108F1E634F5} Manifest Microsoft-Windows-WinINet-Config
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinINet-Config/ProxyConfigChanged
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WinINet-Config/ProxyConfigChanged
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5412704E-B2E1-4624-8FFD-55777B8F7373} Manifest Microsoft-Windows-Kernel-Pep
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Pep/Diagnostic
|
|
- keyword:
|
|
0x1: popep:Power
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Pep/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{54164045-7C50-4905-963F-E5BC1EEF0CCA} Manifest Microsoft-Windows-CertificateServicesClient-CertEnroll
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{5444519F-2484-45A2-991E-953E4B54C8E0} Manifest Microsoft-Windows-MPS-SRV
|
|
- channel:
|
|
0x10: Microsoft-Windows-MPS-SRV/Diagnostic
|
|
- keyword:
|
|
0x10000: Service
|
|
0x8000000000000000: Microsoft-Windows-MPS-SRV/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{546549BE-9D63-46AA-9154-4F6EB9526378} Manifest Microsoft-Windows-Firewall-CPL
|
|
- channel:
|
|
0x10: Microsoft-Windows-Firewall-CPL/Diagnostic
|
|
- keyword:
|
|
0x10000: FirewallCpl
|
|
0x8000000000000000: Microsoft-Windows-Firewall-CPL/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{54732EE5-61CA-4727-9DA1-10BE5A4F773D} Manifest Microsoft-Windows-BfeTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_FirewallPortOpenEvent
|
|
0x2: Keyword_FirewallPortCloseEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{54849625-5478-4994-A5BA-3E3B0328C30D} Manifest Microsoft-Windows-Security-Auditing
|
|
- channel:
|
|
0xa: Security: Security
|
|
- keyword:
|
|
0x8000000000000000: Security: Security
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{548C4417-CE45-41FF-99DD-528F01CE0FE1} Manifest Microsoft-Windows-KernelStreaming
|
|
- channel:
|
|
0x10: WINDOWS_KS_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_KS_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{54CB22FF-26B4-4393-A8C2-6B0715912C5F} Manifest Microsoft-Windows-EQoS
|
|
- channel:
|
|
0x10: Microsoft-Windows-Policy/Operational: Microsoft-Windows-Policy-based QoS/Operational
|
|
0x11: Microsoft-Windows-Policy/Analytic: Microsoft-Windows-Policy-based QoS/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Policy/Operational: Microsoft-Windows-Policy-based QoS/Operational
|
|
0x4000000000000000: Microsoft-Windows-Policy/Analytic: Microsoft-Windows-Policy-based QoS/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{54D5AC20-E14F-4FDA-92DA-EBF7556FF176} Manifest Microsoft-Windows-Crypto-RNG
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-RNG/Analytic: Microsoft-Windows-Crypto-RNG/Analytic
|
|
- keyword:
|
|
0x1: KEYWORD_SYSTEMRNG_ENTROPY_REGISTRATION: Source registration
|
|
0x2: KEYWORD_SYSTEMRNG_ENTROPY_DATA: Entropy data flow
|
|
0x4: KEYWORD_SYSTEMRNG_PRNG: PRNG
|
|
0x8000000000000000: Microsoft-Windows-Crypto-RNG/Analytic: Microsoft-Windows-Crypto-RNG/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{54FFD262-99FE-4576-96E7-1ADB500370DC} Manifest Microsoft-Windows-Wordpad
|
|
- channel:
|
|
0x10: Microsoft-Windows-Wordpad/Diagnostic
|
|
0x11: Microsoft-Windows-Wordpad/Debug
|
|
0x12: Microsoft-Windows-Wordpad/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Wordpad/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-Wordpad/Debug
|
|
0x2000000000000000: Microsoft-Windows-Wordpad/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{55404E71-4DB9-4DEB-A5F5-8F86E46DDE56} Manifest Microsoft-Windows-Winsock-NameResolution
|
|
- channel:
|
|
0x10: Microsoft-Windows-Winsock-NameResolution/Operational: Microsoft-Windows-Winsock NameResolution Event/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Winsock-NameResolution/Operational: Microsoft-Windows-Winsock NameResolution Event/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{555908D1-A6D7-4695-8E1E-26931D2012F4} Manifest Service Control Manager
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
|
|
{55AB77F6-FA04-43EF-AF45-688FBF500482} Manifest Microsoft-Windows-GPIO-ClassExtension
|
|
- channel:
|
|
0x10: Microsoft-Windows-GPIO-ClassExtension/Analytic: Analytic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-GPIO-ClassExtension/Analytic: Analytic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{55B24B1D-DD9C-44C0-BA77-4F749F1B6976} Manifest Microsoft-Windows-Minstore
|
|
- channel:
|
|
0x10: Microsoft-Windows-Minstore/Analytic: Minstore Analytic Channel
|
|
0x11: Microsoft-Windows-Minstore/Debug: Minstore Debug Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Minstore/Analytic: Minstore Analytic Channel
|
|
0x4000000000000000: Microsoft-Windows-Minstore/Debug: Minstore Debug Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{55BACC9F-9AC0-46F5-968A-A5A5DD024F8A} Manifest Microsoft-Windows-wmvdecod
|
|
- channel:
|
|
0x10: WINDOWS_wmvdecod_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_wmvdecod_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{56C71C31-CFBD-4CDD-8559-505E042BBBE1} Manifest Microsoft-Windows-DeviceAssociationService
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceAssociationService/Performance
|
|
- keyword:
|
|
0x1: PerfTrackContext
|
|
0x2: DeviceAssociationService
|
|
0x4: query
|
|
0x8: association
|
|
0x100: DeviceAssociationClient
|
|
0x8000000000000000: Microsoft-Windows-DeviceAssociationService/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{56DC463B-97E8-4B59-E836-AB7C9BB96301} Manifest Microsoft-Windows-Diagtrack
|
|
- channel:
|
|
0x10: Microsoft-Windows-DiagTrack/Diagnostic
|
|
- keyword:
|
|
0x10000: DiagTrackStatus: DiagTrack Status
|
|
0x200000000: DiagTrackPerf: DiagTrack Windows Perf
|
|
0x8000000000000000: Microsoft-Windows-DiagTrack/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{56F519AB-9DF6-4345-8491-A4BA21AC825B} Manifest Microsoft-Windows-UserDataAccess-UnifiedStore
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Unified_Store
|
|
0x8: Notification
|
|
0x10: RPC
|
|
0x20: ChangeTracking
|
|
0x100: debug: Debug
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{57003E21-269B-4BDC-8434-B3BF8D57D2D5} Manifest Microsoft-User Experience Virtualization-SQM Uploader
|
|
- channel:
|
|
0x10: Microsoft-User Experience Virtualization-SQM Uploader/Operational: Operational
|
|
0x11: Microsoft-User Experience Virtualization-SQM Uploader/Debug: Debug
|
|
0x12: Microsoft-User Experience Virtualization-SQM Uploader/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Operational: Operational
|
|
0x4000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Debug: Debug
|
|
0x2000000000000000: Microsoft-User Experience Virtualization-SQM Uploader/Analytic: Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{57277741-3638-4A4B-BDBA-0AC6E45DA56C} Manifest Microsoft-JScript
|
|
- keyword:
|
|
0x1: JScriptRuntime
|
|
0x2: JScriptStartRundown
|
|
0x4: JScriptEndRundown
|
|
0x8: JScriptGCBucketStats
|
|
0x10: JScriptProjection
|
|
0x20: JScriptFrontend
|
|
0x40: JScriptGarbageCollection
|
|
0x80: JScriptProfile
|
|
0x100: JscriptBackend
|
|
0x200: JscriptJit
|
|
0x400: JScriptMemoryTracing
|
|
0x800: JScriptObjectAllocation
|
|
0x1000: JScriptExternalReferenceAddRef
|
|
0x2000: JScriptObjectCleanup
|
|
0x4000: JScriptExternalReferenceRelease
|
|
0x8000: JScriptAsyncCausality
|
|
0x10000: JScriptByteCode
|
|
0x20000: JScriptHosting
|
|
0x40000: JScriptStackTrace
|
|
0x80000: JScriptAsyncCausality_V2
|
|
0x100000: JScriptSourceMapping
|
|
0x200000: MemProtectGarbageCollection
|
|
0x400000: MemProtectObjectAllocation
|
|
0x800000: MemProtectHeapSize
|
|
0x1000000: Internal
|
|
0x2000000: MemProtectGCBucketStats
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5770385F-C22A-43E0-BF4C-06F5698FFBD9} Manifest Microsoft-Windows-Sysmon
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sysmon/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Sysmon/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{5786E035-EF2D-4178-84F2-5A6BBEDBB947} Manifest Microsoft-Windows-DirectManipulation
|
|
- channel:
|
|
0x10: Microsoft-Windows-DirectManipulation/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DirectManipulation/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{579402A2-883C-45D8-B70A-9BC856407751} Manifest Microsoft-Windows-SettingSync-Desktop
|
|
- channel:
|
|
0x10: Microsoft-Windows-SettingSync/Operational
|
|
0x11: Microsoft-Windows-SettingSync/Debug
|
|
0x12: Microsoft-Windows-SettingSync/Analytic
|
|
- keyword:
|
|
0x1: RoamingSettings
|
|
0x8000000000000000: Microsoft-Windows-SettingSync/Operational
|
|
0x4000000000000000: Microsoft-Windows-SettingSync/Debug
|
|
0x2000000000000000: Microsoft-Windows-SettingSync/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5857D6CA-9732-4454-809B-2A87B70881F8} Manifest Microsoft-Windows-WSC-SRV
|
|
- channel:
|
|
0x10: Microsoft-Windows-WSC-SRV/Diagnostic
|
|
- keyword:
|
|
0x10000: Service
|
|
0x20000: UI
|
|
0x8000000000000000: Microsoft-Windows-WSC-SRV/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{585CAB4F-9351-436E-9D99-DC4B41A20DE0} Manifest Microsoft-Windows-Tethering-Station
|
|
- channel:
|
|
0x10: Microsoft-Windows-Tethering-Station/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Tethering-Station/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5885720D-F086-4614-A17C-4770C2461AF2} Manifest DptfAcpiEtwProvider
|
|
- keyword:
|
|
0x1: ApiTrace
|
|
0x2: Action_const
|
|
0x4: Action_msr
|
|
0x8: Action_mmio
|
|
0x10: Action_acpi
|
|
0x20: IPC
|
|
0x40: Command
|
|
0x80: Primitive
|
|
0x100: Action
|
|
0x200: Cpc
|
|
0x400: Power
|
|
0x800: Dsp
|
|
0x1000: Event
|
|
0x2000: Elf
|
|
0x4000: Pmg
|
|
0x8000: Queue
|
|
0x10000: Hash
|
|
0x20000: Pnp
|
|
0x40000: Action_code
|
|
0x80000: Domain
|
|
0x100000: Action_mbi
|
|
0x200000: Drvm
|
|
0x400000: Windows
|
|
0x800000: Linux
|
|
0x1000000: Action_delegate
|
|
0x2000000: Lp
|
|
0x4000000: KIoctl
|
|
0x100000000: Interrupt
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{588C5C5A-FFC5-44A2-9A7F-D5E8DBE6EFD7} Manifest Microsoft-Windows-HealthCenter
|
|
- channel:
|
|
0x10: Microsoft-Windows-HealthCenter/Debug
|
|
0x11: Microsoft-Windows-HealthCenter/Performance
|
|
- keyword:
|
|
0x1: WHC
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-HealthCenter/Debug
|
|
0x4000000000000000: Microsoft-Windows-HealthCenter/Performance
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{58980F4B-BD39-4A3E-B344-492ED2254A4E} Manifest Microsoft-Windows-EapMethods-RasChap
|
|
- channel:
|
|
0x10: Microsoft-Windows-EapMethods-RasChap/Operational: Operational Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EapMethods-RasChap/Operational: Operational Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{595F33EA-D4AF-4F4D-B4DD-9DACDD17FC6E} Manifest Microsoft-Windows-StorageManagement-WSP-Host
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageManagement/Operational
|
|
0x11: Microsoft-Windows-StorageManagement/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageManagement/Operational
|
|
0x4000000000000000: Microsoft-Windows-StorageManagement/Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
|
|
{595F7F52-C90A-4026-A125-8EB5E083F15E} Manifest Microsoft-Windows-StorageSpaces-Driver
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageSpaces-Driver/Operational
|
|
0x11: Microsoft-Windows-StorageSpaces-Driver/Diagnostic
|
|
0x12: Microsoft-Windows-StorageSpaces-Driver/Performance
|
|
- keyword:
|
|
0x1: Io
|
|
0x2: Flush
|
|
0x4: Dsm
|
|
0x8: Log
|
|
0x10: Destage
|
|
0x40: ReadCache
|
|
0x8000000000000000: Microsoft-Windows-StorageSpaces-Driver/Operational
|
|
0x4000000000000000: Microsoft-Windows-StorageSpaces-Driver/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-StorageSpaces-Driver/Performance
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{59819D0A-ADAF-46B2-8D7C-990BC39C7C15} Manifest Microsoft-Windows-Battery
|
|
- channel:
|
|
0x10: Microsoft-Windows-Battery/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Battery/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{59E7A714-73A4-4147-B47E-0957048C75C4} Manifest Microsoft-Windows-XAML-Diagnostics
|
|
- channel:
|
|
0x10: Microsoft-Windows-XAML-Diagnostics/Default
|
|
- keyword:
|
|
0x1: Input
|
|
0x2: DesignerAppManager
|
|
0x4: VisualDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-XAML-Diagnostics/Default
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5A24FCDB-1CF3-477B-B422-EF4909D51223} Manifest Microsoft-Windows-CredUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-CredUI/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CredUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5B004607-1087-4F16-B10E-979685A8D131} Manifest Microsoft-Windows-DomainJoinManagerTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_DomainJoinEvent
|
|
0x2: Keyword_DomainUnjoinEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5B0A651A-8807-45CC-9656-7579815B6AF0} Manifest Microsoft-Windows-RemoteAssistance
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteAssistance/Operational
|
|
0x11: Microsoft-Windows-RemoteAssistance/Admin
|
|
0x12: Microsoft-Windows-RemoteAssistance/Tracing
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x400000000000: ut:Diagnostic
|
|
0x8000000000000000: Microsoft-Windows-RemoteAssistance/Operational
|
|
0x4000000000000000: Microsoft-Windows-RemoteAssistance/Admin
|
|
0x2000000000000000: Microsoft-Windows-RemoteAssistance/Tracing
|
|
0x1000000000000000: Application: Application
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5B5AB841-7D2E-4A95-BB4F-095CDF66D8F0} Manifest Microsoft-Windows-PackageStateRoaming
|
|
- channel:
|
|
0x10: Microsoft-Windows-PackageStateRoaming/Operational: Microsoft-Windows-PackageStateRoaming/Operational
|
|
0x11: Microsoft-Windows-PackageStateRoaming/Debug: Microsoft-Windows-PackageStateRoaming/Debug
|
|
0x12: Microsoft-Windows-PackageStateRoaming/Analytic: Microsoft-Windows-PackageStateRoaming/Analytic
|
|
- keyword:
|
|
0x1: PackageStateRoaming
|
|
0x8000000000000000: Microsoft-Windows-PackageStateRoaming/Operational: Microsoft-Windows-PackageStateRoaming/Operational
|
|
0x4000000000000000: Microsoft-Windows-PackageStateRoaming/Debug: Microsoft-Windows-PackageStateRoaming/Debug
|
|
0x2000000000000000: Microsoft-Windows-PackageStateRoaming/Analytic: Microsoft-Windows-PackageStateRoaming/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB} Manifest Microsoft-Windows-CAPI2
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-CAPI2/Operational: Microsoft-Windows-CAPI2/Operational
|
|
0x11: Microsoft-Windows-CAPI2/Catalog Database Debug: Microsoft-Windows-CAPI2/Catalog Database Debug
|
|
- keyword:
|
|
0x1: PathValidation: Path Validation
|
|
0x2: PathDiscovery: Path Discovery
|
|
0x4: Revocation: Revocation
|
|
0x8: Cache: Cache
|
|
0x10: Retrieval: Retrieval
|
|
0x20: AutoRootUpdate: Automatic Root Update
|
|
0x40: WinVerifyTrust: Trust Verification
|
|
0x80: PrivateKey: Private Key
|
|
0x100: CertificateStore: Certificate Store
|
|
0x200: CertificateDetails: Certificate Details
|
|
0x400: Catalog: Catalog
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-CAPI2/Operational: Microsoft-Windows-CAPI2/Operational
|
|
0x2000000000000000: Microsoft-Windows-CAPI2/Catalog Database Debug: Microsoft-Windows-CAPI2/Catalog Database Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5C1C9AB3-8689-4E41-90FA-85858306D7B7} Manifest Microsoft-Windows-Network-DataUsage
|
|
- channel:
|
|
0x10: Microsoft-Windows-Network-DataUsage/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Network-DataUsage/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5C8BB950-959E-4309-8908-67961A1205D5} Manifest Microsoft-IEFRAME
|
|
- channel:
|
|
0x10: Microsoft-IEFRAME/Diagnostic
|
|
- keyword:
|
|
0x1: DIC
|
|
0x2: TravelLogScreenshotNav
|
|
0x4: LCIEDownloader
|
|
0x8: favicon
|
|
0x10: HistoryJournal
|
|
0x20: HUX
|
|
0x100: primarynav
|
|
0x200: subsystem
|
|
0x400: extended
|
|
0x800: verbose
|
|
0x1000: mshtml
|
|
0x2000: wininet
|
|
0x4000: shell
|
|
0x8000: jscript
|
|
0x10000: ap
|
|
0x20000: rss
|
|
0x40000: controlpanel
|
|
0x80000: notification
|
|
0x100000: pageloadbreakdown
|
|
0x200000: unifiedlistview
|
|
0x400000: immersive
|
|
0x800000: tabhydration
|
|
0x1000000: hang
|
|
0x2000000: imagestore
|
|
0x4000000: bingsuggestions
|
|
0x10000000: sharecharm
|
|
0x20000000: roaming
|
|
0x40000000: BFCache
|
|
0x80000000: DownloadWindow
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-IEFRAME/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5CAD3597-5FEC-4C62-9CE1-9D7ABC723D3A} Manifest Microsoft-Windows-PushNotifications-Developer
|
|
- channel:
|
|
0x10: Microsoft-Windows-PushNotification-Developer/Debug: Microsoft-Windows-PushNotifications-Developer/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PushNotification-Developer/Debug: Microsoft-Windows-PushNotifications-Developer/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{5CAD485A-210F-4C16-80C5-F892DE74E28D} Manifest Microsoft-Windows-OtpCredentialProviderEvt
|
|
- channel:
|
|
0x10: Microsoft-Windows-OtpCredentialProvider/Operational: Microsoft-Windows-OtpCredentialProvider/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-OtpCredentialProvider/Operational: Microsoft-Windows-OtpCredentialProvider/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{5D674230-CA9F-11DA-A94D-0800200C9A66} Manifest Microsoft-Windows-BitLocker-API
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-BitLocker/BitLocker Management: Management
|
|
0x11: Microsoft-Windows-BitLocker/Tracing
|
|
0x12: Microsoft-Windows-BitLocker/BitLocker Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-BitLocker/BitLocker Management: Management
|
|
0x2000000000000000: Microsoft-Windows-BitLocker/Tracing
|
|
0x1000000000000000: Microsoft-Windows-BitLocker/BitLocker Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{5D8087DD-3A9B-4F56-90DF-49196CDC4F11} Manifest Microsoft-Windows-Direct3D12
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3D12/Analytic
|
|
0x11: Microsoft-Windows-Direct3D12/Logging
|
|
0x12: Microsoft-Windows-Direct3D12/PerfTiming
|
|
- keyword:
|
|
0x1: Names
|
|
0x2: Devices
|
|
0x4: Resources
|
|
0x8: Markers
|
|
0x10: RenderOperationMarkers
|
|
0x20: DriverCustomMarkers
|
|
0x40: BundleMarkers
|
|
0x80: ObjectLifetime
|
|
0x100: JournalEntries
|
|
0x8000000000000000: Microsoft-Windows-Direct3D12/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Direct3D12/Logging
|
|
0x2000000000000000: Microsoft-Windows-Direct3D12/PerfTiming
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{5D86C4E2-8FCD-48D7-A713-9A04609C0189} Manifest Microsoft-Windows-MCCS-DavSyncProvider
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x1000000000: CommsService: CommsService
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{5D896912-022D-40AA-A3A8-4FA5515C76D7} Manifest Microsoft-Windows-TerminalServices-LocalSessionManager
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-TerminalServices-LocalSessionManager/Admin
|
|
0x11: Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
|
|
0x13: Microsoft-Windows-TerminalServices-LocalSessionManager/Debug
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Admin
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
|
|
0x800000000000000: Microsoft-Windows-TerminalServices-LocalSessionManager/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{5D9E0020-3761-4F36-90C8-38CE6511BD12} Manifest Microsoft-Windows-MSDTC 2
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{5EC13D8E-4B3F-422E-A7E7-3121A1D90C7A} Manifest Microsoft-Windows-ApplicationExperienceInfrastructure
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{5F0E257F-C224-43E5-9555-2ADCB8540A58} Manifest Microsoft-Windows-Immersive-Shell-API
|
|
- channel:
|
|
0x10: Microsoft-Windows-TWinAPI/Diagnostic
|
|
0x11: Microsoft-Windows-CoreApplication/Diagnostic
|
|
0x12: Microsoft-Windows-CoreApplication/Tracing
|
|
0x13: Microsoft-Windows-CoreApplication/Operational
|
|
- keyword:
|
|
0x2: Deferral: Suspending Deferral
|
|
0x4: ElizaPrototype: ElizaPrototype
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-TWinAPI/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-CoreApplication/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-CoreApplication/Tracing
|
|
0x1000000000000000: Microsoft-Windows-CoreApplication/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{5F92BC59-248F-4111-86A9-E393E12C6139} Manifest Microsoft-Windows-MemoryDiagnostics-Results
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-MemoryDiagnostics-Results/Debug: Microsoft-Windows-MemoryDiagnostics-Results/Debug
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-MemoryDiagnostics-Results/Debug: Microsoft-Windows-MemoryDiagnostics-Results/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{602A0873-9BDE-48B3-B6B7-277035293458} Manifest Microsoft-Windows-MCCS-ActiveSyncCsp
|
|
|
|
{606A6A38-70EC-4309-B3A3-82FF86F73329} Manifest Microsoft-Windows-ServiceReportingApi
|
|
- channel:
|
|
0x10: Microsoft-Windows-ServiceReportingApi/Debug: Microsoft-Windows-Service Reporting API/Debug
|
|
- keyword:
|
|
0x1: SVCAPI_BASELINE_KEYWORD_DEBUG: This keyword is for debug messages
|
|
0x8000000000000000: Microsoft-Windows-ServiceReportingApi/Debug: Microsoft-Windows-Service Reporting API/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{606C6FE0-A9DC-4A9D-BDEA-830AFF6716E7} Manifest Microsoft-Windows-Shell-Search-UriHandler
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-Search-UriHandler
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Shell-Search-UriHandler
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{614696C9-85AF-4E64-B389-D2C0DB4FF87B} Manifest Microsoft-Windows-WMPNSS-PublicAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{617853D6-728B-4B59-8A78-C3A9A5EADE92} Manifest WINSATAPI_ETW_PROVIDER
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
|
|
{618473BC-8EEF-4868-ADFF-A1B640B06411} Manifest Microsoft-Windows-MCCS-InternetMail
|
|
|
|
{61BC445E-7A8D-420E-AB36-9C7143881B98} Manifest Microsoft-User Experience Virtualization-Admin
|
|
- channel:
|
|
0x10: Microsoft-User Experience Virtualization-Admin/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-User Experience Virtualization-Admin/Debug
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{61F044AF-9104-4CA5-81EE-CB6C51BB01AB} Manifest Microsoft-Windows-ThemeCPL
|
|
- channel:
|
|
0x10: Microsoft-Windows-ThemeCPL/Diagnostic
|
|
- keyword:
|
|
0x10000: ThemeCPL
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-ThemeCPL/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{62DE9E48-90C6-4755-8813-6A7D655B0802} Manifest Microsoft-Windows-NdisImPlatformSysEvtProvider
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
|
|
{632F767E-0EC3-47B9-BA1C-A0E62A74728A} Manifest Microsoft-Windows-BitLocker-DrivePreparationTool
|
|
- channel:
|
|
0x10: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin
|
|
0x11: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin: Microsoft-Windows-BitLocker-DrivePreparationTool/Admin
|
|
0x4000000000000000: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational: Microsoft-Windows-BitLocker-DrivePreparationTool/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{63848CFF-3EC7-4DDF-8072-5F95E8C8EB98} Manifest Intel-iaLPSS2-GPIO2
|
|
- channel:
|
|
0x10: Intel-iaLPSS2-GPIO2/Debug: iaLPSS_GPIO2 Debug channel
|
|
0x11: Intel-iaLPSS2-GPIO2/Performance: iaLPSS_GPIO2 Performance channel
|
|
- keyword:
|
|
0x8000000000000000: Intel-iaLPSS2-GPIO2/Debug: iaLPSS_GPIO2 Debug channel
|
|
0x4000000000000000: Intel-iaLPSS2-GPIO2/Performance: iaLPSS_GPIO2 Performance channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{63B530F8-29C9-4880-A5B4-B8179096E7B8} Manifest Microsoft-Windows-NlaSvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-NlaSvc/Diagnostic: Microsoft-Windows-NlaSvc/Diagnostic
|
|
0x11: Microsoft-Windows-NlaSvc/Operational: Microsoft-Windows-NlaSvc/Operational
|
|
- keyword:
|
|
0x1: Identification
|
|
0x2: Resolver
|
|
0x4: Intranet
|
|
0x8: Trigger
|
|
0x10: Plugin
|
|
0x20: LwtDiagnostic
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NlaSvc/Diagnostic: Microsoft-Windows-NlaSvc/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-NlaSvc/Operational: Microsoft-Windows-NlaSvc/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{63D1E632-95CC-4443-9312-AF927761D52A} Manifest Microsoft-Windows-HAL
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-HAL/Debug: Microsoft-Windows-HAL/Debug
|
|
- keyword:
|
|
0x1: halDiagnostic
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-HAL/Debug: Microsoft-Windows-HAL/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{63D2BB1D-E39A-41B8-9A3D-52DD06677588} Manifest Microsoft-Windows-Shell-AuthUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-Authentication User Interface/Operational: Microsoft-Windows-Authentication User Interface/Operational
|
|
0x11: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic
|
|
0x12: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic
|
|
0x13: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic
|
|
0x14: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic
|
|
0x15: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic
|
|
0x16: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic
|
|
0x17: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic
|
|
- keyword:
|
|
0x200000000000: ms:Telemetry
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Authentication User Interface/Operational: Microsoft-Windows-Authentication User Interface/Operational
|
|
0x4000000000000000: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic: Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic: Microsoft-Windows-Shell-AuthUI-Common/Diagnostic
|
|
0x800000000000000: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic: Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic
|
|
0x400000000000000: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic: Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic
|
|
0x200000000000000: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic: Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic
|
|
0x100000000000000: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic: Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{6465DA78-E7A0-4F39-B084-8F53C7C30DC6} Manifest Microsoft-Windows-Input-HIDCLASS
|
|
- channel:
|
|
0x10: Microsoft-Windows-Input-HIDCLASS-Analytic: This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent.
|
|
- keyword:
|
|
0x1: Default
|
|
0x8000000000000000: Microsoft-Windows-Input-HIDCLASS-Analytic: This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent.
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6489B27F-7C43-5886-1D00-0A61BB2A375B} Manifest Microsoft-Windows-UniversalTelemetryClient
|
|
- channel:
|
|
0x10: Microsoft-Windows-UniversalTelemetryClient/Operational
|
|
- keyword:
|
|
0x10000: Tenant
|
|
0x20000: Upload
|
|
0x40000: Service
|
|
0x80000: Agent
|
|
0x8000000000000000: Microsoft-Windows-UniversalTelemetryClient/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{648A0644-7D62-4FD3-8841-440064762F95} Manifest Microsoft-Windows-BackgroundTransfer-ContentPrefetcher
|
|
- channel:
|
|
0x10: Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{64A98C25-9E00-404E-84AD-6700DFE02529} Manifest Microsoft-Windows-WDAG-PolicyEvaluator-CSP
|
|
- channel:
|
|
0x10: Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{64EF2B1C-4AE1-4E64-8599-1636E441EC88} Manifest Microsoft-Windows-Devices-Background
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Devices-Background/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Devices-Background/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{651DF93B-5053-4D1E-94C5-F6E6D25908D0} Manifest Microsoft-Windows-BitLocker-Driver
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{651E0E5C-0946-43FF-B70F-AECD299B29B4} Manifest DptfCpuEtwProvider
|
|
- keyword:
|
|
0x1: ApiTrace
|
|
0x2: Action_const
|
|
0x4: Action_msr
|
|
0x8: Action_mmio
|
|
0x10: Action_acpi
|
|
0x20: IPC
|
|
0x40: Command
|
|
0x80: Primitive
|
|
0x100: Action
|
|
0x200: Cpc
|
|
0x400: Power
|
|
0x800: Dsp
|
|
0x1000: Event
|
|
0x2000: Elf
|
|
0x4000: Pmg
|
|
0x8000: Queue
|
|
0x10000: Hash
|
|
0x20000: Pnp
|
|
0x40000: Action_code
|
|
0x80000: Domain
|
|
0x100000: Action_mbi
|
|
0x200000: Drvm
|
|
0x400000: Windows
|
|
0x800000: Linux
|
|
0x1000000: Action_delegate
|
|
0x2000000: Lp
|
|
0x4000000: KIoctl
|
|
0x100000000: Interrupt
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{6545939F-3398-411A-88B7-6A8914B8CEC7} Manifest Microsoft-Windows-ServiceTriggerPerfEventProvider
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{65D99466-7A8E-489C-B8E1-962BC945031E} Manifest Microsoft-Windows-Shell-DefaultPrograms
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-DefaultPrograms/Diagnostic
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-Shell-DefaultPrograms/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6600E712-C3B6-44A2-8A48-935C511F28C8} Manifest Microsoft-Windows-Iphlpsvc-Trace
|
|
- channel:
|
|
0x10: Microsoft-Windows-Iphlpsvc/Trace: Iphlpsvc Etw Channel
|
|
0x11: Microsoft-Windows-Iphlpsvc/Debug: Iphlpsvc Etw Debug Channel
|
|
- keyword:
|
|
0x1: isatap
|
|
0x2: sixto4
|
|
0x4: iphttps
|
|
0x8: teredo
|
|
0x10: teredoVerbose
|
|
0x20: teredoStart
|
|
0x40: teredoEnd
|
|
0x80: teredoFailures
|
|
0x100: dns64
|
|
0x200: CPVerbose
|
|
0x400: CPStart
|
|
0x800: CPEnd
|
|
0x1000: CPFailures
|
|
0x2000: CP
|
|
0x4000: HA
|
|
0x8000: PROXYMGR
|
|
0x10000: damultisite
|
|
0x20000: common
|
|
0x40000: functionentry
|
|
0x80000: servicefsm
|
|
0x100000: portproxy
|
|
0x200000: refcount
|
|
0x8000000000000000: Microsoft-Windows-Iphlpsvc/Trace: Iphlpsvc Etw Channel
|
|
0x4000000000000000: Microsoft-Windows-Iphlpsvc/Debug: Iphlpsvc Etw Debug Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{66A5C15C-4F8E-4044-BF6E-71D896038977} Manifest Microsoft-Windows-Iphlpsvc
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Iphlpsvc/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Iphlpsvc/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{66C07ECD-6667-43FC-93F8-05CF07F446EC} Manifest Microsoft-Windows-WinNat
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinNat/Trace
|
|
0x11: Microsoft-Windows-WinNat/Oper: Operational
|
|
- keyword:
|
|
0x1: ut:Session
|
|
0x2: ut:Binding
|
|
0x4: ut:Translation
|
|
0x8: ut:Configuration
|
|
0x10: ut:NatDrop
|
|
0x20: ut:NatSkip
|
|
0x40: ut:NatForward
|
|
0x80: ut:NatGeneralError
|
|
0x100: ut:NatGeneric
|
|
0x10000000000: ut:Dropped
|
|
0x8000000000000000: Microsoft-Windows-WinNat/Trace
|
|
0x4000000000000000: Microsoft-Windows-WinNat/Oper: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{676F167F-F72C-446E-A498-EDA43319A5E3} Manifest Microsoft-Windows-ntshrui
|
|
- channel:
|
|
0x10: Microsoft-Windows-ntshrui
|
|
0x11: Microsoft-Windows-ntshrui-perf
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-ntshrui
|
|
0x4000000000000000: Microsoft-Windows-ntshrui-perf
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{67D07935-283A-4791-8F8D-FA9117F3E6F2} Manifest Microsoft-Windows-Wcmsvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-Wcmsvc/Operational: Operational
|
|
0x11: Microsoft-Windows-Wcmsvc/Diagnostic: Diagnostic
|
|
- keyword:
|
|
0x20: LwtDiagnostic
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Wcmsvc/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-Wcmsvc/Diagnostic: Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{67D781BD-CBD2-4BD2-AD1F-6152FB891246} Manifest Microsoft-Windows-BootUX
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{67FE2216-727A-40CB-94B2-C02211EDB34A} Manifest Microsoft-Windows-VolumeSnapshot-Driver
|
|
- channel:
|
|
0x10: Microsoft-Windows-VolumeSnapshot-Driver/Analytic
|
|
0x11: Microsoft-Windows-VolumeSnapshot-Driver/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VolumeSnapshot-Driver/Analytic
|
|
0x4000000000000000: Microsoft-Windows-VolumeSnapshot-Driver/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{699E309C-E782-4400-98C8-E21D162D7B7B} Manifest Microsoft-Windows-Forwarding
|
|
- channel:
|
|
0x10: Microsoft-Windows-Forwarding/Operational: Operational
|
|
0x11: Microsoft-Windows-Forwarding/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Forwarding/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-Forwarding/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{69C8CA7E-1ADF-472B-BA4C-A0485986B9F6} Manifest Microsoft-Windows-StorageSpaces-SpaceManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageSpaces-SpaceManager/Operational
|
|
0x11: Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageSpaces-SpaceManager/Operational
|
|
0x4000000000000000: Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6A1F2B00-6A90-4C38-95A5-5CAB3B056778} Manifest Microsoft-Windows-DHCPv6-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dhcpv6-Client/Admin: Microsoft-Windows-DHCPv6 Client Events/Admin
|
|
0x11: Microsoft-Windows-Dhcpv6-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: DHCPV6_AOAC
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Dhcpv6-Client/Admin: Microsoft-Windows-DHCPv6 Client Events/Admin
|
|
0x4000000000000000: Microsoft-Windows-Dhcpv6-Client/Operational: Microsoft-Windows-DHCP Client Events/Operational
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C} Manifest Microsoft-Windows-WMPNSS-Service
|
|
- channel:
|
|
0x10: Microsoft-Windows-WMPNSS-Service/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-WMPNSS-Service/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6A502821-AB44-40C8-B32F-37315D9D52E0} Manifest Microsoft-Windows-Network-and-Sharing-Center
|
|
- channel:
|
|
0x10: Microsoft-Windows-Network-and-Sharing-Center/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Network-and-Sharing-Center/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6AD52B32-D609-4BE9-AE07-CE8DAE937E39} Manifest Microsoft-Windows-RPC
|
|
- channel:
|
|
0x10: Microsoft-Windows-RPC/EEInfo: EEInfo
|
|
0x11: Microsoft-Windows-RPC/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RPC/EEInfo: EEInfo
|
|
0x4000000000000000: Microsoft-Windows-RPC/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6ADDABF4-8C54-4EAB-BF4F-FBEF61B62EB0} Manifest Microsoft-Windows-AIT
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6B1FFE48-5B1E-4793-9F7F-AE926454499D} Manifest Microsoft-Windows-DiskDiagnosticResolver
|
|
- channel:
|
|
0x10: Microsoft-Windows-DiskDiagnosticResolver/Operational: Microsoft-Windows-DiskDiagnosticResolver/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DiskDiagnosticResolver/Operational: Microsoft-Windows-DiskDiagnosticResolver/Operational
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{6B4DB0BC-9A3D-467D-81B9-A84C6F2F3D40} Manifest Microsoft-Windows-Disk
|
|
- channel:
|
|
0x10: Microsoft-Windows-Disk/Operational
|
|
0x11: Microsoft-Windows-Storage-Disk/Diagnose
|
|
0x12: Microsoft-Windows-Storage-Disk/Debug
|
|
0x13: Microsoft-Windows-Storage-Disk/Analytic
|
|
0x14: Microsoft-Windows-Storage-Disk/Operational
|
|
0x15: Microsoft-Windows-Storage-Disk/Admin
|
|
- keyword:
|
|
0x1: DiskCache
|
|
0x100000: IO_Performance: IO Performance measurement
|
|
0x200000: Read: Read request
|
|
0x400000: Write: Write request
|
|
0x800000: PagingRead: Paging Read request
|
|
0x1000000: PagingWrite: Paging Write request
|
|
0x2000000: LowMemoryRead: Low memory Read request
|
|
0x4000000: LowMemoryWrite: Low memory write request
|
|
0x8000000: NonReadWrite: Non-Read/Write request
|
|
0x10000000: PassThrough: Pass-Through request
|
|
0x20000000: Flush: Flush request
|
|
0x40000000: IOCTL: Device I/O control request
|
|
0x80000000: WMI: WMI request
|
|
0x100000000: Power: Power request
|
|
0x200000000: PnP: PnP request
|
|
0x400000000: Enum: Device enumeration handling
|
|
0x800000000: Queue: Queue-related operation
|
|
0x1000000000: ISR: Interrupt Service Routine processing
|
|
0x2000000000: DPC: Deferred Procedure Call handling
|
|
0x4000000000: Timer: Timer-related operation
|
|
0x8000000000: Protocol: Bus protocol specific operation
|
|
0x10000000000: Target: Target-related operation
|
|
0x20000000000: Adapter: Controller or Host Bus Adapter related operation
|
|
0x40000000000: Retry: Retry handling
|
|
0x80000000000: Timeout: Timeout handling
|
|
0x100000000000: ReSet: Reset handling
|
|
0x200000000000: MiniportInterface: Activity between port and miniport
|
|
0x800000000000: Test: Testing-specific processing
|
|
0x8000000000000000: Microsoft-Windows-Disk/Operational
|
|
0x4000000000000000: Microsoft-Windows-Storage-Disk/Diagnose
|
|
0x2000000000000000: Microsoft-Windows-Storage-Disk/Debug
|
|
0x1000000000000000: Microsoft-Windows-Storage-Disk/Analytic
|
|
0x800000000000000: Microsoft-Windows-Storage-Disk/Operational
|
|
0x400000000000000: Microsoft-Windows-Storage-Disk/Admin
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6B7B5E3A-F4DE-42D9-9545-BAE12852D778} Manifest Microsoft-WindowsPhone-Net-Cellcore-CellularAPI
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Information: Information
|
|
0x8: Trace: Trace
|
|
0x10: UICC: UICC
|
|
0x20: RefCntTrace: Reference Count Trace
|
|
0x40: FunctionTrace: Function Trace
|
|
0x80: OEM: OEM configuration
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6B93BF66-A922-4C11-A617-CF60D95C133D} Manifest Microsoft-Windows-Fault-Tolerant-Heap
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Fault-Tolerant-Heap/Operational: Microsoft-Windows-Fault-Tolerant-Heap/Operational
|
|
- keyword:
|
|
0x10000000: FTH_EVENT_KEYWORD_LIFECYCLE: Events related to lifecycle of FTH (Fault tolerant heap) service.
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Fault-Tolerant-Heap/Operational: Microsoft-Windows-Fault-Tolerant-Heap/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6BA132C4-DA49-415B-A7F4-31870DC9FE25} Manifest Microsoft-Windows-QoS-qWAVE
|
|
- channel:
|
|
0x10: Microsoft-Windows-QoS-qWAVE/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-QoS-qWAVE/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{6BBA3851-2C7E-4DEA-8F54-31E5AFD029E3} Manifest Microsoft-Windows-Diagnosis-DPS
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-DPS/Debug: Microsoft-Windows-Diagnosis-DPS/Debug
|
|
0x11: Microsoft-Windows-Diagnosis-DPS/Operational: Microsoft-Windows-Diagnosis-DPS/Operational
|
|
0x12: Microsoft-Windows-Diagnosis-DPS/Analytic: Microsoft-Windows-Diagnosis-DPS/Analytic
|
|
- keyword:
|
|
0x200: memory: Memory tracing events
|
|
0x100000000: perf: Timing Events
|
|
0x200000000: scenario: Scenario trigger events
|
|
0x400000000: debug: Debug events
|
|
0x800000000: lifecycle: Scenario lifecycle events
|
|
0x1000000000: notification: Diagnostic Module notification events
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-DPS/Debug: Microsoft-Windows-Diagnosis-DPS/Debug
|
|
0x4000000000000000: Microsoft-Windows-Diagnosis-DPS/Operational: Microsoft-Windows-Diagnosis-DPS/Operational
|
|
0x2000000000000000: Microsoft-Windows-Diagnosis-DPS/Analytic: Microsoft-Windows-Diagnosis-DPS/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6BD96334-DC49-441A-B9C4-41425BA628D8} Manifest Microsoft-Windows-Runtime-WebAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-WebAPI/Tracing
|
|
- keyword:
|
|
0x1: keywords.API: API
|
|
0x2: keywords.AtomPub: AtomPub
|
|
0x4: keywords.Json: JSON
|
|
0x8: keywords.Format: Format
|
|
0x10: keywords.AsyncOperation: AsyncOperation
|
|
0x20: keywords.Http: HTTP
|
|
0x8000000000000000: Microsoft-Windows-Runtime-WebAPI/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6BDADC96-673E-468C-9F5B-F382F95B2832} Manifest Microsoft-Windows-Security-SPP-UX
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-SPP-UX/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Security-SPP-UX/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6C260F2C-049A-43D8-BF4D-D350A4E6611A} Manifest Microsoft-Windows-RasSstp
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{6D7662A9-034E-4B1F-A167-67819C401632} Manifest Microsoft-Windows-IdCtrls
|
|
- channel:
|
|
0x10: Microsoft-Windows-IdCtrls/Operational: Microsoft-Windows-IdCtrls/Operational
|
|
0x11: Microsoft-Windows-IdCtrls/Analytic: Microsoft-Windows-IdCtrls/Analytic
|
|
- keyword:
|
|
0x1: IdentityWizard
|
|
0x8000000000000000: Microsoft-Windows-IdCtrls/Operational: Microsoft-Windows-IdCtrls/Operational
|
|
0x4000000000000000: Microsoft-Windows-IdCtrls/Analytic: Microsoft-Windows-IdCtrls/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{6D8A3A60-40AF-445A-98CA-99359E500146} Manifest Microsoft-Windows-ApplicationExperience-Cache
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-ApphelpCache/Operational
|
|
0x11: Microsoft-Windows-Kernel-ApphelpCache/Debug
|
|
0x12: Microsoft-Windows-Kernel-ApphelpCache/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Operational
|
|
0x4000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Debug
|
|
0x2000000000000000: Microsoft-Windows-Kernel-ApphelpCache/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{6DF57621-E7E4-410F-A7E9-E43EEB61B11F} Manifest Microsoft-Windows-Shell-ConnectedAccountState
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6E400999-5B82-475F-B800-CEF6FE361539} Manifest Microsoft-Windows-TerminalServices-ClientUSBDevices
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin: Admin
|
|
0x11: Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic: Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational: Operational
|
|
0x13: Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic: Analytic
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational: Operational
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6EB875EB-8F4A-4800-A00B-E484C97D7561} Manifest Microsoft-Windows-Runtime-Networking
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-Networking/Tracing
|
|
- keyword:
|
|
0x1: keywords.API: API
|
|
0x2: keywords.AsyncOperation: AsyncOperation
|
|
0x4: keywords.Socket: Socket
|
|
0x8: keywords.WebSocket: WebSocket
|
|
0x10: keywords.Http: Http
|
|
0x20: keywords.Rtc: Rtc
|
|
0x8000000000000000: Microsoft-Windows-Runtime-Networking/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{6EB8DB94-FE96-443F-A366-5FE0CEE7FB1C} Manifest Microsoft-Windows-EapHost
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-EapHost/Operational: Microsoft-Windows-EapHost/Operational
|
|
0x11: Microsoft-Windows-EapHost/Analytic: Microsoft-Windows-EapHost/Analytic
|
|
0x12: Microsoft-Windows-EapHost/Debug: Microsoft-Windows-EapHost/Debug
|
|
- keyword:
|
|
0x1: Reg: Registry
|
|
0x2: COM: COM
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-EapHost/Operational: Microsoft-Windows-EapHost/Operational
|
|
0x2000000000000000: Microsoft-Windows-EapHost/Analytic: Microsoft-Windows-EapHost/Analytic
|
|
0x1000000000000000: Microsoft-Windows-EapHost/Debug: Microsoft-Windows-EapHost/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{6ECE3302-FEE1-4EA9-8B88-086D459ED976} Manifest Microsoft-Windows-Display
|
|
- keyword:
|
|
0x10000: DisplayCPL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6ED11B00-C1B5-48CB-AECC-FF72EBEFBAE8} Manifest Microsoft-Windows-Wallet
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6EF4653A-71F9-4AD3-B093-61C38C9C299F} Manifest Microsoft-Pef-WebProxy
|
|
- channel:
|
|
0x10: Microsoft-Pef-WebProxy/Analytic
|
|
- keyword:
|
|
0x40000000: PacketStart
|
|
0x80000000: PacketEnd
|
|
0x40000000000: ut:Packet
|
|
0x8000000000000000: Microsoft-Pef-WebProxy/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{6F789161-D86F-4063-9E66-41F26B5DA238} Manifest Intel-SST-OED
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Intel-SST-OED/IntcOED_ETW_Debug: Debug Information for Intel Offload Engine Driver
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Intel-SST-OED/IntcOED_ETW_Debug: Debug Information for Intel Offload Engine Driver
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{70EB4F03-C1DE-4F73-A051-33D13D5413BD} Manifest Microsoft-Windows-Kernel-Registry
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Registry/Analytic
|
|
0x11: Microsoft-Windows-Kernel-Registry/Performance
|
|
- keyword:
|
|
0x1: CloseKey
|
|
0x2: QuerySecurityKey
|
|
0x4: SetSecurityKey
|
|
0x10: EnumerateValueKey
|
|
0x20: QueryMultipleValueKey
|
|
0x40: SetInformationKey
|
|
0x80: FlushKey
|
|
0x100: SetValueKey
|
|
0x200: DeleteValueKey
|
|
0x400: QueryValueKey
|
|
0x800: EnumerateKey
|
|
0x1000: CreateKey
|
|
0x2000: OpenKey
|
|
0x4000: DeleteKey
|
|
0x8000: QueryKey
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Registry/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Registry/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{712880E9-7813-41A3-8E4C-E4E0C4F6580A} Manifest Microsoft-Windows-WiFiDisplay
|
|
- channel:
|
|
0x10: Microsoft-Windows-WiFiDisplay/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WiFiDisplay/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{712ABB2D-D806-4B42-9682-26DA01D8B307} Manifest Microsoft-Windows-Video-For-Windows
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{719BE4ED-E9BC-4DD8-A7CF-C85CE8E4975D} Manifest Microsoft-Windows-MSDTC
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{71C993B8-1E28-4543-9886-FB219B63FDB3} Manifest Microsoft-Windows-WWAN-CFE
|
|
- channel:
|
|
0x10: Microsoft-Windows-WWAN-CFE/Diagnostic: Microsoft-Windows-WWAN-CFE/Diagnostic
|
|
- keyword:
|
|
0x1: Wwan-Performance
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WWAN-CFE/Diagnostic: Microsoft-Windows-WWAN-CFE/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{7237FFF9-A08A-4804-9C79-4A8704B70B87} Manifest Microsoft-Windows-LanguagePackSetup
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-LanguagePackSetup/Operational: Microsoft-Windows-LanguagePackSetup/Operational
|
|
0x11: Microsoft-Windows-LanguagePackSetup/Analytic: Microsoft-Windows-LanguagePackSetup/Analytic
|
|
0x12: Microsoft-Windows-LanguagePackSetup/Debug: Microsoft-Windows-LanguagePackSetup/Debug
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-LanguagePackSetup/Operational: Microsoft-Windows-LanguagePackSetup/Operational
|
|
0x2000000000000000: Microsoft-Windows-LanguagePackSetup/Analytic: Microsoft-Windows-LanguagePackSetup/Analytic
|
|
0x1000000000000000: Microsoft-Windows-LanguagePackSetup/Debug: Microsoft-Windows-LanguagePackSetup/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{72561CF0-C85C-4F78-9E8D-CBA9093DF62D} Manifest Microsoft-Windows-OneBackup
|
|
- channel:
|
|
0x10: Microsoft-Windows-OneBackup/Debug: Microsoft-Windows-OneBackup/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-OneBackup/Debug: Microsoft-Windows-OneBackup/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{7288C9F8-D63C-4932-A345-89D6B060174D} Manifest Microsoft-Windows-ADSI
|
|
- channel:
|
|
0x10: Microsoft-Windows-ADSI/Debug
|
|
- keyword:
|
|
0x1: schema
|
|
0x2: changepwd
|
|
0x4: setpwd
|
|
0x8: bindcache
|
|
0x8000000000000000: Microsoft-Windows-ADSI/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{728B02D9-BF21-49F6-BE3F-91BC06F7467E} Manifest Microsoft-Windows-WDAG-Service
|
|
|
|
{728B8C72-0F0F-4071-9BCC-27CB3B6DACBE} Manifest Microsoft-Windows-DXP
|
|
- channel:
|
|
0x10: Microsoft-Windows-DXP/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DXP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{72CD9FF7-4AF8-4B89-AEDE-5F26FDA13567} Manifest Microsoft-Windows-SPB-ClassExtension
|
|
- channel:
|
|
0x10: Microsoft-Windows-SPB-ClassExtension/Analytic: Analytic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SPB-ClassExtension/Analytic: Analytic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{72D211E1-4C54-4A93-9520-4901681B2271} Manifest Microsoft-Windows-PerfProc
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{73370BD6-85E5-430B-B60A-FEA1285808A7} Manifest Microsoft-Windows-CertificateServicesClient
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{739D66D8-76C4-4004-873F-169AE5C6EACA} Manifest Microsoft-Windows-DevMgmt-UefiCsp
|
|
- keyword:
|
|
0x1: Api: API
|
|
0x2: Error: Error
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{73A33AB2-1966-4999-8ADD-868C41415269} Manifest Microsoft-Windows-IsolatedUserMode
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{73AA0094-FACB-4AEB-BD1D-A7B98DD5C799} Manifest Microsoft-Windows-LimitsManagement
|
|
- channel:
|
|
0x10: Microsoft-Windows-LimitsManagement/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-LimitsManagement/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{73E9C9DE-A148-41F7-B1DB-4DA051FDC327} Manifest Microsoft-Windows-MemoryDiagnostics-Schedule
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{741BB90C-A7A3-49D6-BD82-1E6B858403F7} Manifest Microsoft-Windows-CloudStore
|
|
- channel:
|
|
0x10: Microsoft-Windows-CloudStore/Operational: Microsoft-Windows-CloudStore/Operational
|
|
0x11: Microsoft-Windows-CloudStore/Debug: Microsoft-Windows-CloudStore/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CloudStore/Operational: Microsoft-Windows-CloudStore/Operational
|
|
0x4000000000000000: Microsoft-Windows-CloudStore/Debug: Microsoft-Windows-CloudStore/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{741C6BE3-F74B-4E4D-88E7-5CE3A35FAEB3} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{741FC222-44ED-4BA7-98E3-F405B2D2C4B4} Manifest Microsoft-Windows-DateTimeControlPanel
|
|
- channel:
|
|
0x10: Microsoft-Windows-DateTimeControlPanel/Operational: Operational
|
|
0x11: Microsoft-Windows-DateTimeControlPanel/Analytic: Analytical
|
|
0x12: Microsoft-Windows-DateTimeControlPanel/Debug: Debug
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DateTimeControlPanel/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-DateTimeControlPanel/Analytic: Analytical
|
|
0x2000000000000000: Microsoft-Windows-DateTimeControlPanel/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{7426A56B-E2D5-4B30-BDEF-B31815C1A74A} Manifest Microsoft-Windows-USB-USBHUB
|
|
- channel:
|
|
0x10: Microsoft-Windows-USB-USBHUB/Diagnostic
|
|
- keyword:
|
|
0x1: Diagnostics
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-USB-USBHUB/Diagnostic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{747EF6FD-E535-4D16-B510-42C90F6873A1} Manifest Microsoft-Windows-PrintService
|
|
- channel:
|
|
0x10: Microsoft-Windows-PrintService/Admin: Admin
|
|
0x11: Microsoft-Windows-PrintService/Operational: Operational
|
|
0x12: Microsoft-Windows-PrintService/Debug: Debug
|
|
- keyword:
|
|
0x1: SPOOLER_KEYWORD_LOCALSPL: Local Spooler
|
|
0x2: SPOOLER_KEYWORD_WIN32SPL: Remote Spooler
|
|
0x20: SPOOLER_KEYWORD_PRINTER: Printer
|
|
0x40: SPOOLER_KEYWORD_JOB: Document Print Job
|
|
0x80: SPOOLER_KEYWORD_CONNECTION: Spooler Connection
|
|
0x100: SPOOLER_KEYWORD_DRIVER: Print Driver
|
|
0x200: SPOOLER_KEYWORD_SETUP: Printer Setup
|
|
0x400: SPOOLER_KEYWORD_TRACE: Spooler Trace
|
|
0x800: SPOOLER_KEYWORD_CLASSIC: Classic Spooler Event
|
|
0x1000: SPOOLER_KEYWORD_ACTIVE_DIR: Active Directory
|
|
0x2000: SPOOLER_KEYWORD_ROUTER: Router
|
|
0x8000: SPOOLER_KEYWORD_CSR: Client Side Rendering (CSR)
|
|
0x10000: SPOOLER_KEYWORD_PIPELINE: Print Filter Pipeline
|
|
0x20000: SPOOLER_KEYWORD: Print Spooler
|
|
0x40000: SPOOLER_KEYWORD_PRINT_DRIVER_SANDBOX: Print Driver Sandbox
|
|
0x80000: XPS_PRINT_API_KEYWORD: XPS Print API
|
|
0x100000: XPS_PRINT_API_KEYWORD_PERFORMANCE: XPS Print API performance
|
|
0x200000: SPOOLER_KEYWORD_BRANCH_OFFICE_PRINTING: Branch Office Printing
|
|
0x400000: SETUP_WFS_KEYWORD: Service Windows Fax and Scan
|
|
0x800000: SPOOLER_KEYWORD_WSDMON: WS-Print Port Monitor
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x4000000000000: win:WDIDiag: WDI Diag
|
|
0x8000000000000000: Microsoft-Windows-PrintService/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-PrintService/Operational: Operational
|
|
0x2000000000000000: Microsoft-Windows-PrintService/Debug: Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{74827CBB-1E0F-45A2-8523-C605866D2F22} Manifest Microsoft-Windows-WindowsUIImmersive
|
|
- channel:
|
|
0x10: Microsoft-Windows-WindowsUIImmersive/Diagnostic
|
|
0x11: Microsoft-Windows-WindowsUIImmersive/Operational
|
|
- keyword:
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WindowsUIImmersive/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-WindowsUIImmersive/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{74B4A4B1-2302-4768-AC5B-9773DD456B08} Manifest Microsoft-Windows-EaseOfAccess
|
|
- channel:
|
|
0x10: Microsoft-Windows-EaseOfAccess/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-EaseOfAccess/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{74B655A2-8958-410E-80E2-3457051B8DFF} Manifest Microsoft-Windows-TSF-msutb
|
|
- channel:
|
|
0x10: Microsoft-Windows-TSF-msutb/Diagnostic
|
|
0x11: Microsoft-Windows-TSF-msutb/Debug
|
|
- keyword:
|
|
0x10000: Status
|
|
0x20000: Perf
|
|
0x100000: Focus
|
|
0x8000000000000000: Microsoft-Windows-TSF-msutb/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-TSF-msutb/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{74C2135F-CC76-45C3-879A-EF3BB1EEAF86} Manifest Microsoft-Windows-ResourcePublication
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-ResourcePublication/Tracing
|
|
- keyword:
|
|
0x40: core: Event originating from the fdrespub service
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-ResourcePublication/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{74DCC47A-846E-4C98-9E2C-80043ED82B15} Manifest Microsoft-Windows-Speech-TTS
|
|
- channel:
|
|
0x10: Microsoft-Windows-TTS/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-TTS/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75051C9D-2833-4A29-8923-046DB7A432CA} Manifest Microsoft-Windows-DDisplay
|
|
- channel:
|
|
0x10: Microsoft-Windows-DDisplay/Analytic
|
|
0x11: Microsoft-Windows-DDisplay/Logging
|
|
- keyword:
|
|
0x1: Objects
|
|
0x2: Events
|
|
0x8000000000000000: Microsoft-Windows-DDisplay/Analytic
|
|
0x4000000000000000: Microsoft-Windows-DDisplay/Logging
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{751EF305-6C6E-4FED-B847-02EF79D26AEF} Manifest Microsoft-Antimalware-Service
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7562948E-2671-4DDA-8F8F-BF945EF984A1} Manifest Microsoft-Windows-IME-KRAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-KRAPI/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-KRAPI/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75B0DA21-8B50-42EB-9448-EC48B1729B57} Manifest Microsoft-Windows-Dism-Api
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dism-Api/Analytic
|
|
0x11: Microsoft-Windows-Dism-Api/InternalAnalytic
|
|
0x12: Microsoft-Windows-Dism-Api/ExternalAnalytic
|
|
- keyword:
|
|
0x1: DismApiEvent
|
|
0x2: DismApiCommandThreadEvent
|
|
0x4: DismApiCommandObjectEvent
|
|
0x8: DismApiCommandQueueEvent
|
|
0x10: DismApiSessionTableEvent
|
|
0x8000000000000000: Microsoft-Windows-Dism-Api/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Dism-Api/InternalAnalytic
|
|
0x2000000000000000: Microsoft-Windows-Dism-Api/ExternalAnalytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-0870-49E5-BDCE-9D7028279489} Manifest Microsoft-Windows-SetupUGC
|
|
- channel:
|
|
0x10: Microsoft-Windows-SetupUGC/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-SetupUGC/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-0936-4A55-9D26-5F298F3180BF} Manifest Microsoft-Windows-Audit
|
|
- channel:
|
|
0x10: Microsoft-Windows-Audit/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x2: keyDiagnostic: Diagnostic
|
|
0x8000000000000000: Microsoft-Windows-Audit/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-0CC6-49DA-8CD9-8903A5222AA0} Manifest Microsoft-Windows-CmiSetup
|
|
- channel:
|
|
0x10: Microsoft-Windows-CmiSetup/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-CmiSetup/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-77B8-4BA8-9474-4F4A9DB2F5C6} Manifest Microsoft-Windows-Sysprep
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sysprep/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x2: keySysprep: Sysprep
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-Sysprep/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-8670-4EB6-B535-3B9D6BB222FD} Manifest Microsoft-Windows-OobeLdr
|
|
- channel:
|
|
0x10: Microsoft-Windows-OobeLdr/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x2: keyDiagnostic: Diagnostic
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-OobeLdr/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-997F-49CF-B49F-ECC50184B75D} Manifest Microsoft-Windows-Setup
|
|
- channel:
|
|
0x10: Microsoft-Windows-Setup/Analytic
|
|
0x11: Setup
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x2: keySysprep: Sysprep
|
|
0x400000000000: ms:Measures
|
|
0x800000000000: ms:CriticalData
|
|
0x8000000000000000: Microsoft-Windows-Setup/Analytic
|
|
0x4000000000000000: Setup
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-C8AE-4F93-9CA1-683A53E20CB6} Manifest Microsoft-Windows-Windeploy
|
|
- channel:
|
|
0x10: Microsoft-Windows-Windeploy/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-Windeploy/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{75EBC33E-D017-4D0F-93AB-0B4F86579164} Manifest Microsoft-Windows-SetupCl
|
|
- channel:
|
|
0x10: Microsoft-Windows-SetupCl/Analytic
|
|
- keyword:
|
|
0x1: keyPerformance
|
|
0x2: keyDiagnostic
|
|
0x8000000000000000: Microsoft-Windows-SetupCl/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{76AB12D5-C986-4E60-9D7C-2A092B284CDD} Manifest Microsoft-Windows-Workplace Join
|
|
- channel:
|
|
0x10: Microsoft-Windows-Workplace Join/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Workplace Join/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{76CFA528-B26E-B773-62D0-9588270442A6} Manifest Microsoft-Windows-PhotoAcq
|
|
- channel:
|
|
0x10: Microsoft-Windows-PhotoAcq/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PhotoAcq/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{770CA594-B467-4811-B355-28F5E5706987} Manifest Microsoft-Windows-ApplicationResourceManagementSystem
|
|
- channel:
|
|
0x10: Microsoft-Windows-ApplicationResourceManagementSystem/Diagnostic
|
|
0x11: Microsoft-Windows-ApplicationResourceManagementSystem/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-ApplicationResourceManagementSystem/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-ApplicationResourceManagementSystem/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7725B5F9-1F2E-4E21-BAEB-B2AF4690BC87} Manifest Microsoft-Windows-USB-MAUSBHOST
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-USB-MAUSBHOST-Analytic: This is the Analytic channel to which internal Analytic events from the MAUSB driver are sent.
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: USBError
|
|
0x4: IRP
|
|
0x8: Power
|
|
0x10: PnP
|
|
0x20: Performance
|
|
0x40: HeadersBusTrace
|
|
0x80: PartialDataBusTrace
|
|
0x100: FullDataBusTrace
|
|
0x200: StateMachine
|
|
0x400: Enumeration
|
|
0x800: VerifyDriver
|
|
0x1000: HWVerifyHost
|
|
0x2000: HWVerifyHub
|
|
0x4000: HWVerifyDevice
|
|
0x8000: Rundown
|
|
0x10000: Device
|
|
0x20000: Hub
|
|
0x40000: Compat
|
|
0x80000: MAUSBTraffic
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-USB-MAUSBHOST-Analytic: This is the Analytic channel to which internal Analytic events from the MAUSB driver are sent.
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{77549803-7BB1-418B-A98E-F2E22F35A873} Manifest Microsoft-Windows-WinMDE
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinMDE/MDE
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WinMDE/MDE
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{777BA8FE-2498-4875-933A-3067DE883070} Manifest Microsoft-Windows-XWizards
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7839BB2A-2EA3-4ECA-A00F-B558BA678BEC} Manifest Microsoft-Windows-WWAN-MM-EVENTS
|
|
- channel:
|
|
0x10: Microsoft-Windows-WWAN-MM-Events/Diagnostic: WWAN MM Diagnose Channel
|
|
- keyword:
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x4000000000: ut:Configuration
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WWAN-MM-Events/Diagnostic: WWAN MM Diagnose Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{783ACA0A-790E-4D7F-8451-AA850511C6B9} Manifest Microsoft-Windows-D3D9
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3D9/Analytic
|
|
- keyword:
|
|
0x2: Events
|
|
0x8000000000000000: Microsoft-Windows-Direct3D9/Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{7868B0D4-1423-4681-AFDF-27913575441E} Manifest Microsoft-Windows-NetworkStatus
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetworkStatus/Analytic
|
|
- keyword:
|
|
0x1: Aoac
|
|
0x8000000000000000: Microsoft-Windows-NetworkStatus/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7A67066E-193F-4D3A-82D3-322FEE5259DE} Manifest Microsoft-Windows-MSDTC Client
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{7B563579-53C8-44E7-8236-0F87B9FE6594} Manifest Microsoft-Windows-Kernel-WHEA
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-WHEA/Errors
|
|
0x11: Microsoft-Windows-Kernel-WHEA/Operational
|
|
- keyword:
|
|
0x800: WheaError: WHEA Error Events
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-WHEA/Errors
|
|
0x2000000000000000: Microsoft-Windows-Kernel-WHEA/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7B6BC78C-898B-4170-BBF8-1A469EA43FC5} Manifest Microsoft-Windows-HttpEvent
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
|
|
{7B702970-90BC-4584-8B20-C0799086EE5A} Manifest Microsoft-Windows-NetworkSecurity
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetworkSecurity/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-NetworkSecurity/Debug
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{7C314E58-8246-47D1-8F7A-4049DC543E0B} Manifest Microsoft-Windows-WMPNSSUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-WMPNSSUI/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WMPNSSUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7C4117B1-ED82-4F47-B2CA-29E4E25719C7} Manifest Microsoft-Windows-IME-CandidateUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-CandidateUI/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-CandidateUI/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7D29D58A-931A-40AC-8743-48C733045548} Manifest Microsoft-Windows-SoftwareRestrictionPolicies
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7D44233D-3055-4B9C-BA64-0D47CA40A232} Manifest Microsoft-Windows-WinHttp
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinHttp/Diagnostic
|
|
0x11: Microsoft-Windows-WinHTTP-NDF/Diagnostic
|
|
- keyword:
|
|
0x1: Keyword.API: API
|
|
0x20: WINHTTP_KEYWORD_AUTOPROXY: Flagged on all WinHTTP events dealing with AUTOPROXY
|
|
0x100000000: Keyword.SEND: SEND
|
|
0x200000000: Keyword.RECEIVE: RECEIVE
|
|
0x400000000: Keyword.L3_CONNECT: L3_CONNECT
|
|
0x1000000000: Keyword.CLOSE: CLOSE
|
|
0x2000000000: Keyword.SECURITY: SECURITY
|
|
0x4000000000: Keyword.CONFIGURATION: CONFIGURATION
|
|
0x8000000000: Keyword.GLOBAL: GLOBAL
|
|
0x10000000000: Keyword.DROPPED: DROPPED
|
|
0x20000000000: Keyword.PII_PRESENT: PII_PRESENT
|
|
0x40000000000: Keyword.PACKET: PACKET
|
|
0x80000000000: Keyword.ADDRESS: ADDRESS
|
|
0x100000000000: Keyword.CONTEXT_EVENT: CONTEXT_EVENT
|
|
0x200000000000: Keyword.STATE_TRANSITION: STATE_TRANSITION
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-WinHttp/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-WinHTTP-NDF/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{7D5387B0-CBE0-11DA-A94D-0800200C9A66} Manifest Microsoft-Windows-TPM-WMI
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7D7B0C39-93F6-4100-BD96-4DDA859652C5} Manifest Microsoft-Windows-Folder Redirection
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-Folder Redirection/Operational: Microsoft-Windows-Folder Redirection/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-Folder Redirection/Operational: Microsoft-Windows-Folder Redirection/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7D99F6A4-1BEC-4C09-9703-3AAA8148347F} Manifest Microsoft-Windows-Dwm-Redir
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dwm-Redir/Diagnostic
|
|
- keyword:
|
|
0x1: DwmRedir
|
|
0x8000000000000000: Microsoft-Windows-Dwm-Redir/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7DA4FE0E-FD42-4708-9AA5-89B77A224885} Manifest Microsoft-Windows-DfsSvc
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
|
|
{7DD42A49-5329-4832-8DFD-43D979153A88} Manifest Microsoft-Windows-Kernel-Network
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Network/Analytic
|
|
- keyword:
|
|
0x10: KERNEL_NETWORK_KEYWORD_IPV4
|
|
0x20: KERNEL_NETWORK_KEYWORD_IPV6
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Network/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7E58E69A-E361-4F06-B880-AD2F4B64C944} Manifest Microsoft-Windows-StorageManagement
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageManagement/Operational
|
|
0x11: Microsoft-Windows-StorageManagement/Debug
|
|
- keyword:
|
|
0x1: EnterExit
|
|
0x8000000000000000: Microsoft-Windows-StorageManagement/Operational
|
|
0x4000000000000000: Microsoft-Windows-StorageManagement/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{7E7D3382-023C-43CB-95D2-6F0CA6D70381} Manifest Microsoft-Windows-D3D10Level9
|
|
- channel:
|
|
0x10: Microsoft-Windows-D3D10Level9/Analytic
|
|
0x11: Microsoft-Windows-D3D10Level9/PerfTiming
|
|
- keyword:
|
|
0x1: Resources
|
|
0x2: Devices
|
|
0x8000000000000000: Microsoft-Windows-D3D10Level9/Analytic
|
|
0x4000000000000000: Microsoft-Windows-D3D10Level9/PerfTiming
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{7E87506F-BACE-4BF1-BC09-3A1F37045C71} Manifest Microsoft-Windows-DAL-Provider
|
|
- channel:
|
|
0x10: Microsoft-Windows-DAL-Provider/Operational
|
|
0x11: Microsoft-Windows-DAL-Provider/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DAL-Provider/Operational
|
|
0x4000000000000000: Microsoft-Windows-DAL-Provider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7EAFCF79-06A7-460B-8A55-BD0A0C9248AA} Manifest Microsoft-Windows-BranchCache
|
|
- channel:
|
|
0x10: Microsoft-Windows-BranchCache/Operational: Microsoft-Windows-BranchCache/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BranchCache/Operational: Microsoft-Windows-BranchCache/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{7EB5F4CF-A4F6-4E92-AA8F-A8E7EF937745} Manifest Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7F2BD991-AE93-454A-B219-0BC23F02262A} Manifest Microsoft-Windows-MP4SDECD
|
|
- channel:
|
|
0x10: WINDOWS_MP4SDECD_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_MP4SDECD_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{7F812073-B28D-4AFC-9CED-B8010F914EF6} Manifest Microsoft-Windows-PrintService-USBMon
|
|
- channel:
|
|
0x10: Microsoft-Windows-PrintService-USBMon/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PrintService-USBMon/Debug: Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7F8E35CA-68E8-41B9-86FE-D6ADC5B327E7} Manifest Microsoft-IE-JSDumpHeap
|
|
- channel:
|
|
0x10: Microsoft-JSDumpHeap/Diagnostic
|
|
- keyword:
|
|
0x20: jsdumpheap
|
|
0x80000000: jsdumpheapEnvelopeOnly
|
|
0x8000000000000000: Microsoft-JSDumpHeap/Diagnostic
|
|
|
|
{7F912B92-21AD-496E-B97A-88622A72BC42} Manifest Microsoft-Windows-ComDlg32
|
|
- channel:
|
|
0x10: Microsoft-Windows-ComDlg32/Debug: Debug
|
|
0x11: Microsoft-Windows-ComDlg32/Analytic: Analytical
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-ComDlg32/Debug: Debug
|
|
0x4000000000000000: Microsoft-Windows-ComDlg32/Analytic: Analytical
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7F9D83DE-8ABB-457F-98E8-4AD161449ECC} Manifest Microsoft-Windows-PerfDisk
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{7FA514B5-A023-4B62-A6AB-2946A483E065} Manifest Microsoft-Windows-ResetEng-Trace
|
|
- channel:
|
|
0x10: Microsoft-Windows-ResetEng-Trace/Diagnostic
|
|
- keyword:
|
|
0x100000: ResetEngTrace
|
|
0x8000000000000000: Microsoft-Windows-ResetEng-Trace/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{7FCB9791-F481-46D1-846E-2EB6F003C4D3} Manifest Microsoft-Windows-MCCS-SyncController
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: State: State
|
|
0x1000000000: CommsService: CommsService
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{802EC45A-1E99-4B83-9920-87C98277BA9D} Manifest Microsoft-Windows-DxgKrnl
|
|
- channel:
|
|
0x10: Microsoft-Windows-DxgKrnl/Diagnostic
|
|
0x11: Microsoft-Windows-DxgKrnl/Performance
|
|
0x12: Microsoft-Windows-DxgKrnl/Power
|
|
0x13: Microsoft-Windows-DxgKrnl/Contention
|
|
- keyword:
|
|
0x1: Base
|
|
0x2: Profiler
|
|
0x4: References
|
|
0x8: ForceVsync
|
|
0x10: Patch
|
|
0x20: Cdd
|
|
0x40: Resource
|
|
0x80: Memory
|
|
0x100: Dxgkrnl_StatusChangeNotify
|
|
0x200: DxgKrnl_Power
|
|
0x400: DriverEvents
|
|
0x800: LongHaul
|
|
0x1000: StablePower
|
|
0x2000: DefaultOverride
|
|
0x4000: HistoryBuffer
|
|
0x8000: GPUScheduler
|
|
0x10000: DxgKrnl
|
|
0x20000: DxgKrnl_WDI
|
|
0x40000: Miracast
|
|
0x80000: IndirectSwapChain
|
|
0x100000: GPUVA
|
|
0x200000: VidMmWorkerThread
|
|
0x400000: Diagnostics
|
|
0x800000: VirtualGpu
|
|
0x1000000: AdapterLock
|
|
0x2000000: MixedReality
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DxgKrnl/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-DxgKrnl/Performance
|
|
0x2000000000000000: Microsoft-Windows-DxgKrnl/Power
|
|
0x1000000000000000: Microsoft-Windows-DxgKrnl/Contention
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
|
|
{8127F6D4-59F9-4ABF-8952-3E3A02073D5F} Manifest Microsoft-Windows-AppXDeployment
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppXDeployment/Diagnostic
|
|
0x11: Microsoft-Windows-AppXDeployment/Operational
|
|
- keyword:
|
|
0x1: APPXDEPLOYMENT_KEYWORD: AppXDeployment
|
|
0x2: APPMODEL_RUNTIME_DMR_KEYWORD: DMR
|
|
0x10000: AppXDeployment
|
|
0x20000: DMR
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-AppXDeployment/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-AppXDeployment/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{814182FE-58F7-11E1-853C-78E7D1CA7337} Manifest Microsoft-Windows-WiFiHotspotService
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: APIs: APIs
|
|
0x8: Status: Status
|
|
0x10: Verbose: Verbose
|
|
0x4000: MyKeyword: MyKeyword
|
|
0x8000: Memory: Memory
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{815A1F4A-3F8D-4B37-9B31-5142F9D724A5} Manifest Microsoft-Windows-PushNotifications-InProc
|
|
- channel:
|
|
0x10: Microsoft-Windows-PushNotification-InProc/Debug: Microsoft-Windows-PushNotifications-InProc/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PushNotification-InProc/Debug: Microsoft-Windows-PushNotifications-InProc/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{820A42D8-38C4-465D-B64E-D7D56EA1D612} Manifest Microsoft-Windows-UIAutomationCore
|
|
- channel:
|
|
0x10: Microsoft-Windows-UIAutomationCore/Diagnostic
|
|
0x11: Microsoft-Windows-UIAutomationCore/Perf
|
|
0x12: Microsoft-Windows-UIAutomationCore/Debug
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x8000000000000000: Microsoft-Windows-UIAutomationCore/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-UIAutomationCore/Perf
|
|
0x2000000000000000: Microsoft-Windows-UIAutomationCore/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{835B79E2-E76A-44C4-9885-26AD122D3B4D} Manifest Microsoft-Windows-Narrator
|
|
- channel:
|
|
0x10: Microsoft-Windows-Narrator/Diagnostic
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x8000000000000000: Microsoft-Windows-Narrator/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8360BD0F-A7DC-4391-91A7-A457C5C381E4} Manifest Microsoft-Windows-DUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-DUI/Diagnostic
|
|
- keyword:
|
|
0x1: Default
|
|
0x8000000000000000: Microsoft-Windows-DUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{83A9277A-D2FC-4B34-BF81-8CEB4407824F} Manifest Microsoft-Windows-UserDataAccess-CEMAPI
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: CEMAPI
|
|
0x100: debug: Debug
|
|
0x4000000000: Warning: Warning
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{83D6E83B-900B-48A3-9835-57656B6F6474} Manifest Microsoft-Windows-SettingSync
|
|
- channel:
|
|
0x10: Microsoft-Windows-SettingSync/Operational: Microsoft-Windows-SettingSync/Operational
|
|
0x11: Microsoft-Windows-SettingSync/Debug: Microsoft-Windows-SettingSync/Debug
|
|
0x12: Microsoft-Windows-SettingSync/Analytic: Microsoft-Windows-SettingSync/Analytic
|
|
0x13: Microsoft-Windows-SettingSync/VerboseDebug: Microsoft-Windows-SettingSync/VerboseDebug
|
|
- keyword:
|
|
0x1: RoamingSettings
|
|
0x2: AppSync
|
|
0x4: OutOfQuotaDialog
|
|
0x8: CatastrophicRestoreFailureDialog
|
|
0x20: BackupTask
|
|
0x40: BootstrapRestore
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-SettingSync/Operational: Microsoft-Windows-SettingSync/Operational
|
|
0x4000000000000000: Microsoft-Windows-SettingSync/Debug: Microsoft-Windows-SettingSync/Debug
|
|
0x2000000000000000: Microsoft-Windows-SettingSync/Analytic: Microsoft-Windows-SettingSync/Analytic
|
|
0x1000000000000000: Microsoft-Windows-SettingSync/VerboseDebug: Microsoft-Windows-SettingSync/VerboseDebug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{83ED54F0-4D48-4E45-B16E-726FFD1FA4AF} Manifest Microsoft-Windows-Networking-Correlation
|
|
- channel:
|
|
0x10: Microsoft-Windows-Networking-Correlation/Diagnostic: Microsoft-Windows-Networking-Correlation/Diagnostic
|
|
- keyword:
|
|
0x1: ActivityTransfer
|
|
0x2: ActivityStart
|
|
0x4: ActivityStop
|
|
0x8: ActivityPayloadIncluded
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x400000000000: ut:Diagnostic
|
|
0x8000000000000000: Microsoft-Windows-Networking-Correlation/Diagnostic: Microsoft-Windows-Networking-Correlation/Diagnostic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{83FAAA86-63C8-4DD8-A2DA-FBADDDFC0655} Manifest Microsoft-Windows-RTWorkQueue-Extended
|
|
- channel:
|
|
0x10: RTWorkQueueExtended: RTWorkQueue Extended
|
|
- keyword:
|
|
0x8000000000000000: RTWorkQueueExtended: RTWorkQueue Extended
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{8429E243-345B-47C1-8A91-2C94CAF0DAAB} Manifest Microsoft-Windows-DUSER
|
|
- channel:
|
|
0x10: Microsoft-Windows-DUSER/Diagnostic
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: DUserSurface
|
|
0x8000000000000000: Microsoft-Windows-DUSER/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8443CCB7-FEB0-4B8D-8E28-8D4C7CB814E8} Manifest Microsoft-Windows-TabletPC-MathInput
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{84958368-7DA7-49A0-B33D-07FABB879626} Manifest Microsoft-Windows-OLE-Perf
|
|
- channel:
|
|
0x10: Microsoft-Windows-OLE/Clipboard-Performance
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-OLE/Clipboard-Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8530DB6E-51C0-43D6-9D02-A8C2088526CD} Manifest Microsoft-Windows-AssignedAccess
|
|
- channel:
|
|
0x10: Microsoft-Windows-AssignedAccess/Operational
|
|
0x11: Microsoft-Windows-AssignedAccess/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-AssignedAccess/Operational
|
|
0x4000000000000000: Microsoft-Windows-AssignedAccess/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{85A62A0D-7E17-485F-9D4F-749A287193A6} Manifest Microsoft-Windows-Audit-CVE
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{85BE49EA-38F1-4547-A604-80060202FB27} Manifest Microsoft-Windows-PerceptionSensorDataService
|
|
- channel:
|
|
0x10: Microsoft-Windows-PerceptionSensorDataService/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PerceptionSensorDataService/Operational
|
|
|
|
{85C070E6-F9AE-481F-AACB-BC550BFD35A1} Manifest Microsoft-Windows-NFC-ClassExtension
|
|
- channel:
|
|
0x10: Microsoft-Windows-NFC-Class-Extension/Analytical: Analytical
|
|
- keyword:
|
|
0x1: Payload: Payload logging of different types of packets.
|
|
0x2: NCI: NCI packet events.
|
|
0x4: NFP: NFP interface events.
|
|
0x8: Power: Power interface events.
|
|
0x10: RF: RF interface events.
|
|
0x20: Device: General device events.
|
|
0x8000000000000000: Microsoft-Windows-NFC-Class-Extension/Analytical: Analytical
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{85FE7609-FF4A-48E9-9D50-12918E43E1DA} Manifest Microsoft-Windows-L2NACP
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
0x11: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
0x12: Microsoft-Windows-L2NA/Diagnostic: Microsoft-Windows-L2NACP/Diagnostic
|
|
- keyword:
|
|
0x1: Credential
|
|
0x2: Filter
|
|
0x2000000000: ut:Authentication
|
|
0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
0x4000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
0x2000000000000000: Microsoft-Windows-L2NA/Diagnostic: Microsoft-Windows-L2NACP/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{86133982-63D7-4741-928E-EF1349B80219} Manifest Microsoft-Windows-stobject
|
|
- channel:
|
|
0x10: Microsoft-Windows-stobject/Diagnostic
|
|
- keyword:
|
|
0x10000: BatteryMeter
|
|
0x100000: Slideshow
|
|
0x200000: SSO
|
|
0x400000: BatteryCriticalSystemNotification
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-stobject/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{869FB599-80AA-485D-BCA7-DB18D72B7219} Manifest Microsoft-Windows-ThemeUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-ThemeUI/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-ThemeUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{86EFFF39-2BDD-4EFD-BD0B-853D71B2A9DC} Manifest Microsoft-Windows-MPEG2_DLNA-Encoder
|
|
- channel:
|
|
0x10: muxencode
|
|
- keyword:
|
|
0x8000000000000000: muxencode
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{8736922D-E8B2-47EB-8564-23E77E728CF3} Manifest Microsoft-Office-Events
|
|
- channel:
|
|
0x10: OfficeChannel
|
|
0x11: OfficeDebugChannel
|
|
- keyword:
|
|
0x1: CallStack: CallStack keyword
|
|
0x2: Budget: Budget keyword
|
|
0x4: CodeMarker: CodeMarker keyword
|
|
0x8: Sqm: Sqm keyword
|
|
0x10: PCX: PCX Keyword
|
|
0x20: PerfWatson: PerfWatson Keyword
|
|
0x40: Idle: idle
|
|
0x80: SecureReader: SecureReader Keyword
|
|
0x100: Synchronization: Synchronization Keyword
|
|
0x200: Met: Met Keyword
|
|
0x400: MSOLogging: MSO Logging Keyword
|
|
0x8000000000000000: OfficeChannel
|
|
0x4000000000000000: OfficeDebugChannel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: levelPlaceholder: Placeholder level
|
|
|
|
{87D476FE-1A0F-4370-B785-60B028019693} Manifest Microsoft-Windows-UIRibbon
|
|
- channel:
|
|
0x10: Microsoft-Windows-UIRibbon/Diagnostic
|
|
- keyword:
|
|
0x1: Default
|
|
0x8000000000000000: Microsoft-Windows-UIRibbon/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{88C09888-118D-48FC-8863-E1C6D39CA4DF} Manifest Microsoft-Windows-StorageManagement-WSP-Spaces
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageManagement/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageManagement/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{88CD9180-4491-4640-B571-E3BEE2527943} Manifest Microsoft-Windows-PushNotifications-Platform
|
|
- channel:
|
|
0x10: Microsoft-Windows-PushNotification-Platform/Operational: Microsoft-Windows-PushNotifications-Platform/Operational
|
|
0x11: Microsoft-Windows-PushNotification-Platform/Debug: Microsoft-Windows-PushNotifications-Platform/Debug
|
|
0x12: Microsoft-Windows-PushNotification-Platform/Admin: Microsoft-Windows-PushNotifications-Platform/Admin
|
|
- keyword:
|
|
0x1: wpndebug_cloudtoast_isolate: Developer Debug: Isolate Failures in Cloud Toast Notification Delivery
|
|
0x2: wpndebug_localtoast_isolate: Developer Debug: Isolate Failures in Local Toast Notification Delivery
|
|
0x4: wpndebug_raw_dropped: Developer Debug: Debugging Raw Notification Delivery Errors
|
|
0x8: wpndebug_raw_isolate: Developer Debug: Isolate Failures in Raw Notification Delivery
|
|
0x100: wpnconn: Connection Manager
|
|
0x200: wpnend: Endpoint Manager
|
|
0x400: wpntp: Threadpool
|
|
0x800: wpnui: Presentation Layer API
|
|
0x1000: wpnplat: Platform
|
|
0x2000: wpndbg: Debug
|
|
0x4000: wpnprv: Connection Provider
|
|
0x8000: wpnperf_FirstCloudNotification: Performance Scenario: First cloud notification
|
|
0x10000: wpnperf_FirstCloudNotificationWithCloudImage: Performance Scenario: First cloud notification with cloud image download
|
|
0x20000: wpnperf_NewCloudNotificationArrival: Performance Scenario: New cloud notification arrives
|
|
0x40000: wpnperf_NewCloudNotificationArrivalWithCloudImage: Performance Scenario: New cloud notification refering cloud images arrives
|
|
0x80000: wpnperf_MoGoPanning: Performance Scenario: MoGo is panning
|
|
0x100000: wpnperf_MoGoPanningWithCloudImage: Performance Scenario: MoGo is panning with downloading cloud images
|
|
0x200000: wpnperf_Shutdown: Performance Scenario: The Windows Push Notification shutdown
|
|
0x400000: wnptrans: WNP Transport Layer
|
|
0x800000: wpntroubleshoot: WNP Transport Layer
|
|
0x1000000: wpndebug_cloudtile_isolate: Developer Debug: Isolate Failures in Cloud Tile Notification Delivery
|
|
0x2000000: wpndebug_connectivity: Developer Debug: Debugging Cloud Connectivity
|
|
0x4000000: wpndebug_connectivity_isConnected: Developer Debug: Debugging Cloud Connectivity - Is device connected?
|
|
0x8000000: wpndebug_connectivity_error: Developer Debug: Debugging Cloud Connectivity - errors
|
|
0x10000000: wpndebug_platform_setting: Developer Debug: Debugging Platform Setting Changes
|
|
0x20000000: wpndebug_localtile_isolate: Developer Debug: Isolate Failures in Local Tile Notification Delivery
|
|
0x40000000: wpndebug_polling_error: Developer Debug: Debugging Polling Notification Delivery Errors
|
|
0x80000000: wpndev_NotificationE2E: Developer Support: End-to-End trace for new notification
|
|
0x200000000000: ms:Telemetry
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-PushNotification-Platform/Operational: Microsoft-Windows-PushNotifications-Platform/Operational
|
|
0x4000000000000000: Microsoft-Windows-PushNotification-Platform/Debug: Microsoft-Windows-PushNotifications-Platform/Debug
|
|
0x2000000000000000: Microsoft-Windows-PushNotification-Platform/Admin: Microsoft-Windows-PushNotifications-Platform/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{89203471-D554-47D4-BDE4-7552EC219999} Manifest Microsoft-Windows-KdsSvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-KdsSvc/Operational: Microsoft-Windows-KdsSvc/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-KdsSvc/Operational: Microsoft-Windows-KdsSvc/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{8939299F-2315-4C5C-9B91-ABB86AA0627D} Manifest Microsoft-Windows-KnownFolders
|
|
- channel:
|
|
0x10: Microsoft-Windows-Known Folders API Service: Microsoft-Windows-Known Folders/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Known Folders API Service: Microsoft-Windows-Known Folders/Operational
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{89592015-D996-4636-8F61-066B5D4DD739} Manifest Microsoft-Windows-StateRepository
|
|
- channel:
|
|
0x10: Microsoft-Windows-StateRepository/Diagnostic: Microsoft-Windows-StateRepository/Diagnostic
|
|
0x11: Microsoft-Windows-StateRepository/Operational: Microsoft-Windows-StateRepository/Operational
|
|
0x12: Microsoft-Windows-StateRepository/Debug: Microsoft-Windows-StateRepository/Debug
|
|
0x13: Microsoft-Windows-StateRepository/Restricted: Microsoft-Windows-StateRepository/Restricted
|
|
- keyword:
|
|
0x1: STATEREPOSITORY_KEYWORD: StateRepository Keyword
|
|
0x2: STATEREPOSITORY_PERF_KEYWORD: StateRepositoryPerf Keyword
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-StateRepository/Diagnostic: Microsoft-Windows-StateRepository/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-StateRepository/Operational: Microsoft-Windows-StateRepository/Operational
|
|
0x2000000000000000: Microsoft-Windows-StateRepository/Debug: Microsoft-Windows-StateRepository/Debug
|
|
0x1000000000000000: Microsoft-Windows-StateRepository/Restricted: Microsoft-Windows-StateRepository/Restricted
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{899DAACE-4868-4295-AFCD-9EB8FB497561} Manifest Microsoft-Windows-EventSystem
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{89A2278B-C662-4AFF-A06C-46AD3F220BCA} Manifest Microsoft-Windows-CertificateServicesClient-CredentialRoaming
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational: Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845} Manifest Microsoft-Windows-User Profiles Service
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-User Profile Service/Operational: Microsoft-Windows-User Profile Service/Operational
|
|
0x11: Microsoft-Windows-User Profile Service/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-User Profile Service/Operational: Microsoft-Windows-User Profile Service/Operational
|
|
0x2000000000000000: Microsoft-Windows-User Profile Service/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{89FE8F40-CDCE-464E-8217-15EF97D4C7C3} Manifest Microsoft-Windows-Crypto-DPAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-DPAPI/Operational: Microsoft-Windows-Crypto-DPAPI/Operational
|
|
0x11: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
|
|
0x12: Microsoft-Windows-Crypto-DPAPI/Debug: Microsoft-Windows-Crypto-DPAPI/Debug
|
|
- keyword:
|
|
0x1: ETW_TASK_BACKUPSERVICE_OPERATION: BackUp Service Operation
|
|
0x2: ETW_TASK_MASTERKEY_OPERATION: Master Key Operation
|
|
0x4: ETW_TASK_DATAPROTECTION_OPERATION: Data Protection Operation
|
|
0x8000000000000000: Microsoft-Windows-Crypto-DPAPI/Operational: Microsoft-Windows-Crypto-DPAPI/Operational
|
|
0x4000000000000000: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc: Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc
|
|
0x2000000000000000: Microsoft-Windows-Crypto-DPAPI/Debug: Microsoft-Windows-Crypto-DPAPI/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{8A1F9517-3A8C-4A9E-A018-4F17A200F277} Manifest Microsoft-Windows-BTH-BTHPORT
|
|
- channel:
|
|
0x10: Microsoft-Windows-BTH-HCI/HCIRAW
|
|
0x11: Microsoft-Windows-BTH-BTHPORT/HCI
|
|
0x12: Microsoft-Windows-BTH-BTHPORT/L2CAP
|
|
- keyword:
|
|
0x1: Performance
|
|
0x8000000000000000: Microsoft-Windows-BTH-HCI/HCIRAW
|
|
0x4000000000000000: Microsoft-Windows-BTH-BTHPORT/HCI
|
|
0x2000000000000000: Microsoft-Windows-BTH-BTHPORT/L2CAP
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8A93B54B-C75A-49B5-A5BE-9060715B1A33} Manifest Microsoft-Windows-DirectSound
|
|
- channel:
|
|
0x10: Microsoft-Windows-DirectSound/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DirectSound/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8BCDF442-3070-4118-8C94-E8843BE363B3} Manifest Microsoft-Windows-SystemSettingsThreshold
|
|
|
|
{8C416C79-D49B-4F01-A467-E56D3AA8234C} Manifest Microsoft-Windows-Win32k
|
|
- channel:
|
|
0x10: Microsoft-Windows-Win32k/Tracing
|
|
0x11: Microsoft-Windows-Win32k/UIPI
|
|
0x12: Microsoft-Windows-Win32k/Power
|
|
0x13: Microsoft-Windows-Win32k/Concurrency
|
|
0x14: Microsoft-Windows-Win32k/Render
|
|
0x15: Microsoft-Windows-Win32k/Messages
|
|
0x16: Microsoft-Windows-Win32k/Contention
|
|
0x17: Microsoft-Windows-Win32k/Operational
|
|
- keyword:
|
|
0x400: AuditApiCalls
|
|
0x800: CompatImpact
|
|
0x1000: Updates
|
|
0x2000: Focus
|
|
0x4000: UIPI
|
|
0x8000: win32Power
|
|
0x10000: Concurrency
|
|
0x20000: UserActivity
|
|
0x40000: UIUnresponsiveness
|
|
0x80000: ThreadRundown
|
|
0x100000: Rendering
|
|
0x200000: ThreadInfo
|
|
0x400000: MessagePump
|
|
0x800000: MessagePumpInternalAndInput
|
|
0x1000000: TouchInput
|
|
0x2000000: TimerSurvey
|
|
0x4000000: PointerInput
|
|
0x8000000: AutoRotation
|
|
0x10000000: Contention
|
|
0x20000000: TimerInfo
|
|
0x40000000: ComponentHosting
|
|
0x80000000: TrappedACRendering
|
|
0x100000000: Fonts
|
|
0x200000000: NullMessages
|
|
0x400000000: Visualization
|
|
0x800000000: DCompDetails
|
|
0x1000000000: PrecisionTouchpad
|
|
0x2000000000: ContentionTelemetry
|
|
0x4000000000: ProcessInfo
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Win32k/Tracing
|
|
0x4000000000000000: Microsoft-Windows-Win32k/UIPI
|
|
0x2000000000000000: Microsoft-Windows-Win32k/Power
|
|
0x1000000000000000: Microsoft-Windows-Win32k/Concurrency
|
|
0x800000000000000: Microsoft-Windows-Win32k/Render
|
|
0x400000000000000: Microsoft-Windows-Win32k/Messages
|
|
0x200000000000000: Microsoft-Windows-Win32k/Contention
|
|
0x100000000000000: Microsoft-Windows-Win32k/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{8C63B5A5-B484-4381-892D-EDD424582DF7} Manifest Microsoft-Windows-PortableDeviceStatusProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-PortableDeviceStatusProvider/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PortableDeviceStatusProvider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8C8A69AD-CC89-481F-BBAD-FD95B5006256} Manifest Microsoft-Windows-IME-JPTIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-JPTIP/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IME-JPTIP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8CE93926-BDAE-4409-9155-2FE4799EF4D3} Manifest Microsoft-Windows-PrimaryNetworkIcon
|
|
- channel:
|
|
0x10: Microsoft-Windows-PrimaryNetworkIcon/Performance
|
|
0x11: Microsoft-Windows-NetworkLocationWizard/Operational: Microsoft-Windows-NetworkLocationWizard/Operational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-PrimaryNetworkIcon/Performance
|
|
0x4000000000000000: Microsoft-Windows-NetworkLocationWizard/Operational: Microsoft-Windows-NetworkLocationWizard/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{8E6A5303-A4CE-498F-AFDB-E03A8A82B077} Manifest Microsoft-Windows-Ntfs-UBPM
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8E92DEEF-5E17-413B-B927-59B2F06A3CFC} Manifest Microsoft-Antimalware-RTP
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{8F0DB3A8-299B-4D64-A4ED-907B409D4584} Manifest Microsoft-Windows-Runtime-Media
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine
|
|
0x11: Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode
|
|
0x12: Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource
|
|
0x13: Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource
|
|
- keyword:
|
|
0x100000000000: WinRTAdaptiveMediaSource
|
|
0x200000000000: WinRTMediaStreamSource
|
|
0x400000000000: WinRTTranscode
|
|
0x800000000000: WinRTCaptureEngine
|
|
0x8000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine
|
|
0x4000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode
|
|
0x2000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource
|
|
0x1000000000000000: Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{8F2048E0-F260-4F57-A8D1-932376291682} Manifest Microsoft-Windows-MediaEngine
|
|
- channel:
|
|
0x10: MediaFoundationMediaEngine: Media Foundation MediaEngine
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: MediaFoundationMediaEngine: Media Foundation MediaEngine
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{901D2AFA-4FF6-46D7-8D0E-53645E1A47F5} Manifest Microsoft-Windows-Heap-Snapshot
|
|
|
|
{906B8A99-63CE-58D7-86AB-10989BBD5567} Manifest Microsoft-Windows-HelloForBusiness
|
|
- channel:
|
|
0x10: Microsoft-Windows-HelloForBusiness/Operational
|
|
- keyword:
|
|
0x1: Internal
|
|
0x2: Component
|
|
0x8000000000000000: Microsoft-Windows-HelloForBusiness/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x10: Success: Success
|
|
|
|
{911F2490-C3DB-4781-94E6-7A9C404803E5} Manifest Microsoft-Antimalware-UI
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{914ED502-B70D-4ADD-B758-95692854F8A3} Manifest Microsoft-Windows-QoS-Pacer
|
|
- channel:
|
|
0x10: Microsoft-Windows-QoS-Pacer/Diagnostic
|
|
- keyword:
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-QoS-Pacer/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{91CC1150-71AA-47E2-AE18-C96E61736B6F} Manifest Microsoft-Windows-Schannel-Events
|
|
- channel:
|
|
0x10: Microsoft-Windows-Schannel-Events/Perf
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Schannel-Events/Perf
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{91F42016-0B4E-4A4B-9BBB-825D06CBED35} Manifest Microsoft-Windows-MobilityCenter
|
|
- channel:
|
|
0x10: Microsoft-Windows-MobilityCenter/Performance
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-MobilityCenter/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{91F5FB12-FDEA-4095-85D5-614B495CD9DE} Manifest Microsoft-Windows-Resource-Exhaustion-Resolver
|
|
- channel:
|
|
0x10: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational
|
|
- keyword:
|
|
0x1000: RDR_RES_KEYWORD_LIFECYCLE: Lifecycle
|
|
0x2000: RDR_RES_KEYWORD_MEMORY_EXHAUSTION: System Commit Limit (Virtual Memory) Exhaustion
|
|
0x4000: RDR_RES_KEYWORD_LEAK_DIAGNOSIS: Memory leak diagnosis
|
|
0x8000000000000000: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational: Microsoft-Windows-Resource-Exhaustion-Resolver/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{92061E3D-21CD-45BC-A3DF-0E8AE5E8580A} Manifest Microsoft-Windows-RadioManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-RadioManager/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RadioManager/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9213C3E1-0D6C-52DD-78EA-F3B082111406} Manifest Microsoft-Windows-PriResources-Deployment
|
|
|
|
{922CDCF3-6123-42DA-A877-1A24F23E39C5} Manifest Microsoft-WindowsPhone-CoreMessaging
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x200000: CoreUIService: CoreMessaging CoreUIService
|
|
0x100000000: MessagingPerformance: CoreMessaging MessagingPerformance
|
|
0x200000000: Session: CoreMessaging Session
|
|
0x400000000: Dispatcher: CoreMessaging Dispatcher
|
|
0x800000000: RegistrarClient: CoreMessaging RegistrarClient
|
|
0x1000000000: Messaging: CoreMessaging Messaging
|
|
0x2000000000: Formatting: CoreMessaging Formatting
|
|
0x40000000000: SelfHostInfo: CoreMessaging SelfHostInfo
|
|
0x80000000000: SelfHostError: CoreMessaging SelfHostError
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9249D0D0-F034-402F-A29B-92FA8853D9F3} Manifest Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance
|
|
0x11: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance
|
|
0x4000000000000000: Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational: Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x4: win:Informational: Information
|
|
|
|
{92765247-03A9-4AE3-A575-B42264616E78} Manifest Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
|
|
- channel:
|
|
0x10: Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational: BFE IPsec Connections' Resource Flows Operational Log
|
|
- keyword:
|
|
0x20000000000: ut:PiiPresent
|
|
0x8000000000000000: Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational: BFE IPsec Connections' Resource Flows Operational Log
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{92AAB24D-D9A9-4A60-9F94-201FED3E3E88} Manifest Microsoft-Windows-EndpointTriggerProvider
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{92AB58D3-F351-4AF5-9C72-D52F36EE2C92} Manifest Microsoft-Windows-WPD-MTPBT
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-MTPBT/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-MTPBT/Analytic: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9363CCD9-D429-4452-9ADB-2501E704B810} Manifest Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational
|
|
0x11: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug
|
|
- keyword:
|
|
0x100: search: Search
|
|
0x200: cancel: Cancel
|
|
0x400: errors: Errors
|
|
0x800: object: Object
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational
|
|
0x4000000000000000: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug: Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{93A19AB3-FB2C-46EB-91EF-56B0A318B983} Manifest Microsoft-Windows-NetworkProvisioning
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetworkProvisioning/Analytic: Microsoft-Windows-NetworkProvisioning/Analytic
|
|
0x11: Microsoft-Windows-NetworkProvisioning/Operational: Microsoft-Windows-NetworkProvisioning/Operational
|
|
- keyword:
|
|
0x1: XmlValidation
|
|
0x2: XmlProcessing
|
|
0x4: Purge
|
|
0x8: Diagnostics
|
|
0x10: Service
|
|
0x20: Profile
|
|
0x40: Metadata
|
|
0x80: ActivationTask
|
|
0x100: ProvisioningAgent
|
|
0x200: Notifications
|
|
0x400: PurgeTask
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NetworkProvisioning/Analytic: Microsoft-Windows-NetworkProvisioning/Analytic
|
|
0x4000000000000000: Microsoft-Windows-NetworkProvisioning/Operational: Microsoft-Windows-NetworkProvisioning/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{93C05D69-51A3-485E-877F-1806A8731346} Manifest Microsoft-Windows-LUA
|
|
- channel:
|
|
0x10: Microsoft-Windows-LUA-ConsentUI/Diagnostic: Microsoft-Windows-LUA-ConsentUI/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-LUA-ConsentUI/Diagnostic: Microsoft-Windows-LUA-ConsentUI/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{945A8954-C147-4ACD-923F-40C45405A658} Manifest Microsoft-Windows-WindowsUpdateClient
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-WindowsUpdateClient/Operational
|
|
0x11: Microsoft-Windows-WindowsUpdateClient/Analytic
|
|
- keyword:
|
|
0x1: connection: Connection
|
|
0x2: detect: Check for Updates
|
|
0x4: download: Download
|
|
0x8: install: Installation
|
|
0x10: success: Success
|
|
0x20: failure: Failure
|
|
0x40: reboot: Reboot
|
|
0x80: state: State
|
|
0x100: selfupdate: SelfUpdate
|
|
0x200: service: Service
|
|
0x400: health: Health
|
|
0x800: Performance: Performance
|
|
0x1000: sleepstudy
|
|
0x2000: started: Started
|
|
0x4000: Revert: Revert
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-WindowsUpdateClient/Operational
|
|
0x2000000000000000: Microsoft-Windows-WindowsUpdateClient/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{9485FA1E-23CD-49A1-84E3-11D8BC550CB7} Manifest Microsoft-Windows-propsys
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{951B41EA-C830-44DC-A671-E2C9958809B8} Manifest Microsoft-Windows-Kernel-Interrupt-Steering
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic
|
|
- keyword:
|
|
0x1: IntSteer
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{952773BF-C2B7-49BC-88F4-920744B82C43} Manifest Microsoft-Windows-TerminalServices-Printers
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-Printers/Admin: Admin
|
|
0x11: Microsoft-Windows-TerminalServices-Printers/Analytic: Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-Printers/Operational: Operational
|
|
0x13: Microsoft-Windows-TerminalServices-Printers/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-Printers/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-Printers/Analytic: Analytic
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-Printers/Operational: Operational
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-Printers/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{95353826-4FBE-41D4-9C42-F521C6E86360} Manifest Microsoft-Windows-OfflineFiles
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-OfflineFiles/Operational: Microsoft-Windows-OfflineFiles/Operational
|
|
0x11: Microsoft-Windows-OfflineFiles/Analytic: Microsoft-Windows-OfflineFiles/Analytic
|
|
0x12: Microsoft-Windows-OfflineFiles/Debug: Microsoft-Windows-OfflineFiles/Debug
|
|
0x13: Microsoft-Windows-OfflineFiles/SyncLog: Microsoft-Windows-OfflineFiles/SyncLog
|
|
- keyword:
|
|
0x1: CscEvtKeywd_Agent: Background agent
|
|
0x2: CscEvtKeywd_Transition: Online/offline transitions
|
|
0x4: CscEvtKeywd_ItemStateChange: Cached item state changes
|
|
0x8: CscEvtKeywd_UserSessionChange: User logon/logoff
|
|
0x10: CscEvtKeywd_StartupShutdown: Service startup/shutdown
|
|
0x20: CscEvtKeywd_Setting: Settings activity
|
|
0x40: CscEvtKeywd_Sync: Cache item sync
|
|
0x80: CscEvtKeywd_SyncConflict: Cache item sync conflicts
|
|
0x100: CscEvtKeywd_Encrypt: Encryption/unencryption of cache
|
|
0x200: CscEvtKeywd_BGSync: Background sync
|
|
0x400: CscEvtKeywd_ExcludedFileType: Blocked excluded file extensions
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-OfflineFiles/Operational: Microsoft-Windows-OfflineFiles/Operational
|
|
0x2000000000000000: Microsoft-Windows-OfflineFiles/Analytic: Microsoft-Windows-OfflineFiles/Analytic
|
|
0x1000000000000000: Microsoft-Windows-OfflineFiles/Debug: Microsoft-Windows-OfflineFiles/Debug
|
|
0x800000000000000: Microsoft-Windows-OfflineFiles/SyncLog: Microsoft-Windows-OfflineFiles/SyncLog
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{9580D7DD-0379-4658-9870-D5BE7D52D6DE} Manifest Microsoft-Windows-WLAN-AutoConfig
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLAN-AutoConfig/Operational: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
0x8: System: System
|
|
0x11: Microsoft-Windows-WLAN-Autoconfig/Diagnostic: Microsoft-Windows-WLAN-AutoConfig/Diagnostic
|
|
- keyword:
|
|
0x1: IntfContext
|
|
0x2: IntfMgr
|
|
0x4: State
|
|
0x8: Session
|
|
0x10: API
|
|
0x20: MSM
|
|
0x40: MSMSEC
|
|
0x80: SOFTAP
|
|
0x100: MSAM
|
|
0x200: WlanConnect
|
|
0x400: LwtDiagnostic
|
|
0x10000000: TelemetryReserved28
|
|
0x20000000: Telemetry
|
|
0x40000000: Measures
|
|
0x80000000: CriticalData
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x400000000000: ut:Scan
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WLAN-AutoConfig/Operational: Microsoft-Windows-WLAN-AutoConfig/Operational
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: Microsoft-Windows-WLAN-Autoconfig/Diagnostic: Microsoft-Windows-WLAN-AutoConfig/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{959F1FAC-7CA8-4ED1-89DC-CDFA7E093CB0} Manifest Microsoft-Windows-HealthCenterCPL
|
|
- channel:
|
|
0x10: Microsoft-Windows-HealthCenterCPL/Performance
|
|
- keyword:
|
|
0x10000: HealthCenterCPL
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-HealthCenterCPL/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9640427C-7D03-4331-B8EE-FB77625BF381} Manifest Microsoft-Windows-MSFTEDIT
|
|
- channel:
|
|
0x10: Microsoft-Windows-MSFTEDIT/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-MSFTEDIT/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{966CD1C0-3F69-42AD-9877-517DCE8462B4} Manifest Microsoft-Windows-IndirectDisplays-ClassExtension-Events
|
|
- channel:
|
|
0x10: Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic
|
|
- keyword:
|
|
0x1: DdiCalls
|
|
0x2: DdiCallbacks
|
|
0x4: ObjectLifetime
|
|
0x8: FrameProcessing
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{968F313B-097F-4E09-9CDD-BC62692D138B} Manifest Microsoft-Windows-DirectShow-Core
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: DirectShowPluginControl
|
|
0x11: DirectShowFilterGraph: DirectShow FilterGraph
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: DirectShowPluginControl
|
|
0x2000000000000000: DirectShowFilterGraph: DirectShow FilterGraph
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{96AC7637-5950-4A30-B8F7-E07E8E5734C1} Manifest Microsoft-Windows-Kernel-BootDiagnostics
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{96F4A050-7E31-453C-88BE-9634F4E02139} Manifest Microsoft-Windows-UserPnp
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-UserPnp/SchedulerOperations
|
|
0x11: Microsoft-Windows-UserPnp/Performance
|
|
0x12: Microsoft-Windows-UserPnp/DeviceMetadata/Debug
|
|
0x13: Microsoft-Windows-UserPnp/DeviceInstall
|
|
0x14: Microsoft-Windows-UserPnp/ActionCenter
|
|
- keyword:
|
|
0x1: PerfTrackContext
|
|
0x2: UserPnp
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-UserPnp/SchedulerOperations
|
|
0x2000000000000000: Microsoft-Windows-UserPnp/Performance
|
|
0x1000000000000000: Microsoft-Windows-UserPnp/DeviceMetadata/Debug
|
|
0x800000000000000: Microsoft-Windows-UserPnp/DeviceInstall
|
|
0x400000000000000: Microsoft-Windows-UserPnp/ActionCenter
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{973143DD-F3C7-4EF5-B156-544AC38C39B6} Manifest Microsoft-Windows-PerfCtrs
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{9741FD4E-3757-479F-A3C6-FC49F6D5EDD0} Manifest NetJoin
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{97CA8142-10B1-4BAA-9FBB-70A7D11231C3} Manifest Microsoft-Windows-ShellCommon-StartLayoutPopulation
|
|
- channel:
|
|
0x10: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic
|
|
0x11: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
|
|
- keyword:
|
|
0x10000: Shell
|
|
0x20000: Start
|
|
0x40000: Layout
|
|
0x8000000000000000: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{9803DAA0-81BA-483A-986C-F0E395B9F8D1} Manifest Microsoft-Windows-EDP-AppLearning
|
|
- channel:
|
|
0x10: Microsoft-Windows-EDP-Application-Learning/Admin: Microsoft Windows Information Protection Application Learning Log Channel
|
|
- keyword:
|
|
0x10: EDP-Audit-Keyword-AppLearning: Windows Information Protection Audit Application Learning Log Keyword
|
|
0x20: EDP-Audit-Keyword-SitesLearning: Windows Information Protection Audit Sites Learning Log Keyword
|
|
0x8000000000000000: Microsoft-Windows-EDP-Application-Learning/Admin: Microsoft Windows Information Protection Application Learning Log Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{982824E5-E446-46AE-BC74-836401FFB7B6} Manifest Microsoft-Windows-Media-Streaming
|
|
- channel:
|
|
0x10: Microsoft-Windows-Media-Streaming/DMC
|
|
0x11: Microsoft-Windows-Media-Streaming/DMR
|
|
0x12: Microsoft-Windows-Media-Streaming/MDE
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Media-Streaming/DMC
|
|
0x4000000000000000: Microsoft-Windows-Media-Streaming/DMR
|
|
0x2000000000000000: Microsoft-Windows-Media-Streaming/MDE
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{988C59C5-0A1C-45B6-A555-0C62276E327D} Manifest Microsoft-Windows-SMBClient
|
|
- channel:
|
|
0x10: Microsoft-Windows-SMBClient/HelperClassDiagnostic: Microsoft-Windows-SMBClient/HelperClassDiagnostic
|
|
0x11: Microsoft-Windows-SMBClient/ObjectStateDiagnostic: Microsoft-Windows-SMBClient/ObjectStateDiagnostic
|
|
0x12: Microsoft-Windows-SMBClient/Operational: Microsoft-Windows-SMBClient/Operational
|
|
0x13: Microsoft-Windows-SMBClient/Analytic: Microsoft-Windows-SMBClient/XPerfAnalytic
|
|
0x14: Microsoft-Windows-SmbClient/Diagnostic: Microsoft-Windows-SMBClient/Diagnostic
|
|
0x15: Microsoft-Windows-SmbClient/Connectivity: Microsoft-Windows-SMBClient/Connectivity
|
|
0x16: Microsoft-Windows-SmbClient/Security: Microsoft-Windows-SMBClient/Security
|
|
0x17: Microsoft-Windows-SmbClient/Audit: Microsoft-Windows-SMBClient/Audit
|
|
- keyword:
|
|
0x1: Smb_Perf
|
|
0x2: Networking_Perf
|
|
0x4: Smb_Info
|
|
0x8: InfoCache_Info
|
|
0x10: Smb_TFO
|
|
0x20: Smb_MultiChannel
|
|
0x40: Smb_Connectivity
|
|
0x80: Smb_Authentication
|
|
0x100: Smb_Authorization
|
|
0x200: Smb_Security
|
|
0x40000000: PacketStart
|
|
0x80000000: PacketEnd
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x40000000000: ut:Packet
|
|
0x400000000000: ut:Diagnostic
|
|
0x800000000000: PduFull
|
|
0x8000000000000000: Microsoft-Windows-SMBClient/HelperClassDiagnostic: Microsoft-Windows-SMBClient/HelperClassDiagnostic
|
|
0x4000000000000000: Microsoft-Windows-SMBClient/ObjectStateDiagnostic: Microsoft-Windows-SMBClient/ObjectStateDiagnostic
|
|
0x2000000000000000: Microsoft-Windows-SMBClient/Operational: Microsoft-Windows-SMBClient/Operational
|
|
0x1000000000000000: Microsoft-Windows-SMBClient/Analytic: Microsoft-Windows-SMBClient/XPerfAnalytic
|
|
0x800000000000000: Microsoft-Windows-SmbClient/Diagnostic: Microsoft-Windows-SMBClient/Diagnostic
|
|
0x400000000000000: Microsoft-Windows-SmbClient/Connectivity: Microsoft-Windows-SMBClient/Connectivity
|
|
0x200000000000000: Microsoft-Windows-SmbClient/Security: Microsoft-Windows-SMBClient/Security
|
|
0x100000000000000: Microsoft-Windows-SmbClient/Audit: Microsoft-Windows-SMBClient/Audit
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{98BF1CD3-583E-4926-95EE-A61BF3F46470} Manifest Microsoft-Windows-CertificationAuthorityClient-CertCli
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{98E0765D-8C42-44A3-A57B-760D7F93225A} Manifest Microsoft-Windows-AppHost
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppHost/Admin: Admin
|
|
0x11: Microsoft-Windows-AppHost/Internal
|
|
0x12: Microsoft-Windows-AppHost/Diagnostic
|
|
0x13: Microsoft-Windows-AppHost/ApplicationTracing: AppTracing
|
|
- keyword:
|
|
0x1: WWAHOST_KEYWORD: AppHost
|
|
0x2: WWAHOST_APPLICATION_KEYWORD: AppHostApplication
|
|
0x4: WWAHOST_DIAGNOSTIC_KEYWORD: AppHostDiagnostic
|
|
0x10000: WwaHost
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-AppHost/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-AppHost/Internal
|
|
0x2000000000000000: Microsoft-Windows-AppHost/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-AppHost/ApplicationTracing: AppTracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1} Manifest Microsoft-Windows-Security-Kerberos
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kerberos/Operational: Operational
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-Kerberos/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{990C55FC-2662-47F6-B7D7-EB3C027CB13F} Manifest Microsoft-Windows-Storage-Tiering-IoHeat
|
|
- channel:
|
|
0x10: Microsoft-Windows-Storage-Tiering-IoHeat/Heat: Tiering Heat Measurement Channel
|
|
- keyword:
|
|
0x10: STORAGE_TIERING_KEYWORD_INIT
|
|
0x20: STORAGE_TIERING_KEYWORD_DATA
|
|
0x40: STORAGE_TIERING_KEYWORD_READ
|
|
0x80: STORAGE_TIERING_KEYWORD_WRITE
|
|
0x100: STORAGE_TIERING_KEYWORD_DELETE
|
|
0x200: STORAGE_TIERING_KEYWORD_TIERMOVE
|
|
0x8000000000000000: Microsoft-Windows-Storage-Tiering-IoHeat/Heat: Tiering Heat Measurement Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{991F8FE6-249D-44D6-B93D-5A3060C1DEDB} Manifest Microsoft-Windows-SPB-HIDI2C
|
|
- channel:
|
|
0x10: Microsoft-Windows-SPB-HIDI2C/Analytic: Analytic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SPB-HIDI2C/Analytic: Analytic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{99806515-9F51-4C2F-B918-1EAE407AA8CB} Manifest Microsoft-Windows-Superfetch
|
|
- channel:
|
|
0x10: Microsoft-Windows-Superfetch/Main: Main
|
|
0x11: Microsoft-Windows-Superfetch/StoreLog: StoreLog
|
|
0x12: Microsoft-Windows-Superfetch/PfApLog
|
|
- keyword:
|
|
0x1: Prefetch
|
|
0x2: Store
|
|
0x4: StoreLog
|
|
0x10: PfAp
|
|
0x20: Combine
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Superfetch/Main: Main
|
|
0x4000000000000000: Microsoft-Windows-Superfetch/StoreLog: StoreLog
|
|
0x2000000000000000: Microsoft-Windows-Superfetch/PfApLog
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9988748E-C2E8-4054-85F6-0C3E1CAD2470} Manifest Microsoft-Windows-Resource-Exhaustion-Detector
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Resource-Exhaustion-Detector/Operational: Microsoft-Windows-Resource-Exhaustion-Detector/Operational
|
|
- keyword:
|
|
0x10000000: RDR_DET_KEYWORD_LIFECYCLE: Events related to lifecycle of resource exhaustion detector.
|
|
0x20000000: RDR_DET_KEYWORD_MEMORY_EXHAUSTION: Events related to exhaustion of system commit limit (virtual memory).
|
|
0x40000000: RDR_DET_KEYWORD_HEAP_LEAK_DETECTION: Event generated when heap leak detection is about to be started on a process.
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Resource-Exhaustion-Detector/Operational: Microsoft-Windows-Resource-Exhaustion-Detector/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{99C66BA7-5A97-40D5-AA01-8A07FB3DB292} Manifest Microsoft-Windows-UserDataAccess-PimIndexMaintenance
|
|
|
|
{9A6615A6-902A-4705-804B-57B8813089B8} Manifest Microsoft-WindowsPhone-Net-Cellcore-CellManager
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Trace: Trace
|
|
0x8: StateChange: StateChange
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9B307223-4E4D-4BF5-9BE8-995CD8E7420B} Manifest Microsoft-Windows-NetworkManagerTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_FirstAddressArrivalEvent
|
|
0x2: Keyword_LastAddressRemovalEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9B6123DC-9AF6-4430-80D7-7D36F054FB9F} Manifest Microsoft-Windows-CDROM
|
|
- channel:
|
|
0x10: Microsoft-Windows-CDROM/Operational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-CDROM/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9B7E4C0F-342C-4106-A19F-4F2704F689F0} Manifest Microsoft-Windows-Direct3D10
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3D10/Analytic
|
|
- keyword:
|
|
0x1: Names
|
|
0x2: Devices
|
|
0x4: Resources
|
|
0x8000000000000000: Microsoft-Windows-Direct3D10/Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{9B7E4C8F-342C-4106-A19F-4F2704F689F0} Manifest Microsoft-Windows-Direct3D10_1
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3D10_1/Analytic
|
|
- keyword:
|
|
0x1: Names
|
|
0x2: Devices
|
|
0x4: Resources
|
|
0x8000000000000000: Microsoft-Windows-Direct3D10_1/Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{9C205A39-1250-487D-ABD7-E831C6290539} Manifest Microsoft-Windows-Kernel-PnP
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Kernel-PnP/Configuration: Device Configuration
|
|
0x11: Microsoft-Windows-Kernel-PnP/Boot Diagnostic: Boot Diagnostic Channel
|
|
0x12: Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic: Device Enumeration Diagnostic Channel
|
|
0x13: Microsoft-Windows-Kernel-PnP/Configuration Diagnostic: Configuration Diagnostic Channel
|
|
0x14: Microsoft-Windows-Kernel-PnP/Driver Diagnostic: Driver Diagnostic Channel
|
|
- keyword:
|
|
0x20: Performance
|
|
0x1000: BootInit
|
|
0x2000: DriverLoad
|
|
0x4000: DriverUnload
|
|
0x8000: DeviceStart
|
|
0x10000: DeviceEnum
|
|
0x20000: DriverInit
|
|
0x40000: DeviceEject
|
|
0x80000: DeviceConfig
|
|
0x100000: DriverDatabase
|
|
0x200000: DevQuery
|
|
0x400000: CfgMgr
|
|
0x800000: Enumeration
|
|
0x1000000: ObjectLists
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Kernel-PnP/Configuration: Device Configuration
|
|
0x2000000000000000: Microsoft-Windows-Kernel-PnP/Boot Diagnostic: Boot Diagnostic Channel
|
|
0x1000000000000000: Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic: Device Enumeration Diagnostic Channel
|
|
0x800000000000000: Microsoft-Windows-Kernel-PnP/Configuration Diagnostic: Configuration Diagnostic Channel
|
|
0x400000000000000: Microsoft-Windows-Kernel-PnP/Driver Diagnostic: Driver Diagnostic Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{9C2A37F3-E5FD-5CAE-BCD1-43DAFEEE1FF0} Manifest Microsoft-Windows-Store
|
|
- channel:
|
|
0x10: Microsoft-Windows-Store/Operational
|
|
- keyword:
|
|
0x100000000000: Messages
|
|
0x200000000000: StateMachine
|
|
0x8000000000000000: Microsoft-Windows-Store/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9CC0413E-5717-4AF5-82EB-6103D8707B45} Manifest Microsoft-Windows-EapMethods-RasTls
|
|
- channel:
|
|
0x10: Microsoft-Windows-EapMethods-RasTls/Operational: Operational Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EapMethods-RasTls/Operational: Operational Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{9CC69D1C-7917-4ACD-8066-6BF8B63E551B} Manifest Microsoft-AppV-ServiceLog
|
|
- channel:
|
|
0x10: Microsoft-AppV-Client/Debug
|
|
- keyword:
|
|
0x1: DebugTrace: Debug Out Messages.
|
|
0x8000000000000000: Microsoft-AppV-Client/Debug
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9D55B53D-449B-4824-A637-24F9D69AA02F} Manifest Microsoft-Windows-Winsrv
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-Winsrv/Analytic
|
|
- keyword:
|
|
0x100: Perf
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-Winsrv/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9DB0FDB5-3B21-440E-A94B-63738A4BE5DE} Manifest Microsoft-Windows-FunctionDiscovery
|
|
- channel:
|
|
0x10: Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9E03F75A-BCBE-428A-8F3C-D46F2A444935} Manifest Microsoft-Windows-IdleTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_IdleTriggerEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9E12CEB1-E3FF-46AD-A0AA-11738B122D20} Manifest Microsoft-Windows-WebcamExperience
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebcamProvider/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WebcamProvider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9E3B3947-CA5D-4614-91A2-7B624E0E7244} Manifest Microsoft-IE
|
|
- channel:
|
|
0x10: Microsoft-IE/Diagnostic
|
|
0x11: Microsoft-Windows-WebPlatStorage-Server
|
|
- keyword:
|
|
0x1: element_rundown
|
|
0x2: webocevents
|
|
0x4: draganddrop
|
|
0x8: gwnd
|
|
0x10: eventsandtimers
|
|
0x20: generaltracing
|
|
0x40: selfhost
|
|
0x80: scheduler_api
|
|
0x100: primarynav
|
|
0x200: subsystem
|
|
0x400: extended
|
|
0x800: verbose
|
|
0x1000: mshtml
|
|
0x2000: marshalling
|
|
0x4000: DDT
|
|
0x8000: jscript
|
|
0x10000: ap
|
|
0x20000: canvas
|
|
0x40000: controlpanel
|
|
0x80000: privacie
|
|
0x100000: pagemark
|
|
0x200000: scroll
|
|
0x400000: jscript_verbose
|
|
0x800000: paintbeat
|
|
0x1000000: mediaengine
|
|
0x2000000: invalidation
|
|
0x4000000: pageloadbreakdown
|
|
0x8000000: touch
|
|
0x10000000: composition
|
|
0x20000000: animation
|
|
0x40000000: flipahead
|
|
0x80000000: composition_verbose
|
|
0x100000000: privaterefcount
|
|
0x200000000: internalrefcount
|
|
0x400000000: subrefcount
|
|
0x800000000: extensions
|
|
0x1000000000: containers
|
|
0x8000000000000000: Microsoft-IE/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-WebPlatStorage-Server
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9E9BBA3C-2E38-40CB-99F4-9E8281425164} Manifest Microsoft-Windows-Dwm-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dwm-Core/Diagnostic
|
|
- keyword:
|
|
0x1: DwmCore
|
|
0x2: DetailedFrameInformation
|
|
0x4: FrameDrawInconsistencyInformation
|
|
0x8: DwmFrameRate
|
|
0x10: AnimationScreenOff
|
|
0x20: ProcessAttribution
|
|
0x10000: FrameVisualization
|
|
0x20000: LowOverheadSmoothnessTracking
|
|
0x40000: FrameVisualizationExtra
|
|
0x80000: DwmHolographic
|
|
0x100000: WorkPerFrame
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Dwm-Core/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{9F0C4EA8-EC01-4200-A00D-B9701CBEA5D8} Manifest Microsoft-Windows-PowerCfg
|
|
- channel:
|
|
0x10: Microsoft-Windows-PowerCfg/Diagnostic
|
|
- keyword:
|
|
0x10000: PowerCpl
|
|
0x8000000000000000: Microsoft-Windows-PowerCfg/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9F650C63-9409-453C-A652-83D7185A2E83} Manifest Microsoft-Windows-SCPNP
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{9F7B5DF4-B902-48BC-BC94-95068C6C7D26} Manifest Microsoft-Windows-Volume
|
|
- channel:
|
|
0x10: Microsoft-Windows-Volume/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Volume/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{9F973C1D-D056-4E38-84A5-7BE81CDD6AB6} Manifest Microsoft-Windows-SettingSync-Azure
|
|
- channel:
|
|
0x10: Microsoft-Windows-SettingSync-Azure/Operational: Microsoft-Windows-SettingSync-Azure/Operational
|
|
0x11: Microsoft-Windows-SettingSync-Azure/Debug: Microsoft-Windows-SettingSync-Azure/Debug
|
|
- keyword:
|
|
0x1: RoamingSettings
|
|
0x8000000000000000: Microsoft-Windows-SettingSync-Azure/Operational: Microsoft-Windows-SettingSync-Azure/Operational
|
|
0x4000000000000000: Microsoft-Windows-SettingSync-Azure/Debug: Microsoft-Windows-SettingSync-Azure/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{9FA5DD5D-999E-466A-8CA9-7B3A66F8882F} Manifest Microsoft-Windows-DriverFrameworks-UserMode-Performance
|
|
|
|
{9FC66DD7-98C7-4B83-8293-46A18439B03B} Manifest Microsoft-Windows-CloudStorageWizard
|
|
- channel:
|
|
0x10: Microsoft-Windows-CloudStorageWizard/Operational: Microsoft-Windows-CloudStorageWizard/Operational
|
|
0x11: Microsoft-Windows-CloudStorageWizard/Analytic: Microsoft-Windows-CloudStorageWizard/Analytic
|
|
- keyword:
|
|
0x1: CloudStorageWizard
|
|
0x8000000000000000: Microsoft-Windows-CloudStorageWizard/Operational: Microsoft-Windows-CloudStorageWizard/Operational
|
|
0x4000000000000000: Microsoft-Windows-CloudStorageWizard/Analytic: Microsoft-Windows-CloudStorageWizard/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A0AF438F-4431-41CB-A675-A265050EE947} Manifest Microsoft-Windows-Kernel-LicensingSqm
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A0B7550F-4E9A-4F03-AD41-B8042D06A2F7} Manifest Microsoft-WindowsPhone-CoreUIComponents
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: NavigationPerformance: NavigationPerformance
|
|
0x8: ForegroundTaskManager: CUI ForegroundTaskManager
|
|
0x10: Server: CUI Server
|
|
0x20: ServerSession: CUI ServerSession
|
|
0x40: SessionManager: CUI SessionManager
|
|
0x80: ServerTask: CUI ServerTask
|
|
0x100: ServerWindow: CUI ServerWindow
|
|
0x200: WindowManager: CUI WindowManager
|
|
0x400: RotationManager: CUI RotationManager
|
|
0x800: PageNavigationController: CUI PageNavigationController
|
|
0x1000: PageManagerContainer: CUI PageManagerContainer
|
|
0x2000: PageManager: CUI PageManager
|
|
0x4000: Page: CUI Page
|
|
0x8000: ExecutionManagerClient: CUI ExecutionManagerClient
|
|
0x10000: NavigationWindow: CUI NavigationWindow
|
|
0x20000: Task: CUI Task
|
|
0x40000: PMEnumerationManager: CUI PMEnumerationManager
|
|
0x100000: TimeoutInfo: CUI TimeoutInfo
|
|
0x200000: CoreUIService: CUI CoreUIService
|
|
0x400000: NavigationPerformanceTriggers: CUI NavigationPerformanceTriggers
|
|
0x800000: BrokerSessionManager: CUI BrokerSessionManager
|
|
0x1000000: NavigationClient: CUI NavigationClient
|
|
0x2000000: SessionLayer: CUI SessionLayer
|
|
0x4000000: ForegroundSessionLayer: CUI ForegroundSessionLayer
|
|
0x10000000: ViewManager: OneCore CUI ViewManager
|
|
0x20000000: ViewActivator: OneCore CUI ViewActivator
|
|
0x40000000: BasicViewAdapter: OneCore CUI BasicViewAdapter
|
|
0x80000000: ClientViewCreator: OneCore CUI ClientViewCreator
|
|
0x100000000: MessagingPerformance: CUI MessagingPerformance
|
|
0x2000000000: Proxy: CUI Proxy
|
|
0x40000000000: SelfHostInfo: CUI SelfHostInfo
|
|
0x80000000000: SelfHostError: CUI SelfHostError
|
|
0x2000000000000: win:ReservedKeyword49
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A0C1853B-5C40-4B15-8766-3CF1C58F985A} Manifest Microsoft-Windows-PowerShell
|
|
- channel:
|
|
0x10: Microsoft-Windows-PowerShell/Operational: Microsoft-Windows-PowerShell/Operational
|
|
0x11: Microsoft-Windows-PowerShell/Analytic: Microsoft-Windows-PowerShell/Analytic
|
|
0x12: Microsoft-Windows-PowerShell/Debug: Microsoft-Windows-PowerShell/Debug
|
|
0x13: Microsoft-Windows-PowerShell/Admin: Microsoft-Windows-PowerShell/Admin
|
|
- keyword:
|
|
0x1: Runspace: PowerShell Runspace
|
|
0x2: Pipeline: Pipeline of Commands
|
|
0x4: Protocol: PowerShell remoting protocol
|
|
0x8: Transport: PowerShell remoting transport
|
|
0x10: Host: PowerShell remoting host proxy calls
|
|
0x20: Cmdlets: All remoting cmdlets
|
|
0x40: Serializer: The serialization layer
|
|
0x80: Session: All session layer
|
|
0x100: Plugin: The managed PowerShell plugin worker
|
|
0x200: PSWorkflow: PSWorkflow Hosting And Execution Layer
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-PowerShell/Operational: Microsoft-Windows-PowerShell/Operational
|
|
0x4000000000000000: Microsoft-Windows-PowerShell/Analytic: Microsoft-Windows-PowerShell/Analytic
|
|
0x2000000000000000: Microsoft-Windows-PowerShell/Debug: Microsoft-Windows-PowerShell/Debug
|
|
0x1000000000000000: Microsoft-Windows-PowerShell/Admin: Microsoft-Windows-PowerShell/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x14: Debug: Debug level defined by PowerShell (which is above Informational defined by system)
|
|
|
|
{A0E3D8EA-C34F-4419-A1DB-90435B8B21D0} Manifest Microsoft-Windows-Biometrics
|
|
- channel:
|
|
0x10: Microsoft-Windows-Biometrics/Operational: Microsoft-Windows-Biometrics/Operational
|
|
0x11: Microsoft-Windows-Biometrics/Analytic: Microsoft-Windows-Biometrics/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Biometrics/Operational: Microsoft-Windows-Biometrics/Operational
|
|
0x4000000000000000: Microsoft-Windows-Biometrics/Analytic: Microsoft-Windows-Biometrics/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A103CABD-8242-4A93-8DF5-1CDF3B3F26A6} Manifest Microsoft-Windows-Kernel-IoTrace
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-IoTrace/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Kernel-IoTrace/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A111F1C2-5923-47C0-9A68-D0BAFB577901} Manifest Microsoft-Windows-Network-Setup
|
|
- channel:
|
|
0x10: Microsoft-Windows-Network-Setup/Diagnostic: Microsoft-Windows-Network-Setup/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Network-Setup/Diagnostic: Microsoft-Windows-Network-Setup/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{A1B69D49-2195-4F59-9D33-BDF30C0FE473} Manifest Microsoft-Office-Word3
|
|
- channel:
|
|
0x10: WordChannel
|
|
- keyword:
|
|
0x1: OCSB
|
|
0x2: CoauthUndo
|
|
0x4: Hashtags
|
|
0x8: Emojis
|
|
0x10: AsyncEdit
|
|
0x20: Forms
|
|
0x40: FileNew
|
|
0x80: Inval
|
|
0x100: SuggestionService
|
|
0x200: DocTiling
|
|
0x400: OLE
|
|
0x800: LinkedIn
|
|
0x1000: MailMerge
|
|
0x2000: Language
|
|
0x4000: InkToText
|
|
0x8000: FlashEdits
|
|
0x10000: EasyBib
|
|
0x20000: FastCoauth
|
|
0x40000: DigitalPrint
|
|
0x80000: FocusMode
|
|
0x100000: IntelligentPlaceholders
|
|
0x200000: AsyncCoAuthoring
|
|
0x8000000000000000: WordChannel
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: wls:Verbose10
|
|
0x32: wls:Verbose50
|
|
0x64: wls:Verbose100
|
|
0xc8: wls:Verbose200
|
|
|
|
{A2D1C713-093B-43A7-B445-D09370EC9F47} Manifest Microsoft-Windows-Dwm-Udwm
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dwm-Udwm/Diagnostic
|
|
- keyword:
|
|
0x1: Udwm
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Dwm-Udwm/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A2F55524-8EBC-45FD-88E4-A1B39F169E08} Manifest Microsoft-Windows-BranchCacheMonitoring
|
|
- channel:
|
|
0x10: Microsoft-Windows-BranchCacheMonitoring/Analytic: Microsoft-Windows-BranchCacheMonitoring/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BranchCacheMonitoring/Analytic: Microsoft-Windows-BranchCacheMonitoring/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A319D300-015C-48BE-ACDB-47746E154751} Manifest Microsoft-Windows-FileInfoMinifilter
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileInfoMinifilter/Operational
|
|
- keyword:
|
|
0x10000: fi:FileNameCreate
|
|
0x20000: fi:FileNameRundown
|
|
0x40000: fi:FileNameDelete
|
|
0x8000000000000000: Microsoft-Windows-FileInfoMinifilter/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A329CF81-57EC-46ED-AB7C-261A52B0754A} Manifest Microsoft-Windows-Management-SecureAssessment
|
|
- channel:
|
|
0x10: Microsoft-Windows-SecureAssessment/Operational: Operational
|
|
- keyword:
|
|
0x1: SecureAssessment: SecureAssessment
|
|
0x8000000000000000: Microsoft-Windows-SecureAssessment/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{A3C0D58A-9FE5-4F24-A2CE-E16DE8BAA0D2} Manifest Microsoft-Windows-Shell-LockScreenContent
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-LockScreenContent/Diagnostic
|
|
- keyword:
|
|
0x1: LockScreenContent
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Shell-LockScreenContent/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A3D95055-34CC-4E4A-B99F-EC88F5370495} Manifest Microsoft-Windows-CoreWindow
|
|
- channel:
|
|
0x10: Microsoft-Windows-CoreWindow/Debug
|
|
0x11: Microsoft-Windows-CoreWindow/Analytic
|
|
- keyword:
|
|
0x1: Failure
|
|
0x2: Informational
|
|
0x4: Diagnostic
|
|
0x8: Performance
|
|
0x10: CoreWindowInternal
|
|
0x8000000000000000: Microsoft-Windows-CoreWindow/Debug
|
|
0x4000000000000000: Microsoft-Windows-CoreWindow/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A3E1697B-A12C-46B9-84D1-7FFE73C4B678} Manifest Microsoft-Windows-PortableDeviceSyncProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-PortableDeviceSyncProvider/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PortableDeviceSyncProvider/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A4112D1A-6DFA-476E-BB75-E350D24934E1} Manifest Microsoft-Windows-MediaFoundation-MSVProc
|
|
- channel:
|
|
0x10: MedaFoundationVideoProc: MS Video Processor MFT
|
|
0x11: MedaFoundationVideoProcD3D: MS Video Processor MFT (D3D11)
|
|
- keyword:
|
|
0x8000000000000000: MedaFoundationVideoProc: MS Video Processor MFT
|
|
0x4000000000000000: MedaFoundationVideoProcD3D: MS Video Processor MFT (D3D11)
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A4445C76-ED85-C8A3-02C1-532A38614A9E} Manifest Microsoft-Windows-ResetEng
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x4: win:Informational: Information
|
|
|
|
{A50B09F8-93EB-4396-84C9-DC921259F952} Manifest Microsoft-Windows-Diagnosis-MSDE
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-MSDE/Debug: Microsoft-Windows-Diagnosis-MSDE/Debug
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-MSDE/Debug: Microsoft-Windows-Diagnosis-MSDE/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A615ACB9-D5A4-4738-B561-1DF301D207F8} Manifest Microsoft-Windows-SetupQueue
|
|
- channel:
|
|
0x10: Microsoft-Windows-SetupQueue/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-SetupQueue/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A669021C-C450-4609-A035-5AF59AF4DF18} Manifest Microsoft-Windows-DotNETRuntimeRundown
|
|
- keyword:
|
|
0x8: LoaderRundownKeyword: Loader
|
|
0x10: JitRundownKeyword: Jit
|
|
0x20: NGenRundownKeyword: NGen
|
|
0x40: StartRundownKeyword: Start
|
|
0x100: EndRundownKeyword: End
|
|
0x800: AppDomainResourceManagementRundownKeyword: AppDomainResourceManagement
|
|
0x10000: ThreadingKeyword: Threading
|
|
0x20000: JittedMethodILToNativeMapRundownKeyword: JittedMethodILToNativeMapRundown
|
|
0x40000: OverrideAndSuppressNGenEventsRundownKeyword: OverrideAndSuppressNGenEvents
|
|
0x20000000: PerfTrackRundownKeyword: PerfTrack
|
|
0x40000000: StackKeyword: Stack
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A67075C2-3E39-4109-B6CD-6D750058A731} Manifest Microsoft-Windows-NetworkBridge
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-NetworkBridge/Diagnostic
|
|
- keyword:
|
|
0x1: KeywordDebugTrace: DebugTrace
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-NetworkBridge/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{A67075C2-3E39-4109-B6CD-6D750058A732} Manifest Microsoft-Windows-IPNAT
|
|
- channel:
|
|
0x10: Microsoft-Windows-IPNAT/Diagnostic
|
|
- keyword:
|
|
0x1: KeywordDebugTrace: DebugTrace
|
|
0x8000000000000000: Microsoft-Windows-IPNAT/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D} Manifest Microsoft-Windows-Kernel-General
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x10: KERNEL_GENERAL_KEYWORD_TIME: Time
|
|
0x20: KERNEL_GENERAL_SECURITY_ACCESSCHECK
|
|
0x40: KERNEL_GENERAL_TOKEN_SID_MANAGEMENT
|
|
0x80: BootPerformance
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{A6AD76E3-867A-4635-91B3-4904BA6374D7} Manifest Microsoft-Windows-Kernel-StoreMgr
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-StoreMgr/Analytic
|
|
0x11: Microsoft-Windows-Kernel-StoreMgr/Operational: Microsoft-Windows-Kernel-StoreMgr/Operational
|
|
- keyword:
|
|
0x10: StoreOps
|
|
0x40: StoreDiag
|
|
0x80: StoreContentsRundown
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-Kernel-StoreMgr/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Kernel-StoreMgr/Operational: Microsoft-Windows-Kernel-StoreMgr/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A6BF0DEB-3659-40AD-9F81-E25AF62CE3C7} Manifest Microsoft-Windows-PDC
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Pdc/Diagnostic
|
|
- keyword:
|
|
0x1: PdcErrors: Errors
|
|
0x2: notifications: Notifications
|
|
0x4: clients: ResiliencyClients
|
|
0x8: activators: Activators
|
|
0x10: Cs: Activators
|
|
0x20: suspendresume: SuspendResume
|
|
0x40: tasks: Tasks
|
|
0x80: CsDiag
|
|
0x100: SPM: SPM
|
|
0x200: sleepstudy
|
|
0x400: PdcClient: PdcClient
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Pdc/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A6F32731-9A38-4159-A220-3D9B7FC5FE5D} Manifest Microsoft-Windows-SharedAccess_NAT
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{A70FF94F-570B-4979-BA5C-E59C9FEAB61B} Manifest Microsoft-Windows-WinINet-Capture
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinINet-Capture/Analytic
|
|
- keyword:
|
|
0x100000000: WININET_KEYWORD_SEND: Flagged on all WinINet events dealing with sending packet capture
|
|
0x200000000: WININET_KEYWORD_RECEIVE: Flagged on all WinINet events dealing with receiving packet capture
|
|
0x20000000000: WININET_KEYWORD_PII_PRESENT: Flagged on all WinINet events dealing with potential personally identifiable information
|
|
0x40000000000: WININET_KEYWORD_PACKET: Flagged on all WinINet events dealing with packet capture
|
|
0x8000000000000000: Microsoft-Windows-WinINet-Capture/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A7364E1A-894F-4B3D-A930-2ED9C8C4C811} Manifest Microsoft-Windows-MF
|
|
- channel:
|
|
0x10: MF_MediaFoundationDeviceProxy: Media Foundation DeviceProxy
|
|
0x11: MediaFoundationPipeline: Media Foundation Pipeline
|
|
0x12: MediaFoundationContentProtection: Media Foundation ContentProtection
|
|
0x13: MediaFoundationAsyncWrapper: Media Foundation AsyncWrapper
|
|
0x14: MediaFoundationDS: MFDS
|
|
0x15: MediaFoundationSrcPrefetch: SrcPrefetch
|
|
- keyword:
|
|
0x8000000000000000: MF_MediaFoundationDeviceProxy: Media Foundation DeviceProxy
|
|
0x4000000000000000: MediaFoundationPipeline: Media Foundation Pipeline
|
|
0x2000000000000000: MediaFoundationContentProtection: Media Foundation ContentProtection
|
|
0x1000000000000000: MediaFoundationAsyncWrapper: Media Foundation AsyncWrapper
|
|
0x800000000000000: MediaFoundationDS: MFDS
|
|
0x400000000000000: MediaFoundationSrcPrefetch: SrcPrefetch
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A7975C8F-AC13-49F1-87DA-5A984A4AB417} Manifest Microsoft-Windows-WinRM
|
|
- channel:
|
|
0x10: Microsoft-Windows-WinRM/Debug
|
|
0x11: Microsoft-Windows-WinRM/Operational: Microsoft-Windows-WinRM/Operational
|
|
0x12: Microsoft-Windows-WinRM/Analytic: Microsoft-Windows-WinRM/Analytic
|
|
- keyword:
|
|
0x1: Keyword.SoapTrace: Soap Trace
|
|
0x2: Keyword.Client: Client
|
|
0x4: Keyword.Server: Server
|
|
0x8: Keyword.Security: Security
|
|
0x10: Keyword.QuotaViolation: QuotaViolation
|
|
0x20: Keyword.Transfer: Activity Transfer
|
|
0x40: Keyword.Error: Error
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-WinRM/Debug
|
|
0x4000000000000000: Microsoft-Windows-WinRM/Operational: Microsoft-Windows-WinRM/Operational
|
|
0x2000000000000000: Microsoft-Windows-WinRM/Analytic: Microsoft-Windows-WinRM/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{A7F2235F-BE51-51ED-DECF-F4498812A9A2} Manifest Microsoft-Windows-PersistentMemory-Nvdimm
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-PersistentMemory-Nvdimm/Analytic
|
|
0x11: Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic
|
|
0x12: Microsoft-Windows-PersistentMemory-Nvdimm/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Analytic
|
|
0x2000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-PersistentMemory-Nvdimm/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{A8106E5C-293A-4CD0-9397-2E6FAC7F9749} Manifest Microsoft-Windows-TabletPC-InputPersonalization
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A82FDA5D-745F-409C-B0FE-18AE0678A0E0} Manifest Microsoft-Windows-FailoverClustering-Client
|
|
- channel:
|
|
0x10: Microsoft-Windows-FailoverClustering-Client/Diagnostic: Microsoft-Windows-FailoverClustering-Client/Diagnostic
|
|
- keyword:
|
|
0x1: Cluster: Cluster
|
|
0x2: Node
|
|
0x4: Group
|
|
0x8: Resource
|
|
0x10: Network
|
|
0x20: NetInt
|
|
0x40: Quorum
|
|
0x80: Reconnect: Reconnect
|
|
0x100: ResType
|
|
0x200: Property
|
|
0x8000000000000000: Microsoft-Windows-FailoverClustering-Client/Diagnostic: Microsoft-Windows-FailoverClustering-Client/Diagnostic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{A83FA99F-C356-4DED-9FD6-5A5EB8546D68} Manifest Application-Addon-Event-Provider
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A86F8471-C31D-4FBC-A035-665D06047B03} Manifest Microsoft-Windows-WinRT-Error
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime/Error
|
|
- keyword:
|
|
0x1: WinRTError
|
|
0x8000000000000000: Microsoft-Windows-Runtime/Error
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{A8A1F2F6-A13A-45E9-B1FE-3419569E5EF2} Manifest Microsoft-Windows-MUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-MUI/Operational: Microsoft-Windows-MUI/Operational
|
|
0x11: Microsoft-Windows-MUI/Admin: Microsoft-Windows-MUI/Admin
|
|
0x12: Microsoft-Windows-MUI/Analytic: Microsoft-Windows-MUI/Analytic
|
|
0x13: Microsoft-Windows-MUI/Debug: Microsoft-Windows-MUI/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-MUI/Operational: Microsoft-Windows-MUI/Operational
|
|
0x4000000000000000: Microsoft-Windows-MUI/Admin: Microsoft-Windows-MUI/Admin
|
|
0x2000000000000000: Microsoft-Windows-MUI/Analytic: Microsoft-Windows-MUI/Analytic
|
|
0x1000000000000000: Microsoft-Windows-MUI/Debug: Microsoft-Windows-MUI/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{A9C11050-9E93-4FA4-8FE0-7C4750A345B2} Manifest Microsoft-Windows-CoreSystem-SmsRouter
|
|
- channel:
|
|
0x10: Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational: SmsRouter Operational Channel
|
|
0x11: Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug: SmsRouter Debug Channel
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Information: Information
|
|
0x8: Trace: Trace
|
|
0x8000000000000000: Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational: SmsRouter Operational Channel
|
|
0x4000000000000000: Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug: SmsRouter Debug Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{AA1F73E8-15FD-45D2-ABFD-E7F64F78EB11} Manifest Microsoft-Windows-Kernel-PowerTrigger
|
|
- keyword:
|
|
0x1: potrg:Trigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{AA3AA23B-BB6D-425A-B58C-1D7E37F5D02A} Manifest Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AA4C798D-D91B-4B07-A013-787F5803D6FC} Manifest Microsoft-Windows-StorageSpaces-ManagementAgent
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageSpaces-ManagementAgent/WHC
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageSpaces-ManagementAgent/WHC
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{AABF8B86-7936-4FA2-ACB0-63127F879DBF} Manifest Microsoft-Windows-Diagnosis-PCW
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-PCW/Operational: Microsoft-Windows-Diagnosis-PCW/Operational
|
|
0x11: Microsoft-Windows-Diagnosis-PCW/Analytic: Microsoft-Windows-Diagnosis-PCW/Analytic
|
|
0x12: Microsoft-Windows-Diagnosis-PCW/Debug: Microsoft-Windows-Diagnosis-PCW/Debug
|
|
- keyword:
|
|
0x800: errors: Errors
|
|
0x1000: callouts: Provider callouts
|
|
0x2000: notifications: Provider notifications
|
|
0x4000: queries: Provider queries
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-PCW/Operational: Microsoft-Windows-Diagnosis-PCW/Operational
|
|
0x4000000000000000: Microsoft-Windows-Diagnosis-PCW/Analytic: Microsoft-Windows-Diagnosis-PCW/Analytic
|
|
0x2000000000000000: Microsoft-Windows-Diagnosis-PCW/Debug: Microsoft-Windows-Diagnosis-PCW/Debug
|
|
|
|
{AAEAC398-3028-487C-9586-44EACAD03637} Manifest Microsoft-Windows-SmartCard-DeviceEnum
|
|
- channel:
|
|
0x10: Microsoft-Windows-SmartCard-DeviceEnum/Operational: Microsoft-Windows-SmartCard-DeviceEnum/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SmartCard-DeviceEnum/Operational: Microsoft-Windows-SmartCard-DeviceEnum/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{AAF67066-0BF8-469F-AB76-275590C434EE} Manifest Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager
|
|
|
|
{AB0D8EF9-866D-4D39-B83F-453F3B8F6325} Manifest Microsoft-Windows-OneX
|
|
- channel:
|
|
0x10: Microsoft-Windows-OneX/Diagnostic: Microsoft-Windows-OneX/Diagnostic
|
|
0x11: Microsoft-Windows-OneX/Operational: Microsoft-Windows-OneX/Operational
|
|
- keyword:
|
|
0x1: API: API
|
|
0x2: EAP: EAP
|
|
0x4: EAPPacket: EAPPacket
|
|
0x8: OneXUI: OneXUI
|
|
0x10: Profile: Profile
|
|
0x20: Semantic: Semantic
|
|
0x40: Supplicant: Supplicant
|
|
0x80: User: User
|
|
0x100: LwtDiagnostic
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-OneX/Diagnostic: Microsoft-Windows-OneX/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-OneX/Operational: Microsoft-Windows-OneX/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AB77E98E-0138-4C77-8BFB-DECD33EDFE3C} Manifest Microsoft-Windows-WebDeploy
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebDeploy/Debug: Debug
|
|
0x11: Microsoft-Windows-WebDeploy/Error: Errors
|
|
0x12: Microsoft-Windows-WebDeploy/Info: Info
|
|
0x13: Microsoft-Windows-WebDeploy/Verbose: Verbose
|
|
0x14: Microsoft-Windows-WebDeploy/ConnectionInfo: ConnectionInfo
|
|
0x15: Microsoft-Windows-WebDeploy/Warning: Warning
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WebDeploy/Debug: Debug
|
|
0x4000000000000000: Microsoft-Windows-WebDeploy/Error: Errors
|
|
0x2000000000000000: Microsoft-Windows-WebDeploy/Info: Info
|
|
0x1000000000000000: Microsoft-Windows-WebDeploy/Verbose: Verbose
|
|
0x800000000000000: Microsoft-Windows-WebDeploy/ConnectionInfo: ConnectionInfo
|
|
0x400000000000000: Microsoft-Windows-WebDeploy/Warning: Warning
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{ABCE23E7-DE45-4366-8631-84FA6C525952} Manifest Microsoft-Windows-WER-SystemErrorReporting
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{ABF1F586-2E50-4BA8-928D-49044E6F0DB7} Manifest Microsoft-Windows-Kernel-IO
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-IO/Operational: Microsoft-Windows-Kernel-IO/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Kernel-IO/Operational: Microsoft-Windows-Kernel-IO/Operational
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AC43300D-5FCC-4800-8E99-1BD3F85F0320} Manifest Microsoft-Windows-NTLM
|
|
- channel:
|
|
0x10: Microsoft-Windows-NTLM/Operational: Microsoft-Windows-NTLM/Operational
|
|
0x11: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController
|
|
0x12: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-NTLM/Operational: Microsoft-Windows-NTLM/Operational
|
|
0x4000000000000000: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController
|
|
0x2000000000000000: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AC52AD17-CC01-4F85-8DF5-4DCE4333C99B} Manifest Microsoft-Windows-USB-USBHUB3
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-USB-USBHUB3-Analytic: This is the Analytic channel to which internal Analytic events from the USBHUB3 driver are sent.
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: USBError
|
|
0x4: IRP
|
|
0x8: Power
|
|
0x10: PnP
|
|
0x20: Performance
|
|
0x40: HeadersBusTrace
|
|
0x80: PartialDataBusTrace
|
|
0x100: FullDataBusTrace
|
|
0x200: StateMachine
|
|
0x400: Enumeration
|
|
0x800: VerifyDriver
|
|
0x1000: HWVerifyHost
|
|
0x2000: HWVerifyHub
|
|
0x4000: HWVerifyDevice
|
|
0x8000: Rundown
|
|
0x10000: Device
|
|
0x20000: Hub
|
|
0x40000: Compat
|
|
0x80000: ControllerCommand
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-USB-USBHUB3-Analytic: This is the Analytic channel to which internal Analytic events from the USBHUB3 driver are sent.
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AD5162D8-DAF0-4A25-88A7-01CBEB33902E} Manifest Microsoft-Windows-WPDClassInstaller
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-ClassInstaller/Operational: Operational
|
|
0x11: Microsoft-Windows-WPD-ClassInstaller/Analytic: Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-WPD-ClassInstaller/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-WPD-ClassInstaller/Analytic: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{AD8AA069-A01B-40A0-BA40-948D1D8DEDC5} Manifest Microsoft-Windows-WER-Diag
|
|
- channel:
|
|
0x10: Microsoft-Windows-WER-Diag/Operational: Operational
|
|
- keyword:
|
|
0x4000000000000: win:WDIDiag: WDI Diag
|
|
0x8000000000000000: Microsoft-Windows-WER-Diag/Operational: Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{ADD0DE40-32B0-4B58-9D5E-938B2F5C1D1F} Manifest Microsoft-Windows-PerceptionRuntime
|
|
- channel:
|
|
0x10: Microsoft-Windows-PerceptionRuntime/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PerceptionRuntime/Operational
|
|
|
|
{AE4BD3BE-F36F-45B6-8D21-BDD6FB832853} Manifest Microsoft-Windows-Audio
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-Audio/Operational
|
|
0x11: Microsoft-Windows-Audio/CaptureMonitor
|
|
0x12: Microsoft-Windows-Audio/Performance: Performance
|
|
0x13: Microsoft-Windows-Audio/PlaybackManager
|
|
0x14: Microsoft-Windows-Audio/GlitchDetection
|
|
0x15: Microsoft-Windows-Audio/Informational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-Audio/Operational
|
|
0x2000000000000000: Microsoft-Windows-Audio/CaptureMonitor
|
|
0x1000000000000000: Microsoft-Windows-Audio/Performance: Performance
|
|
0x800000000000000: Microsoft-Windows-Audio/PlaybackManager
|
|
0x400000000000000: Microsoft-Windows-Audio/GlitchDetection
|
|
0x200000000000000: Microsoft-Windows-Audio/Informational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{AE5CF422-786A-476A-AC96-753B05877C99} Manifest Microsoft-Windows-MSMPEG2VDEC
|
|
- channel:
|
|
0x10: WINDOWS_MSMPEG2VDEC_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_MSMPEG2VDEC_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9} Manifest Microsoft-Windows-GroupPolicy
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-GroupPolicy/Operational: Microsoft-Windows-GroupPolicy/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-GroupPolicy/Operational: Microsoft-Windows-GroupPolicy/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AEC5C129-7C10-407D-BE97-91A042C61AAA} Manifest Microsoft-Windows-Containers-Wcifs
|
|
- channel:
|
|
0x10: Microsoft-Windows-Containers-Wcifs/Operational
|
|
0x11: Microsoft-Windows-Containers-Wcifs/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Containers-Wcifs/Operational
|
|
0x4000000000000000: Microsoft-Windows-Containers-Wcifs/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{AEDD909F-41C6-401A-9E41-DFC33006AF5D} Manifest Microsoft-Windows-Smartcard-Trigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{AF0A5A6D-E009-46D4-8867-42F2240F8A72} Manifest Microsoft-Windows-HomeGroup-ListenerService
|
|
- channel:
|
|
0x10: Microsoft-Windows-HomeGroup-ListenerService
|
|
0x11: Microsoft-Windows-HomeGroup Listener Service/Operational: Microsoft-Windows-HomeGroup Listener Service/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-HomeGroup-ListenerService
|
|
0x4000000000000000: Microsoft-Windows-HomeGroup Listener Service/Operational: Microsoft-Windows-HomeGroup Listener Service/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{AF2E340C-0743-4F5A-B2D3-2F7225D215DE} Manifest Microsoft-Windows-Netshell
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetShell/Performance
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NetShell/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{AF9CC194-E9A8-42BD-B0D1-834E9CFAB799} Manifest Microsoft-Windows-CertPolEng
|
|
- channel:
|
|
0x10: Microsoft-Windows-CertPoleEng/Operational: Operation log
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CertPoleEng/Operational: Operation log
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{AFE654EB-0A83-4EB4-948F-D4510EC39C30} Manifest Microsoft-Windows-Sdstor
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sdstor/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Sdstor/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B059B83F-D946-4B13-87CA-4292839DC2F2} Manifest Microsoft-Windows-User-Loader
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-User-Loader/Operational
|
|
0x11: Microsoft-Windows-User-Loader/Analytic
|
|
- keyword:
|
|
0x10: USER_LOADER_KEYWORD_DEPRECATED_DLL: Deprecated dlls
|
|
0x20: USER_LOADER_FATAL_CALLBACK_EXCEPTION: Fatal user callback exception
|
|
0x40: USER_LOADER_KEYWORD_LOAD_FAILURE: A dll failed to load.
|
|
0x80: USER_LOADER_LAUNCH_16BIT_APP: Launch 16bit application
|
|
0x100: USER_LOADER_KEYWORD_COMPONENT_ON_DEMAND: Windows component on demand.
|
|
0x200: USER_LOADER_KEYWORD_LOAD_FATAL_ERROR: The Loader encountered a fatal error.
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-User-Loader/Operational
|
|
0x2000000000000000: Microsoft-Windows-User-Loader/Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B0AA8734-56F7-41CC-B2F4-DE228E98B946} Manifest User32
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{B1F01D1A-AE3A-4940-81EE-DDCCBAD380EF} Manifest Microsoft-Windows-StorageManagement-WSP-Health
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorageManagement/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-StorageManagement/Debug
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{B1F90B27-4551-49D6-B2BD-DFC6453762A6} Manifest Microsoft-Windows-PowerCpl
|
|
- channel:
|
|
0x10: Microsoft-Windows-PowerCpl/Diagnostic
|
|
- keyword:
|
|
0x10000: PowerCpl
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-PowerCpl/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B20E65AC-C905-4014-8F78-1B6A508142EB} Manifest Microsoft-Windows-MediaFoundation-Performance-Core
|
|
- channel:
|
|
0x10: MediaFoundationPerformanceCore: Media Foundation Performance Core
|
|
- keyword:
|
|
0x8000000000000000: MediaFoundationPerformanceCore: Media Foundation Performance Core
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B28427D2-A745-43BA-8AEC-FFE3B94F97D3} Manifest Intel-SST-BUS
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Intel-SST-BUS/Debug
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Intel-SST-BUS/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B2A40F1F-A05A-4DFD-886A-4C4F18C4334C} Manifest Microsoft-PerfTrack-IEFRAME
|
|
- channel:
|
|
0x10: Microsoft-PerfTrack-IEFRAME/Diagnostic
|
|
- keyword:
|
|
0x1: defunct
|
|
0x2: nonPerfTrack
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-PerfTrack-IEFRAME/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B2FCD41F-9A40-4150-8C92-B224B7D8C8AA} Manifest Microsoft-Windows-SpellChecker
|
|
- channel:
|
|
0x10: Microsoft-Windows-SpellChecker/Analytic: Microsoft Windows Spellchecker Analytic Channel
|
|
0x8: System: System
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-SpellChecker/Analytic: Microsoft Windows Spellchecker Analytic Channel
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B3A0C2C8-83BB-4DDF-9F8D-4B22D3C38AD7} Manifest Microsoft-Windows-Kernel-PnP-Rundown
|
|
- keyword:
|
|
0x1: SleepStudy
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B3EEE223-D0A9-40CD-ADFC-50F1888138AB} Manifest Microsoft-Windows-WWAN-NDISUIO-EVENTS
|
|
- channel:
|
|
0x10: Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic: WWAN NDISUIO Channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic: WWAN NDISUIO Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B447B4DB-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-Core/Debug
|
|
0x11: Microsoft-Windows-FileHistory-Core/Analytic
|
|
0x12: Microsoft-Windows-FileHistory-Core/WHC
|
|
0x13: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-Core/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-Core/Analytic
|
|
0x2000000000000000: Microsoft-Windows-FileHistory-Core/WHC
|
|
0x1000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B447B4DC-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Catalog
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-Catalog/Debug
|
|
0x11: Microsoft-Windows-FileHistory-Catalog/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-Catalog/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-Catalog/Analytic
|
|
|
|
{B447B4DD-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-ConfigManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-ConfigManager/Debug
|
|
0x11: Microsoft-Windows-FileHistory-ConfigManager/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-ConfigManager/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-ConfigManager/Analytic
|
|
|
|
{B447B4DE-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Engine
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-Engine/Debug
|
|
0x11: Microsoft-Windows-FileHistory-Engine/Analytic
|
|
0x12: Microsoft-Windows-FileHistory-Engine/BackupLog: File History backup log
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-Engine/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-Engine/Analytic
|
|
0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog: File History backup log
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B447B4DF-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-EventListener
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-EventListener/Debug
|
|
0x11: Microsoft-Windows-FileHistory-EventListener/Analytic
|
|
0x12: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-EventListener/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-EventListener/Analytic
|
|
0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{B447B4E0-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-Service
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-Service/Debug
|
|
0x11: Microsoft-Windows-FileHistory-Service/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-Service/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-Service/Analytic
|
|
|
|
{B447B4E1-7780-11E0-ADA3-18A90531A85A} Manifest Microsoft-Windows-FileHistory-UI
|
|
- channel:
|
|
0x10: Microsoft-Windows-FileHistory-UI-Events/Debug
|
|
0x11: Microsoft-Windows-FileHistory-UI-Events/Analytic
|
|
0x12: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-FileHistory-UI-Events/Debug
|
|
0x4000000000000000: Microsoft-Windows-FileHistory-UI-Events/Analytic
|
|
0x2000000000000000: Microsoft-Windows-FileHistory-Engine/BackupLog
|
|
|
|
{B44AEC44-38F4-4B59-8DF3-10306ABF19B2} Manifest Microsoft-Windows-mobsync
|
|
- channel:
|
|
0x10: Microsoft-Windows-mobsync/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-mobsync/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B5325CD6-438E-4EC1-AA46-14F46F2570E4} Manifest Microsoft-Windows-Ras-AgileVpn
|
|
- channel:
|
|
0x10: Microsoft-Windows-RasAgileVpn/Debug: Notification Channel
|
|
0x11: Microsoft-Windows-RasAgileVpn/Operational: Debug Channel
|
|
- keyword:
|
|
0x1: AGILEVPN
|
|
0x2: AGILEVPN_ADMIN
|
|
0x8000000000000000: Microsoft-Windows-RasAgileVpn/Debug: Notification Channel
|
|
0x4000000000000000: Microsoft-Windows-RasAgileVpn/Operational: Debug Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B5FD844A-01D4-4B10-A57F-58B13B561582} Manifest Microsoft-Windows-TabletPC-Platform-Input-Core
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B65471E1-019D-436F-BC38-E15FA8E87F53} Manifest Microsoft-Windows-MediaFoundation-PlayAPI
|
|
- channel:
|
|
0x10: Microsoft-Windows-MediaFoundation-PlayAPI/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-MediaFoundation-PlayAPI/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2} Manifest Microsoft-Windows-Kernel-EventTracing
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-EventTracing/Admin: Microsoft-Windows-Kernel-EventTracing/Admin
|
|
0x11: Microsoft-Windows-Kernel-EventTracing/Analytic: Microsoft-Windows-Kernel-EventTracing/Analytic
|
|
- keyword:
|
|
0x10: ETW_KEYWORD_SESSION: Session
|
|
0x20: ETW_KEYWORD_PROVIDER: Provider
|
|
0x40: ETW_KEYWORD_LOST_EVENT: Lost Event
|
|
0x80: ETW_KEYWORD_SOFT_RESTART
|
|
0x100: ETW_KEYWORD_CAPTURE_STATE
|
|
0x200: ETW_KEYWORD_REGISTRATION
|
|
0x400: ETW_KEYWORD_ENABLEMENT
|
|
0x800: ETW_KEYWORD_GROUP
|
|
0x8000000000000000: Microsoft-Windows-Kernel-EventTracing/Admin: Microsoft-Windows-Kernel-EventTracing/Admin
|
|
0x4000000000000000: Microsoft-Windows-Kernel-EventTracing/Analytic: Microsoft-Windows-Kernel-EventTracing/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{B6BFCC79-A3AF-4089-8D4D-0EECB1B80779} Manifest Microsoft-Windows-SystemEventsBroker
|
|
- channel:
|
|
0x10: SystemEventsBroker: Debug
|
|
- keyword:
|
|
0x1: TraceSebEvent: Trace SEB Event
|
|
0x8000000000000000: SystemEventsBroker: Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B6CC0D55-9ECC-49A8-B929-2B9022426F2A} Manifest Microsoft-Client-Licensing-Platform
|
|
- channel:
|
|
0x10: Microsoft-Client-Licensing-Platform/Diagnostic
|
|
0x11: Microsoft-Client-Licensing-Platform/Debug
|
|
0x12: Microsoft-Client-Licensing-Platform/Admin
|
|
- keyword:
|
|
0x1: SERVICE_KEYWORD: Service Keyword
|
|
0x2: SERVICE_PERF_KEYWORD: Service Perf Keyword
|
|
0x8000000000000000: Microsoft-Client-Licensing-Platform/Diagnostic
|
|
0x4000000000000000: Microsoft-Client-Licensing-Platform/Debug
|
|
0x2000000000000000: Microsoft-Client-Licensing-Platform/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B6D775EF-1436-4FE6-BAD3-9E436319E218} Manifest Microsoft-Windows-SenseIR
|
|
- channel:
|
|
0x10: Microsoft-Windows-SenseIR/Operational
|
|
- keyword:
|
|
0x8: Trigger
|
|
0x8000000000000000: Microsoft-Windows-SenseIR/Operational
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B8197C10-845F-40CA-82AB-9341E98CFC2B} Manifest Microsoft-Windows-MediaFoundation-MFCaptureEngine
|
|
- channel:
|
|
0x64: Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine: Media Foundation Capture Engine ETW Channel
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine: Media Foundation Capture Engine ETW Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{B8D6861B-D20F-4EEC-BBAE-87E0DD80602B} Manifest Microsoft-Windows-COM-Perf
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime/CreateInstance
|
|
0x11: Microsoft-Windows-COM/CreateInstance
|
|
0x12: Microsoft-Windows-COM/ExtensionCatalog
|
|
0x13: Microsoft-Windows-COM/Call
|
|
0x14: Microsoft-Windows-COM/FreeUnusedLibrary
|
|
0x15: Microsoft-Windows-COM/ApartmentUninitialize
|
|
0x16: Microsoft-Windows-COM/ApartmentInitialize
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Runtime/CreateInstance
|
|
0x4000000000000000: Microsoft-Windows-COM/CreateInstance
|
|
0x2000000000000000: Microsoft-Windows-COM/ExtensionCatalog
|
|
0x1000000000000000: Microsoft-Windows-COM/Call
|
|
0x800000000000000: Microsoft-Windows-COM/FreeUnusedLibrary
|
|
0x400000000000000: Microsoft-Windows-COM/ApartmentUninitialize
|
|
0x200000000000000: Microsoft-Windows-COM/ApartmentInitialize
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B92CF7FD-DC10-4C6B-A72D-1613BF25E597} Manifest Microsoft-Windows-Wired-AutoConfig
|
|
- channel:
|
|
0x10: Microsoft-Windows-Wired-AutoConfig/Operational: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
0x11: Microsoft-Windows-Wired-AutoConfig/Diagnostic: Microsoft-Windows-Wired-AutoConfig/Diagnostic
|
|
- keyword:
|
|
0x1: AutoConf
|
|
0x2: MSM
|
|
0x4: DeviceLayer
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
0x4000000000000000: Microsoft-Windows-Wired-AutoConfig/Diagnostic: Microsoft-Windows-Wired-AutoConfig/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B97561FE-B27A-4C48-AA3E-7D3ADDC105B1} Manifest Microsoft-Windows-Data-Pdf
|
|
- channel:
|
|
0x10: Microsoft-Windows-Data-Pdf/Debug
|
|
- keyword:
|
|
0x10000: Windows.Data.Pdf
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Data-Pdf/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{B977CF02-76F6-DF84-CC1A-6A4B232322B6} Manifest Microsoft-Windows-EventCollector
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x8: System: System
|
|
0x10: ForwardedEvents: Forwarded Events
|
|
0x11: HardwareEvents
|
|
0x12: Microsoft-Windows-EventCollector/Operational: Operational
|
|
0x13: Microsoft-Windows-EventCollector/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: ForwardedEvents: Forwarded Events
|
|
0x1000000000000000: HardwareEvents
|
|
0x800000000000000: Microsoft-Windows-EventCollector/Operational: Operational
|
|
0x400000000000000: Microsoft-Windows-EventCollector/Debug: Debug
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{B99317E5-89B7-4C0D-ABD1-6E705F7912DC} Manifest Microsoft-Windows-Containers-Wcnfs
|
|
- channel:
|
|
0x10: Microsoft-Windows-Containers-Wcnfs/Operational
|
|
0x11: Microsoft-Windows-Containers-Wcnfs/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Containers-Wcnfs/Operational
|
|
0x4000000000000000: Microsoft-Windows-Containers-Wcnfs/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B9B2DE3C-3FBD-4F42-8FF7-33C3BAD35FD4} Manifest Microsoft-Windows-UserDataAccess-UserDataApis
|
|
- channel:
|
|
0x10: Microsoft-WindowsMobile-CommsApis-Channel
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Debug
|
|
0x8: VoipCallCoordinator
|
|
0x10: VoipPhoneCall
|
|
0x20: AudioRouter
|
|
0x40: SmsIntercept
|
|
0x80: PhoneCallFilter
|
|
0x100: SmsFilter
|
|
0x400: OnlinePhotosAPI
|
|
0x800: EntityAPI
|
|
0x1000: MediaRTAPI
|
|
0x2000: ChatApis
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-WindowsMobile-CommsApis-Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{B9D5B35D-BBB8-4625-9450-F71A5D414F4F} Manifest Microsoft-Windows-Runtime-Networking-BackgroundTransfer
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing
|
|
- keyword:
|
|
0x1: keywords.KW_ALL: KW_ALL
|
|
0x8000000000000000: Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{B9DA9FE6-AE5F-4F3E-B2FA-8E623C11DC75} Manifest Microsoft-Windows-Deplorch
|
|
- channel:
|
|
0x10: Microsoft-Windows-Deplorch/Analytic
|
|
0x11: Setup
|
|
- keyword:
|
|
0x1: keyPerformance: Performance
|
|
0x8000000000000000: Microsoft-Windows-Deplorch/Analytic
|
|
0x4000000000000000: Setup
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BA093605-3909-4345-990B-26B746ADEE0A} Manifest Microsoft-Windows-CorruptedFileRecovery-Client
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-CorruptedFileRecovery-Client/Operational: Microsoft-Windows-CorruptedFileRecovery-Client/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-CorruptedFileRecovery-Client/Operational: Microsoft-Windows-CorruptedFileRecovery-Client/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{BA2FFB5C-E20A-4FB9-91B4-45F61B4B66A0} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Dynamic-Memory
|
|
- channel:
|
|
0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose: Microsoft-Hyper-V-Guest-Drivers-Diagnose
|
|
0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug: Microsoft-Hyper-V-Guest-Drivers-Debug
|
|
0x12: Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic: Microsoft-Hyper-V-Guest-Drivers-Analytic
|
|
0x13: Microsoft-Windows-Hyper-V-Guest-Drivers/Operational: Microsoft-Hyper-V-Guest-Drivers-Operational
|
|
0x14: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin: Microsoft-Hyper-V-Guest-Drivers-Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose: Microsoft-Hyper-V-Guest-Drivers-Diagnose
|
|
0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug: Microsoft-Hyper-V-Guest-Drivers-Debug
|
|
0x2000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic: Microsoft-Hyper-V-Guest-Drivers-Analytic
|
|
0x1000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Operational: Microsoft-Hyper-V-Guest-Drivers-Operational
|
|
0x800000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin: Microsoft-Hyper-V-Guest-Drivers-Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{BA723D81-0D0C-4F1E-80C8-54740F508DDF} Manifest Microsoft-Windows-AppxPackagingOM
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppxPackaging/Operational: Microsoft-Windows-AppxPackaging/Operational
|
|
0x11: Microsoft-Windows-AppxPackaging/Performance: Microsoft-Windows-AppxPackaging/Performance
|
|
0x12: Microsoft-Windows-AppxPackaging/Debug: Microsoft-Windows-AppxPackaging/Debug
|
|
- keyword:
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-AppxPackaging/Operational: Microsoft-Windows-AppxPackaging/Operational
|
|
0x4000000000000000: Microsoft-Windows-AppxPackaging/Performance: Microsoft-Windows-AppxPackaging/Performance
|
|
0x2000000000000000: Microsoft-Windows-AppxPackaging/Debug: Microsoft-Windows-AppxPackaging/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{BABDA89A-4D5E-48EB-AF3D-E0E8410207C0} Manifest Microsoft-Windows-Memory-Diagnostic-Task-Handler
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07} Manifest Microsoft-Office-Word2
|
|
- channel:
|
|
0x10: WordChannel
|
|
- keyword:
|
|
0x1: Glyph
|
|
0x2: Selection
|
|
0x4: DynamicDataExchange
|
|
0x8: Graphics
|
|
0x10: Commanding
|
|
0x20: Accessibility
|
|
0x40: ZoomScroll
|
|
0x80: LayoutDump
|
|
0x100: Comments
|
|
0x200: Print
|
|
0x400: ReadingMode
|
|
0x800: PropertyFormatting
|
|
0x1000: Proofing
|
|
0x2000: LiveDrag
|
|
0x4000: Clipboard
|
|
0x8000: GlobalGeneric
|
|
0x10000: CoreDocEdit
|
|
0x20000: UIM
|
|
0x40000: BulletsNumbering
|
|
0x80000: FindReplace
|
|
0x100000: TrackChanges
|
|
0x200000: FieldUpdate
|
|
0x400000: Boot
|
|
0x800000: WordMail
|
|
0x1000000: Rtc
|
|
0x2000000: WebScalingView
|
|
0x4000000: Edp
|
|
0x8000000: Diagnostics
|
|
0x10000000: DocCorruption
|
|
0x20000000: ObjectModel
|
|
0x40000000: AtMentions
|
|
0x80000000: AuthoringAssistant
|
|
0x8000000000000000: WordChannel
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: wls:Verbose10
|
|
0x32: wls:Verbose50
|
|
0x64: wls:Verbose100
|
|
0xc8: wls:Verbose200
|
|
|
|
{BB311100-2D9F-4CD3-B2D6-F4EA3839C548} Manifest Microsoft-Windows-PlayToManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-PlayToManager/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PlayToManager/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BB8E7234-BBF4-48A7-8741-339206ED1DFB} Manifest Microsoft-Windows-InputSwitch
|
|
- channel:
|
|
0x10: Microsoft-Windows-InputSwitch/Diagnostic
|
|
- keyword:
|
|
0x10000: Status
|
|
0x20000: Perf
|
|
0x40000: InputSwitch_Keyword
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-InputSwitch/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BBBDD6A3-F35E-449B-A471-4D830C8EDA1F} Manifest Microsoft-Windows-Security-SPP-UX-GC
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-SPP-UX-GC/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-SPP-UX-GC/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BBE94F36-F8DC-4C33-8227-81602B7A3D53} Manifest Microsoft-Windows-PNRPSvc
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{BC0669E1-A10D-4A78-834E-1CA3C806C93B} Manifest Microsoft-Windows-CertificateServicesClient-Lifecycle-System
|
|
- channel:
|
|
0x10: Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{BC97B970-D001-482F-8745-B8D7D5759F99} Manifest Microsoft-Windows-MediaFoundation-Platform
|
|
- channel:
|
|
0x10: MediaFoundationDeviceProxy
|
|
0x11: MediaFoundationPlatform: Media Foundation Platform
|
|
- keyword:
|
|
0x8000000000000000: MediaFoundationDeviceProxy
|
|
0x4000000000000000: MediaFoundationPlatform: Media Foundation Platform
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{BD12F3B8-FC40-4A61-A307-B7A013A069C1} Manifest Microsoft-Windows-Servicing
|
|
- channel:
|
|
0x10: Setup
|
|
0x11: Microsoft-Windows-Servicing/Debug
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Setup
|
|
0x4000000000000000: Microsoft-Windows-Servicing/Debug
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{BD1A62ED-263B-4A66-A574-1F43C79C64BE} Manifest Microsoft-Windows-Telephony-VoipRT
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Debug
|
|
0x8: VoipCallCoordinator
|
|
0x10: VoipPhoneCall
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{BD2F4252-5E1E-49FC-9A30-F3978AD89EE2} Manifest Microsoft-Windows-GroupPolicyTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_MachinePolicyPresentEvent
|
|
0x2: Keyword_UserPolicyPresentEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BD8FEA17-5549-4B49-AA03-1981D16396A9} Manifest Microsoft-Windows-Directory-Services-SAM-Utility
|
|
- keyword:
|
|
0x1: Keyword_SamDatabaseChangeEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BDB462FC-A297-49A2-BF2E-4F1809E12ABC} Manifest Microsoft-Windows-TabletPC-MathRecognizer
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{BDD4B92E-19EF-4497-9C4A-E10E7FD2E227} Manifest Microsoft-Windows-IME-TIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-TIP/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IME-TIP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BE3A31EA-AA6C-4196-9DCC-9CA13A49E09F} Manifest Microsoft-Windows-Photo-Image-Codec
|
|
- channel:
|
|
0x10: WINDOWS_WMPHOTO_CHANNEL
|
|
- keyword:
|
|
0x8000000000000000: WINDOWS_WMPHOTO_CHANNEL
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{BE69781C-B63B-41A1-8E24-A4FC7B3FC498} Manifest Microsoft-Windows-Sens
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sens/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Sens/Debug: Debug
|
|
|
|
{BE932B00-0F8E-4386-AB89-873F7D0274AA} Manifest Microsoft-Windows-NetworkGCW
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BE967569-E3C8-425B-AD0E-4F2C790B1848} Manifest Microsoft-Windows-Graphics-Printing3D
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BEA18B89-126F-4155-9EE4-D36038B02680} Manifest Microsoft-Windows-CertificateServicesClient-Lifecycle-User
|
|
- channel:
|
|
0x10: Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{BEC5E7A4-0527-42E8-8174-FABDE799AD7F} Manifest Microsoft-Windows-MCCS-InternetMailCsp
|
|
|
|
{BEF2AA8E-81CD-11E2-A7BB-5EAC6188709B} Manifest Microsoft-Windows-Kernel-LiveDump
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-LiveDump/Analytic: Microsoft-Windows-Kernel-LiveDump/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Kernel-LiveDump/Analytic: Microsoft-Windows-Kernel-LiveDump/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BF1DB390-3E67-4D4D-A287-8958044A3DB4} Manifest Microsoft-Windows-UI-Input-Inking
|
|
- keyword:
|
|
0x10000: InkStrokeBuilding
|
|
0x20000: InkStrokeManipulation
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{BF406804-6AFA-46E7-8A48-6C357E1D6D61} Manifest Microsoft-Windows-COMRuntime
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-COMRuntime/Tracing
|
|
0x11: Microsoft-Windows-COMRuntime/Activations
|
|
0x12: Microsoft-Windows-COMRuntime/MessageProcessing
|
|
- keyword:
|
|
0x1: CliModalLoop
|
|
0x2: ComCallWaitAnalysis
|
|
0x4: DropInputMessage
|
|
0x8: PrematureStubRundown
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-COMRuntime/Tracing
|
|
0x2000000000000000: Microsoft-Windows-COMRuntime/Activations
|
|
0x1000000000000000: Microsoft-Windows-COMRuntime/MessageProcessing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{BF460FC6-45C5-4119-ADD3-E361A6E7D5AC} Manifest Microsoft-Windows-MCCS-EngineShared
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Debug
|
|
0x10: Contacts
|
|
0x20: Photos
|
|
0x40: Feeds
|
|
0x80: Battery
|
|
0x400: Connect
|
|
0x4000000000: Warning
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{BFF15E13-81BF-45EE-8B16-7CFEAD00DA86} Manifest Microsoft-Windows-AppModel-State
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-AppModel-State/Debug: Microsoft-Windows-AppModel-State/Debug
|
|
0x11: Microsoft-Windows-AppModel-State/Diagnostic: Microsoft-Windows-AppModel-State/Diagnostic
|
|
- keyword:
|
|
0x1: Structured: Structured State
|
|
0x2: UnstructuredReset: Unstructured Reset
|
|
0x4: OutOfMemory: Out Of Memory
|
|
0x8: ApiSetError: Apiset Error
|
|
0x10: WinRT: WinRT
|
|
0x20: DataStoreError: Low-level Data Store Error
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-AppModel-State/Debug: Microsoft-Windows-AppModel-State/Debug
|
|
0x2000000000000000: Microsoft-Windows-AppModel-State/Diagnostic: Microsoft-Windows-AppModel-State/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C02AFC2B-E24E-4449-AD76-BCC2C2575EAD} Manifest Microsoft-Windows-UAC-FileVirtualization
|
|
- channel:
|
|
0x10: Microsoft-Windows-UAC-FileVirtualization/Operational: Microsoft-Windows-UAC-FileVirtualization/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-UAC-FileVirtualization/Operational: Microsoft-Windows-UAC-FileVirtualization/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C03715CE-EA6F-5B67-4449-DA1D1E1AFEB8} Manifest Microsoft-Windows-PersistentMemory-ScmBus
|
|
- channel:
|
|
0x10: Microsoft-Windows-PersistentMemory-ScmBus/Diagnose
|
|
0x11: Microsoft-Windows-PersistentMemory-ScmBus/Analytic
|
|
0x12: Microsoft-Windows-PersistentMemory-ScmBus/Operational
|
|
0x13: Microsoft-Windows-PersistentMemory-ScmBus/Certification
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Diagnose
|
|
0x4000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Analytic
|
|
0x2000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Operational
|
|
0x1000000000000000: Microsoft-Windows-PersistentMemory-ScmBus/Certification
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C06ED57A-A7BD-42D7-B5FF-77A9DEC5732D} Manifest Microsoft-Windows-Diagnostics-PerfTrack-Counters
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic
|
|
- keyword:
|
|
0x10000: ProcessCounter: Process Counter
|
|
0x20000: FileCacheCounter: FileCache Counter
|
|
0x40000: PoolCounter: Pool Counter
|
|
0x80000: SessionPoolCounter: Session Pool Counter
|
|
0x100000: PoolTagCounter: Pool Tag Counter
|
|
0x200000: SessionPoolTagCounter: Session Pool Tag Counter
|
|
0x8000000000000000: Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C100BECC-D33A-4A4B-BF23-BBEF4663D017} Manifest Microsoft-Windows-WCN-Config-Registrar-Secure
|
|
- channel:
|
|
0x10: Microsoft-Windows-WCN-Config-Registrar/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WCN-Config-Registrar/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C100BECF-D33A-4A4B-BF23-BBEF4663D017} Manifest Microsoft-Windows-WCN-Config-Registrar
|
|
- channel:
|
|
0x10: Microsoft-Windows-WCN-Config-Registrar/Diagnostic: Microsoft-Windows-WCN-Config-Registrar/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WCN-Config-Registrar/Diagnostic: Microsoft-Windows-WCN-Config-Registrar/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{C18672D1-DC18-4DFD-91E4-170CF37160CF} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-IcSvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose
|
|
0x11: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose
|
|
0x4000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C22D1B14-C242-49DE-9F17-1D76B8B9C458} Manifest Microsoft-Pef-WFP-MessageProvider
|
|
- channel:
|
|
0x10: Microsoft-Pef-WFP-MessageProvider/Diagnostic: Microsoft-Pef-WFP-MessageProvider/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x10000000: CaptureClearIPsec
|
|
0x20000000: CaptureClearIke
|
|
0x40000000: PacketStart
|
|
0x80000000: PacketEnd
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Pef-WFP-MessageProvider/Diagnostic: Microsoft-Pef-WFP-MessageProvider/Operational
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C26C4F3C-3F66-4E99-8F8A-39405CFED220} Manifest Microsoft-Windows-WHEA-Logger
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: Init: WHEA Logging Service Initialization
|
|
0x2: Errlog: WHEA Error Event Logs
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C2F36562-A1E4-4BC3-A6F6-01A7ADB643E8} Manifest Microsoft-Windows-FeatureConfiguration
|
|
- channel:
|
|
0x10: Microsoft-Windows-FeatureConfiguration/Analytic: Analytic
|
|
0x11: Microsoft-Windows-FeatureConfiguration/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FeatureConfiguration/Analytic: Analytic
|
|
0x4000000000000000: Microsoft-Windows-FeatureConfiguration/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{C2F86198-03CA-4771-8D4C-CE6E15CBCA56} Manifest Intel-iaLPSS2-I2C
|
|
- channel:
|
|
0x10: Intel-iaLPSS2-I2C/Debug: iaLPSS2_I2C Debug channel
|
|
0x11: Intel-iaLPSS2-I2C/Performance: iaLPSS2_I2C Performance channel
|
|
- keyword:
|
|
0x8000000000000000: Intel-iaLPSS2-I2C/Debug: iaLPSS2_I2C Debug channel
|
|
0x4000000000000000: Intel-iaLPSS2-I2C/Performance: iaLPSS2_I2C Performance channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C2FA0899-8A10-412B-A42E-9E5B284A2437} Manifest Microsoft-Windows-TabletPC-CoreInkRecognition
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C374D21E-69B2-4CD7-9A25-62187C5A5619} Manifest Microsoft-Windows-WPD-MTPIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-MTPIP/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-MTPIP/Analytic: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C42A2738-2333-40A5-A32F-6ACC36449DCC} Manifest Microsoft-Windows-HttpLog
|
|
- channel:
|
|
0x10: Microsoft-Windows-HttpService/Log: HTTP Log Channel
|
|
- keyword:
|
|
0x1: HTTP_KEYWORD_LOG_RESPONSE: Flagged on all HTTP transactions
|
|
0x20000000000: HTTP_KEYWORD_LOG_PII_PRESENT: Flagged on all HTTP events dealing with potential personally identifiable information
|
|
0x8000000000000000: Microsoft-Windows-HttpService/Log: HTTP Log Channel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C44219D0-F344-11DF-A5E2-B307DFD72085} Manifest Microsoft-Windows-DirectComposition
|
|
- channel:
|
|
0x10: Microsoft-Windows-DirectComposition/Diagnostic
|
|
- keyword:
|
|
0x1: DCompBasic
|
|
0x2: DCompDiagnostic
|
|
0x4: DCompMemory
|
|
0x8: OfferReclaim
|
|
0x10: DCompSharedMemory
|
|
0x20: DCompAnimationTelemetry
|
|
0x40: DCompPrimitives
|
|
0x8000000000000000: Microsoft-Windows-DirectComposition/Diagnostic
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C4636A1E-7986-4646-BF10-7BC3B4A76E8E} Manifest Microsoft-Windows-StorPort
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorPort/Operational
|
|
0x11: Microsoft-Windows-Storage-Storport/Diagnose
|
|
0x12: Microsoft-Windows-Storage-Storport/Debug
|
|
0x13: Microsoft-Windows-Storage-Storport/Analytic
|
|
0x14: Microsoft-Windows-Storage-Storport/Operational
|
|
0x15: Microsoft-Windows-Storage-Storport/Admin
|
|
0x16: Microsoft-Windows-Storage-Storport/Health
|
|
- keyword:
|
|
0x1: Reset
|
|
0x2: PortNotification
|
|
0x4: PauseResume
|
|
0x8: IoPerfNotification: IO Performance Notification from Miniport
|
|
0x10: Config
|
|
0x20: Perf
|
|
0x40: DeviceState: Device state
|
|
0x80: CommandTrace: Event logged by Command tracing
|
|
0x100: SMR: Shingled Magnetic Recording Drive Operations
|
|
0x80000: Logo_Performance: Logo Performance measurement
|
|
0x100000: IO_Performance: IO Performance measurement
|
|
0x200000: Read: Read request
|
|
0x400000: Write: Write request
|
|
0x800000: PagingRead: Paging Read request
|
|
0x1000000: PagingWrite: Paging Write request
|
|
0x2000000: LowMemoryRead: Low memory Read request
|
|
0x4000000: LowMemoryWrite: Low memory write request
|
|
0x8000000: NonReadWrite: Non-Read/Write request
|
|
0x10000000: PassThrough: Pass-Through request
|
|
0x20000000: Flush: Flush request
|
|
0x40000000: IOCTL: Device I/O control request
|
|
0x80000000: WMI: WMI request
|
|
0x100000000: Power: Power request
|
|
0x200000000: PnP: PnP request
|
|
0x400000000: Enum: Device enumeration handling
|
|
0x800000000: Queue: Queue-related operation
|
|
0x1000000000: ISR: Interrupt Service Routine processing
|
|
0x2000000000: DPC: Deferred Procedure Call handling
|
|
0x4000000000: Timer: Timer-related operation
|
|
0x8000000000: Protocol: Bus protocol specific operation
|
|
0x10000000000: Target: Target-related operation
|
|
0x20000000000: Adapter: Controller or Host Bus Adapter related operation
|
|
0x40000000000: Retry: Retry handling
|
|
0x80000000000: Timeout: Timeout handling
|
|
0x100000000000: ReSet: Reset handling
|
|
0x200000000000: Miniport: Event logged by Miniport
|
|
0x800000000000: Test: Testing-specific processing
|
|
0x8000000000000000: Microsoft-Windows-StorPort/Operational
|
|
0x4000000000000000: Microsoft-Windows-Storage-Storport/Diagnose
|
|
0x2000000000000000: Microsoft-Windows-Storage-Storport/Debug
|
|
0x1000000000000000: Microsoft-Windows-Storage-Storport/Analytic
|
|
0x800000000000000: Microsoft-Windows-Storage-Storport/Operational
|
|
0x400000000000000: Microsoft-Windows-Storage-Storport/Admin
|
|
0x200000000000000: Microsoft-Windows-Storage-Storport/Health
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C4EFC9BB-2570-4821-8923-1BAD317D2D4B} Manifest Microsoft-Windows-Security-SPP-UX-Notifications
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{C514638F-7723-485B-BCFC-96565D735D4A} Manifest Microsoft-Windows-Kernel-Acpi
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Acpi/Diagnostic
|
|
- keyword:
|
|
0x1: acpi:Diagnostic
|
|
0x2: acpi:Thermal
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Acpi/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{C651F5F6-1C0D-492E-8AE1-B4EFD7C9D503} Manifest Microsoft-Windows-Application Server-Applications
|
|
- channel:
|
|
0x10: Microsoft-Windows-Application Server-Applications/Admin: Admin
|
|
0x11: Microsoft-Windows-Application Server-Applications/Operational: Operational
|
|
0x12: Microsoft-Windows-Application Server-Applications/Analytic: Analytic
|
|
0x13: Microsoft-Windows-Application Server-Applications/Debug: Debug
|
|
- keyword:
|
|
0x1: ServiceHost: Service Host
|
|
0x2: Serialization: Serialization
|
|
0x4: ServiceModel: ServiceModel
|
|
0x8: Transaction: Transaction
|
|
0x10: Security: Security
|
|
0x20: WCFMessageLogging: WCF Message Logging
|
|
0x40: WFTracking: WF Tracking
|
|
0x80: WebHost: Web Host
|
|
0x100: HTTP: HTTP Transport
|
|
0x200: TCP: TCP Transport
|
|
0x400: TransportGeneral: Transport General
|
|
0x800: ActivationServices: Activation Services
|
|
0x1000: Channel: Channel
|
|
0x2000: WebHTTP: Web HTTP
|
|
0x4000: Discovery: Discovery
|
|
0x8000: RoutingServices: Routing Services
|
|
0x10000: Infrastructure: Infrastructure
|
|
0x20000: EndToEndMonitoring: End-to-End Monitoring
|
|
0x40000: HealthMonitoring: Health Monitoring
|
|
0x80000: Troubleshooting: Troubleshooting
|
|
0x100000: UserEvents: User Events
|
|
0x200000: Threading: Threading
|
|
0x400000: Quota: Quota
|
|
0x1000000: WFRuntime: Workflow Runtime
|
|
0x2000000: WFActivities: Workflow Activities
|
|
0x4000000: WFServices: Workflow ServiceHost
|
|
0x8000000: WFInstanceStore: Workflow InstanceStore
|
|
0x8000000000000000: Microsoft-Windows-Application Server-Applications/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-Application Server-Applications/Operational: Operational
|
|
0x2000000000000000: Microsoft-Windows-Application Server-Applications/Analytic: Analytic
|
|
0x1000000000000000: Microsoft-Windows-Application Server-Applications/Debug: Debug
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C6BF6832-F7BD-4151-AC21-753CE4707453} Manifest Microsoft-Windows-International-RegionalOptionsControlPanel
|
|
- channel:
|
|
0x10: Microsoft-Windows-International-RegionalOptionsControlPanel/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-International-RegionalOptionsControlPanel/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{C76BAA63-AE81-421C-B425-340B4B24157F} Manifest Microsoft-Windows-TerminalServices-RemoteConnectionManager
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
|
|
0x11: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
|
|
0x13: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
|
|
0x800000000000000: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C7BDE69A-E1E0-4177-B6EF-283AD1525271} Manifest Microsoft-Windows-Kernel-Disk
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Disk/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Disk/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C7E089AC-BA2A-11E0-9AF7-68384824019B} Manifest Microsoft-Windows-Crypto-BCrypt
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-BCRYPT/Analytic: Microsoft-Windows-Crypto-BCrypt/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Crypto-BCRYPT/Analytic: Microsoft-Windows-Crypto-BCrypt/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{C8517E09-BEA2-5BB6-BEF3-50B4C91C431E} Manifest Microsoft-Windows-WinML
|
|
|
|
{C882FF1D-7585-4B33-B135-95C577179137} Manifest Microsoft-Windows-Magnification
|
|
- channel:
|
|
0x10: Microsoft-Windows-Magnification/Diagnostic
|
|
- keyword:
|
|
0x1: Magnification
|
|
0x8000000000000000: Microsoft-Windows-Magnification/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C88A4EF5-D048-4013-9408-E04B7DB2814A} Manifest Microsoft-Windows-USB-USBPORT
|
|
- channel:
|
|
0x10: Microsoft-Windows-USB-USBPORT/Diagnostic
|
|
- keyword:
|
|
0x1: Diagnostic
|
|
0x2: PowerDiagnostics
|
|
0x4: PerfDiagnostics
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Microsoft-Windows-USB-USBPORT/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C89B991E-3B48-49B2-80D3-AC000DFC9749} Manifest Microsoft-Windows-Documents
|
|
- channel:
|
|
0x10: Microsoft-Windows-Documents/Performance: Performance
|
|
- keyword:
|
|
0x1: DocPerf
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Documents/Performance: Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C8DBF506-E3D3-4822-930D-84C557EB6247} Manifest Microsoft-Windows-SruMon
|
|
- channel:
|
|
0x10: Microsoft-Windows-SruMon/Diagnostic
|
|
- keyword:
|
|
0x1: KeywordSruMonDebugTrace: SruMonDebugTrace
|
|
0x2: KeywordSruMonDebugSequenceTrace: SruMonDebugSequenceTrace
|
|
0x4: KeywordSruMonDebugSequenceErrorTrace: SruMonDebugSequenceErrorTrace
|
|
0x8: KeywordSruMonDebugDBResetTrace: SruMonDebugServiceTrace
|
|
0x10: KeywordSruMonNWAggregationTrace: SruMonNWAggregationTrace
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-SruMon/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{C914F0DF-835A-4A22-8C70-732C9A80C634} Manifest Microsoft-Windows-StartupRepair
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C91EF675-842F-4FCF-A5C9-6EA93F2E4F8B} Manifest Microsoft-Windows-IPSEC-SRV
|
|
- channel:
|
|
0x10: Microsoft-Windows-IPSEC-SRV/Diagnostic
|
|
- keyword:
|
|
0x10000: PolicyAgent
|
|
0x8000000000000000: Microsoft-Windows-IPSEC-SRV/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{C9BDB4EB-9287-4C8E-8378-6896F0D1C5EF} Manifest Microsoft-Windows-HomeGroup-ProviderService
|
|
- channel:
|
|
0x10: Microsoft-Windows-HomeGroup Provider Service/Operational: Microsoft-Windows-HomeGroup Provider Service/Operational
|
|
0x11: Microsoft-Windows-HomeGroup Provider Service Performance/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-HomeGroup Provider Service/Operational: Microsoft-Windows-HomeGroup Provider Service/Operational
|
|
0x4000000000000000: Microsoft-Windows-HomeGroup Provider Service Performance/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{CA11C036-0102-4A2D-A6AD-F03CFED5D3C9} Manifest Microsoft-Windows-DXGI
|
|
- channel:
|
|
0x10: Microsoft-Windows-DXGI/Analytic
|
|
0x11: Microsoft-Windows-DXGI/Logging
|
|
- keyword:
|
|
0x1: Objects
|
|
0x2: Events
|
|
0x4: JournalEntries
|
|
0x8000000000000000: Microsoft-Windows-DXGI/Analytic
|
|
0x4000000000000000: Microsoft-Windows-DXGI/Logging
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{CA4E628D-8567-4896-AB6B-835B221F373F} Manifest Microsoft-Windows-Search
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{CA5BA219-C0D4-4EFA-9CEB-72AFF92672B0} Manifest Microsoft-Windows-WlanPref
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B} Manifest Microsoft-Windows-PerfNet
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{CB017CD2-1F37-4E65-82BC-3E91F6A37559} Manifest Volsnap
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{CB070027-1534-4CF3-98EA-B9751F508376} Manifest Microsoft-Windows-LanGPA
|
|
- channel:
|
|
0x10: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Wired-AutoConfig/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CB587AD1-CC35-4EF1-AD93-36CC82A2D319} Manifest Microsoft-Windows-ATAPort
|
|
- channel:
|
|
0x10: Microsoft-Windows-ATAPort/SATA-LPM
|
|
0x11: Microsoft-Windows-ATAPort/General
|
|
0x12: Microsoft-Windows-Storage-ATAPort/Diagnose
|
|
0x13: Microsoft-Windows-Storage-ATAPort/Debug
|
|
0x14: Microsoft-Windows-Storage-ATAPort/Analytic
|
|
0x15: Microsoft-Windows-Storage-ATAPort/Operational
|
|
0x16: Microsoft-Windows-Storage-ATAPort/Admin
|
|
- keyword:
|
|
0x1: AllIORequests
|
|
0x2: DeviceEnumeration
|
|
0x4: IOErrors
|
|
0x8: Reset
|
|
0x10: XferModeChange
|
|
0x20: LinkPowerMgmt
|
|
0x40: GetTelemetry
|
|
0x100000: IO_Performance: IO Performance measurement
|
|
0x200000: Read: Read request
|
|
0x400000: Write: Write request
|
|
0x800000: PagingRead: Paging Read request
|
|
0x1000000: PagingWrite: Paging Write request
|
|
0x2000000: LowMemoryRead: Low memory Read request
|
|
0x4000000: LowMemoryWrite: Low memory write request
|
|
0x8000000: NonReadWrite: Non-Read/Write request
|
|
0x10000000: PassThrough: Pass-Through request
|
|
0x20000000: Flush: Flush request
|
|
0x40000000: IOCTL: Device I/O control request
|
|
0x80000000: WMI: WMI request
|
|
0x100000000: Power: Power request
|
|
0x200000000: PnP: PnP request
|
|
0x400000000: Enum: Device enumeration handling
|
|
0x800000000: Queue: Queue-related operation
|
|
0x1000000000: ISR: Interrupt Service Routine processing
|
|
0x2000000000: DPC: Deferred Procedure Call handling
|
|
0x4000000000: Timer: Timer-related operation
|
|
0x8000000000: Protocol: Bus protocol specific operation
|
|
0x10000000000: Target: Target-related operation
|
|
0x20000000000: Adapter: Controller or Host Bus Adapter related operation
|
|
0x40000000000: Retry: Retry handling
|
|
0x80000000000: Timeout: Timeout handling
|
|
0x100000000000: ReSet: Reset handling
|
|
0x200000000000: MiniportInterface: Activity between port and miniport
|
|
0x800000000000: Test: Testing-specific processing
|
|
0x8000000000000000: Microsoft-Windows-ATAPort/SATA-LPM
|
|
0x4000000000000000: Microsoft-Windows-ATAPort/General
|
|
0x2000000000000000: Microsoft-Windows-Storage-ATAPort/Diagnose
|
|
0x1000000000000000: Microsoft-Windows-Storage-ATAPort/Debug
|
|
0x800000000000000: Microsoft-Windows-Storage-ATAPort/Analytic
|
|
0x400000000000000: Microsoft-Windows-Storage-ATAPort/Operational
|
|
0x200000000000000: Microsoft-Windows-Storage-ATAPort/Admin
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{CBA16CF2-2FAB-49F8-89AE-894E718649E7} Manifest Microsoft-Windows-Processor-Aggregator
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CBA5F63C-E2CF-4B36-8305-BDE1311924FC} Manifest Microsoft-Windows-Websocket-Protocol-Component
|
|
- channel:
|
|
0x10: Microsoft-Windows-Websocket-Protocol-Component/Tracing
|
|
- keyword:
|
|
0x1: keywords.KW_ALL: KW_ALL
|
|
0x8000000000000000: Microsoft-Windows-Websocket-Protocol-Component/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{CBDA4DBF-8D5D-4F69-9578-BE14AA540D22} Manifest Microsoft-Windows-AppLocker
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppLocker/EXE and DLL: Microsoft-Windows-AppLocker/EXE and DLL
|
|
0x11: Microsoft-Windows-AppLocker/MSI and Script: Microsoft-Windows-AppLocker/MSI and Script
|
|
0x12: Microsoft-Windows-AppLocker/Packaged app-Execution: Microsoft-Windows-AppLocker/Packaged app-Execution
|
|
0x13: Microsoft-Windows-AppLocker/Packaged app-Deployment: Microsoft-Windows-AppLocker/Packaged app-Deployment
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-AppLocker/EXE and DLL: Microsoft-Windows-AppLocker/EXE and DLL
|
|
0x4000000000000000: Microsoft-Windows-AppLocker/MSI and Script: Microsoft-Windows-AppLocker/MSI and Script
|
|
0x2000000000000000: Microsoft-Windows-AppLocker/Packaged app-Execution: Microsoft-Windows-AppLocker/Packaged app-Execution
|
|
0x1000000000000000: Microsoft-Windows-AppLocker/Packaged app-Deployment: Microsoft-Windows-AppLocker/Packaged app-Deployment
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{CC311F1F-623C-4CA4-BA44-A458016555E8} Manifest Microsoft-Windows-Tethering-Manager
|
|
- channel:
|
|
0x10: Microsoft-Windows-Tethering-Manager/Analytic
|
|
- keyword:
|
|
0x1: DiagTrack
|
|
0x2: PerfCounter
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Tethering-Manager/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{CD7CF0D0-02CC-4872-9B65-0DBA0A90EFE8} Manifest Error Instrument
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CD9C6198-BF73-4106-803B-C17D26559018} Manifest Microsoft-Windows-ReFS
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-ReFS/Operational
|
|
- keyword:
|
|
0x1: VolumeMount
|
|
0x2: VolumeFillRatio
|
|
0x200000: Statistics: Statistics
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-ReFS/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{CDC05E28-C449-49C6-B9D2-88CF761644DF} Manifest Microsoft-Windows-Power-Troubleshooter
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CDEAD503-17F5-4A3E-B7AE-DF8CC2902EB9} Manifest Microsoft-Windows-NDIS
|
|
- channel:
|
|
0x10: Microsoft-Windows-NDIS/Operational: Microsoft-Windows-NDIS/Operational
|
|
0x11: Microsoft-Windows-NDIS/Diagnostic: Microsoft-Windows-NDIS/Diagnostic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: Request
|
|
0x2: PnP
|
|
0x4: Init
|
|
0x8: Bind
|
|
0x10: Power
|
|
0x20: WMI
|
|
0x40: Interface
|
|
0x80: Port
|
|
0x100: WorkItem
|
|
0x200: Indication
|
|
0x400: SendM
|
|
0x800: Protocol
|
|
0x1000: Log
|
|
0x2000: ReceiveThrottling
|
|
0x4000: LwtDiagnostic
|
|
0x8000: SleepStudy
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-NDIS/Operational: Microsoft-Windows-NDIS/Operational
|
|
0x4000000000000000: Microsoft-Windows-NDIS/Diagnostic: Microsoft-Windows-NDIS/Diagnostic
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{CE20D1C3-A247-4C41-BCB8-3C7F52C8B805} Manifest Microsoft-Windows-Kernel-Tm-Trigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{CE8DEE0B-D539-4000-B0F8-77BED049C590} Manifest Microsoft-Windows-UserModePowerService
|
|
- channel:
|
|
0x10: Microsoft-Windows-UserModePowerService/Diagnostic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: PowerMeter
|
|
0x2: EnergyMeter
|
|
0x4: SmartUserPresence
|
|
0x8: SleepStudy
|
|
0x10: BrightnessTransition
|
|
0x20: AdaptiveStandby
|
|
0x40: KwSleepStudy
|
|
0x8000000000000000: Microsoft-Windows-UserModePowerService/Diagnostic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{CF3F502E-B40D-4071-996F-00981EDF938E} Manifest Microsoft-Windows-PrintBRM
|
|
- channel:
|
|
0x10: Microsoft-Windows-PrintBRM/Admin: Admin
|
|
- keyword:
|
|
0x1: PRINT_BRM_KEYWORD: Print BRM
|
|
0x2: PRINT_QUEUE_KEYWORD: Print Queue
|
|
0x4: PRINT_DRIVER_KEYWORD: Print Driver
|
|
0x8: PRINT_PROC_KEYWORD: Print Processor
|
|
0x10: PRINT_LANG_MON_KEYWORD: Printer Language Monitor
|
|
0x20: PRINT_FORM_KEYWORD: Print Form
|
|
0x40: PRINT_PORT_KEYWORD: Printer Port
|
|
0x8000000000000000: Microsoft-Windows-PrintBRM/Admin: Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{CFAA5446-C6C4-4F5C-866F-31C9B55B962D} Manifest Microsoft-Windows-DCLocator
|
|
- channel:
|
|
0x10: Microsoft-Windows-DCLocator/Debug
|
|
- keyword:
|
|
0x2: misc
|
|
0x10: mailslot
|
|
0x20: site
|
|
0x100: critical
|
|
0x200: session_setup
|
|
0x4000: dns
|
|
0x20000: dns_more
|
|
0x2000000: mailslot_text
|
|
0x8000000: site_more
|
|
0x8000000000000000: Microsoft-Windows-DCLocator/Debug
|
|
|
|
{CFC18EC0-96B1-4EBA-961B-622CAEE05B0A} Manifest Microsoft-Windows-Diagnostics-Performance
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnostics-Performance/Operational: Operational
|
|
0x11: Microsoft-Windows-Diagnostics-Performance/Diagnostic: Diagnostic
|
|
0x12: Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback: Diagnostic-Loopback
|
|
- keyword:
|
|
0x10000: EventLog: Event Log
|
|
0x20000: BootStatus
|
|
0x40000: ShellStatus
|
|
0x80000: StandbyStatus
|
|
0x100000: ScenarioStatus
|
|
0x200000: BootLoopback
|
|
0x400000: ShutdownStatus
|
|
0x800000: ResolverLoopback
|
|
0x1000000: SecondaryLogonStatus
|
|
0x2000000: SecondaryLogonLoopback
|
|
0x8000000000000000: Microsoft-Windows-Diagnostics-Performance/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-Diagnostics-Performance/Diagnostic: Diagnostic
|
|
0x2000000000000000: Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback: Diagnostic-Loopback
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{CFEB0608-330E-4410-B00D-56D8DA9986E6} Manifest Microsoft-Antimalware-AMFilter
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{D02A9C27-79B8-40D6-9B97-CF3F8B7B5D60} Manifest Microsoft-Windows-AppIDServiceTrigger
|
|
- keyword:
|
|
0x1: AppIdTriggerKeyword
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D0E22EFC-AC66-4B25-A72D-382736B5E940} Manifest Microsoft-Windows-Spell-Checking
|
|
- channel:
|
|
0x10: Microsoft-Windows-Spell-Checking/Analytic: Microsoft Windows Spell Checking Facility Analytic Channel
|
|
0x8: System: System
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Spell-Checking/Analytic: Microsoft Windows Spell Checking Facility Analytic Channel
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{D17B213A-C505-49C9-98CC-734253EF65D4} Manifest Microsoft-Windows-msmpeg2venc
|
|
- channel:
|
|
0x10: Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic: Events from the MPEG-2 Video Encoder MFT
|
|
- keyword:
|
|
0x400000000000: Encoder_Control: Events dealing with the control of the encoder.
|
|
0x800000000000: Sample_Processing: Events that deal with the processing of samples
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000: win:SQM: SQM
|
|
0x8000000000000000: Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic: Events from the MPEG-2 Video Encoder MFT
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{D17FFF2F-392D-478C-A41D-737A216EB2A4} Manifest Microsoft-Windows-IE-F12-Provider
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D1BC9AFF-2ABF-4D71-9146-ECB2A986EB85} Manifest Microsoft-Windows-Windows Firewall With Advanced Security
|
|
- channel:
|
|
0x10: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
|
|
0x11: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity
|
|
0x12: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose
|
|
0x13: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose
|
|
0x14: Network Isolation Operational: Network Isolation Operational
|
|
- keyword:
|
|
0x10: ut:AOAC
|
|
0x20000000000: ut:PiiPresent
|
|
0x8000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall: Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
|
|
0x4000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity
|
|
0x2000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose
|
|
0x1000000000000000: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose: Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose
|
|
0x800000000000000: Network Isolation Operational: Network Isolation Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D1D93EF7-E1F2-4F45-9943-03D245FE6C00} Manifest Microsoft-Windows-Kernel-Memory
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-Memory/Analytic
|
|
- keyword:
|
|
0x20: KERNEL_MEM_KEYWORD_MEMINFO
|
|
0x40: KERNEL_MEM_KEYWORD_MEMINFO_EX
|
|
0x80: KERNEL_MEM_KEYWORD_WS_SWAP
|
|
0x100: KERNEL_MEM_KEYWORD_ACG
|
|
0x8000000000000000: Microsoft-Windows-Kernel-Memory/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D1F688BF-012F-4AEC-A38C-E7D4649F8CD2} Manifest Microsoft-Windows-UserDataAccess-UserDataUtils
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: UserDataAccessUtils
|
|
0x8: ServiceBase: ServiceBase
|
|
0x100: debug: Debug
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{D2402FDE-7526-5A7B-501A-25DC7C9C282E} Manifest Microsoft-Windows-Media-Protection-PlayReady-Performance
|
|
- channel:
|
|
0x10: PlayReadyPerformanceChannel: PlayReady-Performance
|
|
- keyword:
|
|
0x100: Telemetry
|
|
0x200: DiagTrack
|
|
0x8000000000000000: PlayReadyPerformanceChannel: PlayReady-Performance
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{D29D56EA-4867-4221-B02E-CFD998834075} Manifest Microsoft-Windows-Dwm-Dwm
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dwm-Dwm/Diagnostic
|
|
- keyword:
|
|
0x1: DwmExe
|
|
0x2: DwmExeGhosting
|
|
0x8000000000000000: Microsoft-Windows-Dwm-Dwm/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D2E990DA-8504-4702-A5E5-367FC2F823BF} Manifest Microsoft-Windows-All-User-Install-Agent
|
|
- channel:
|
|
0x10: Microsoft-Windows-All-User-Install-Agent/Admin: Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-All-User-Install-Agent/Admin: Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D37687E7-8BF0-4D11-B589-A7ABE080756A} Manifest Microsoft-Windows-SleepStudy
|
|
- channel:
|
|
0x10: Microsoft-Windows-SleepStudy/Diagnostic
|
|
- keyword:
|
|
0x1: sleepstudy
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-SleepStudy/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D386CC7A-620A-41C1-ABF5-55018C6C699A} Manifest Intel-iaLPSS-GPIO
|
|
- channel:
|
|
0x10: Intel-IALPSS-GPIO/Analytic: Analytic Channel
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Intel-IALPSS-GPIO/Analytic: Analytic Channel
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D38FB874-33E4-4DCF-911E-1B53BB106D53} Manifest Microsoft-Windows-DLNA-Namespace
|
|
- channel:
|
|
0x10: Microsoft-Windows-DLNA-Namespace/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DLNA-Namespace/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D39B6336-CFCB-483B-8C76-7C3E7D02BCB8} Manifest Microsoft-Windows-Build-RegDll
|
|
- channel:
|
|
0x10: Microsoft-Windows-Regsvr32/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Regsvr32/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D3F29EDA-805D-428A-9902-B259B937F84B} Manifest Microsoft-Windows-RetailDemo
|
|
- channel:
|
|
0x10: Microsoft-Windows-RetailDemo/Admin: Admin
|
|
0x11: Microsoft-Windows-RetailDemo/Operational: Operational
|
|
- keyword:
|
|
0x1: Service
|
|
0x8000000000000000: Microsoft-Windows-RetailDemo/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-RetailDemo/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D4263C98-310C-4D97-BA39-B55354F08584} Manifest Microsoft-Windows-COM
|
|
- channel:
|
|
0x10: Microsoft-Windows-COM/Analytic
|
|
- keyword:
|
|
0x10: COM_CLASSNOTREG_ERROR: Deprecated COM interfaces
|
|
0x8000000000000000: Microsoft-Windows-COM/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D48CE617-33A2-4BC3-A5C7-11AA4F29619E} Manifest Microsoft-Windows-SMBServer
|
|
- channel:
|
|
0x10: Microsoft-Windows-SMBServer/Performance: Microsoft-Windows-SMBServer/Performance
|
|
0x11: Microsoft-Windows-SMBServer/Analytic: Microsoft-Windows-SMBServer/Analytic
|
|
0x12: Microsoft-Windows-SMBServer/Operational: Microsoft-Windows-SMBServer/Operational
|
|
0x13: Microsoft-Windows-SMBServer/Diagnostic: Microsoft-Windows-SMBServer/Diagnostic
|
|
0x14: Microsoft-Windows-SMBServer/Security: Microsoft-Windows-SMBServer/Security
|
|
0x15: Microsoft-Windows-SMBServer/Connectivity: Microsoft-Windows-SMBServer/Connectivity
|
|
0x16: Microsoft-Windows-SMBServer/Audit: Microsoft-Windows-SMBServer/Audit
|
|
- keyword:
|
|
0x1: Request
|
|
0x2: Response
|
|
0x4: Transition
|
|
0x8: Operational
|
|
0x10: Connection
|
|
0x20: Session
|
|
0x40: TreeConnect
|
|
0x80: File
|
|
0x100: Share
|
|
0x200: Nsi
|
|
0x1000: Correlation
|
|
0x40000000: PacketStart
|
|
0x80000000: PacketEnd
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x40000000000: ut:Packet
|
|
0x800000000000: PduFull
|
|
0x10000000000000: win:AuditFailure: Audit Failure
|
|
0x8000000000000000: Microsoft-Windows-SMBServer/Performance: Microsoft-Windows-SMBServer/Performance
|
|
0x4000000000000000: Microsoft-Windows-SMBServer/Analytic: Microsoft-Windows-SMBServer/Analytic
|
|
0x2000000000000000: Microsoft-Windows-SMBServer/Operational: Microsoft-Windows-SMBServer/Operational
|
|
0x1000000000000000: Microsoft-Windows-SMBServer/Diagnostic: Microsoft-Windows-SMBServer/Diagnostic
|
|
0x800000000000000: Microsoft-Windows-SMBServer/Security: Microsoft-Windows-SMBServer/Security
|
|
0x400000000000000: Microsoft-Windows-SMBServer/Connectivity: Microsoft-Windows-SMBServer/Connectivity
|
|
0x200000000000000: Microsoft-Windows-SMBServer/Audit: Microsoft-Windows-SMBServer/Audit
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{D49918CF-9489-4BF1-9D7B-014D864CF71F} Manifest Microsoft-Windows-ProcessStateManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-ProcessStateManager/Diagnostic
|
|
- keyword:
|
|
0x1: StateChange
|
|
0x2: Policy
|
|
0x4: PriorityChange
|
|
0x8: Rundown
|
|
0x10: ProcessRegister
|
|
0x8000000000000000: Microsoft-Windows-ProcessStateManager/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D4AEAC44-AD44-456E-9C90-33F8CDCED6AF} Manifest Intel-iaLPSS-I2C
|
|
- channel:
|
|
0x10: Intel-IALPSS-I2C/Analytic: Analytic Channel
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: Intel-IALPSS-I2C/Analytic: Analytic Channel
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D4AFA0DC-4DD1-40AF-AFCE-CB0D0E6736A7} Manifest Microsoft-Windows-WlanDlg
|
|
- channel:
|
|
0x10: Microsoft-Windows-WlanDlg/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WlanDlg/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D5268C02-6F51-436F-983B-74F2EFBFAF3A} Manifest Microsoft-Windows-IME-TCTIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-TCTIP/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IME-TCTIP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D53270E3-C8CF-4707-958A-DAD20C90073C} Manifest Microsoft-Windows-WindowsColorSystem
|
|
- channel:
|
|
0x10: Microsoft-Windows-WindowsColorSystem/Operational
|
|
0x11: Microsoft-Windows-WindowsColorSystem/Debug
|
|
- keyword:
|
|
0x1: wcse:Lino: CMM for ICC profiles
|
|
0x2: wcse:Cite: CMM for WCS profiles
|
|
0x8000000000000000: Microsoft-Windows-WindowsColorSystem/Operational
|
|
0x4000000000000000: Microsoft-Windows-WindowsColorSystem/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D5C25F9A-4D47-493E-9184-40DD397A004D} Manifest Microsoft-Windows-Winsock-WS2HELP
|
|
- channel:
|
|
0x10: Microsoft-Windows-Winsock-WS2HELP/Operational: Microsoft-Windows-Winsock Catalog Change/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Winsock-WS2HELP/Operational: Microsoft-Windows-Winsock Catalog Change/Operational
|
|
|
|
{D5F7235B-48E2-4E9C-92FE-0E4950ABA9E8} Manifest Microsoft-Windows-WEPHOSTSVC
|
|
- channel:
|
|
0x10: Microsoft-Windows-WEPHOSTSVC/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WEPHOSTSVC/Operational: Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x4: win:Informational: Information
|
|
|
|
{D6F68875-CDF5-43A5-A3E3-53FFD683311C} Manifest Microsoft-Windows-CorruptedFileRecovery-Server
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-CorruptedFileRecovery-Server/Operational: Microsoft-Windows-CorruptedFileRecovery-Server/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-CorruptedFileRecovery-Server/Operational: Microsoft-Windows-CorruptedFileRecovery-Server/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{D710D46C-235D-4798-AC20-9F83E1DCD557} Manifest Microsoft-Windows-EapMethods-Ttls
|
|
- channel:
|
|
0x10: Microsoft-Windows-EapMethods-Ttls/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-EapMethods-Ttls/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D84521F7-2235-4237-A7C0-14E3A9676286} Manifest Microsoft-Windows-Ras-NdisWanPacketCapture
|
|
- channel:
|
|
0x10: Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic
|
|
- keyword:
|
|
0x100000000: rras_ndiswan_sendpath
|
|
0x200000000: rras_ndiswan_recvpath
|
|
0x8000000000000000: Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{D8900E18-36CB-4548-966F-13F068D1F78E} Manifest Microsoft-Windows-Sensors
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sensors/Performance: Performance
|
|
0x11: Microsoft-Windows-Sensors/Debug: Debug
|
|
- keyword:
|
|
0x1: SensPerf
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Sensors/Performance: Performance
|
|
0x4000000000000000: Microsoft-Windows-Sensors/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D8965FCF-7397-4E0E-B750-21A4580BD880} Manifest Microsoft-Windows-UI-Search
|
|
- channel:
|
|
0x10: Microsoft-Windows-SearchUI/Diagnostic
|
|
0x11: Microsoft-Windows-SearchUI/Operational
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-SearchUI/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-SearchUI/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{D8975F88-7DDB-4ED0-91BF-3ADF48C48E0C} Manifest Microsoft-Windows-RPCSS
|
|
- channel:
|
|
0x10: EndpointMapper: Debug
|
|
- keyword:
|
|
0x100: EpmapDebug: Debug
|
|
0x200: EpmapInterfaceRegister: Interface register
|
|
0x400: EpmapInterfaceUnregister: Interface unregister
|
|
0x8000000000000000: EndpointMapper: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{D92EF8AC-99DD-4AB8-B91D-C6EBA85F3755} Manifest Microsoft-Windows-ASN1
|
|
- channel:
|
|
0x10: Microsoft-Windows-ASN1/Operational: Microsoft-Windows-ASN1/Operational
|
|
- keyword:
|
|
0x1: KEYWORD_SYSTEM_NTASN1_DECODING: Decoding
|
|
0x8000000000000000: Microsoft-Windows-ASN1/Operational: Microsoft-Windows-ASN1/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{DA1D1DBD-3186-4FA2-BC2D-075EFD9E43E2} Manifest Microsoft-Windows-USBVideo
|
|
- channel:
|
|
0x10: Microsoft-Windows-USBVideo/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-USBVideo/Analytic
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DAA6A96B-F3E7-4D4D-A0D6-31A350E6A445} Manifest Microsoft-Windows-WLAN-Driver
|
|
- channel:
|
|
0x10: Microsoft-Windows-WLAN-Driver/Analytic
|
|
- keyword:
|
|
0x1: DataPath
|
|
0x8000000000000000: Microsoft-Windows-WLAN-Driver/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DAAE058C-46C9-4C13-85D9-D352FD829951} Manifest Intel-SST-CFD-HDA
|
|
|
|
{DAB065A9-620F-45BA-B5D6-D6BB8EFEDEE9} Manifest Microsoft-Windows-Search-ProtocolHandlers
|
|
- channel:
|
|
0x10: Microsoft-Windows-Search-ProtocolHandlers/Diagnostic
|
|
- keyword:
|
|
0x1: Performance: Flag for events used for performance measurements
|
|
0x4: Indexing: Indexing-related high level events
|
|
0x8: IndexingItem: Events reported per each item indexed
|
|
0x10: IndexingChunk: Events reported per each chunk
|
|
0x1000000: MAPIPH: MAPI Protocol Handler
|
|
0x2000000: FilePH: File Protocol Handler, USN notifications
|
|
0x4000000: CSCPH: CSC (Client Side Cache) Protocol Handler
|
|
0x8000000000000000: Microsoft-Windows-Search-ProtocolHandlers/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{DAB3B18C-3C0F-43E8-80B1-E44BC0DAD901} Manifest Microsoft-Windows-AxInstallService
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-AxInstallService/Log
|
|
- keyword:
|
|
0x1: ZonePolicy: Policy
|
|
0x2: Download: Download
|
|
0x4: UrlCache: Url Cache
|
|
0x8: General: General
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-AxInstallService/Log
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{DABA4D32-CC40-4266-BB95-C30344DBC680} Manifest Microsoft-Windows-Power-CAD
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Trace: Trace
|
|
0x8: Notify: Notify
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{DAF0B914-9C1C-450A-81B2-FEA7244F6FFA} Manifest Microsoft-Office-Word
|
|
- channel:
|
|
0x10: WordChannel
|
|
- keyword:
|
|
0x1: MyLocalChanges
|
|
0x2: Layout
|
|
0x4: Display
|
|
0x8: KeyboardInput
|
|
0x10: None
|
|
0x20: Logging
|
|
0x40: Idle
|
|
0x80: FileOpen
|
|
0x100: Font
|
|
0x200: Save
|
|
0x400: FormatConsistencyChecker
|
|
0x800: LiveStatisticsCount
|
|
0x1000: ParagraphIDs
|
|
0x2000: HrLog
|
|
0x4000: MemoryStorageObject
|
|
0x8000: CoAuthoring
|
|
0x10000: Locks
|
|
0x20000: Metadata
|
|
0x40000: ThreeWayMerge
|
|
0x80000: Animation
|
|
0x100000: Touch
|
|
0x200000: StructuredDocumentTags
|
|
0x400000: OfficeSolutionFramework
|
|
0x800000: Rasterization
|
|
0x1000000: Power
|
|
0x2000000: UnitTest
|
|
0x4000000: TargetElement
|
|
0x8000000: TEPinningTest
|
|
0x10000000: GlobalState
|
|
0x20000000: View
|
|
0x40000000: InProcAutomation
|
|
0x80000000: Activation
|
|
0x8000000000000000: WordChannel
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: wls:Verbose10
|
|
0x32: wls:Verbose50
|
|
0x64: wls:Verbose100
|
|
0xc8: wls:Verbose200
|
|
|
|
{DB00DFB6-29F9-4A9C-9B3B-1F4F9E7D9770} Manifest Microsoft-Windows-User Profiles General
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-User Profile Service/Operational
|
|
0x11: Microsoft-Windows-User Profile Service/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-User Profile Service/Operational
|
|
0x2000000000000000: Microsoft-Windows-User Profile Service/Diagnostic
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DB66EA65-B7BB-4CA9-8748-334CB5C32400} Manifest Microsoft-Windows-SMBDirect
|
|
- channel:
|
|
0x10: Microsoft-Windows-SMBDirect/Admin: Microsoft-Windows-SMBDirect/Admin
|
|
0x11: Microsoft-Windows-SMBDirect/Debug: Microsoft-Windows-SMBDirect/Debug
|
|
0x12: Microsoft-Windows-SMBDirect/Netmon: Microsoft-Windows-SMBDirect/Netmon
|
|
- keyword:
|
|
0x1: Disconnect
|
|
0x2: Connect
|
|
0x4: Accept
|
|
0x8: Credits
|
|
0x10: NDK
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x40000000000: ut:Packet
|
|
0x8000000000000000: Microsoft-Windows-SMBDirect/Admin: Microsoft-Windows-SMBDirect/Admin
|
|
0x4000000000000000: Microsoft-Windows-SMBDirect/Debug: Microsoft-Windows-SMBDirect/Debug
|
|
0x2000000000000000: Microsoft-Windows-SMBDirect/Netmon: Microsoft-Windows-SMBDirect/Netmon
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DB6972B6-DDDF-4820-84B1-2ED6AC0B96E5} Manifest Microsoft-Windows-WebAuth
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebAuth/Operational: Operational
|
|
- keyword:
|
|
0x1: AuthHost: AuthHost
|
|
0x8000000000000000: Microsoft-Windows-WebAuth/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DB6F6DDB-AC77-4E88-8253-819DF9BBF140} Manifest Microsoft-Windows-Direct3D11
|
|
- channel:
|
|
0x10: Microsoft-Windows-Direct3D11/Analytic
|
|
0x11: Microsoft-Windows-Direct3D11/Logging
|
|
0x12: Microsoft-Windows-Direct3D11/PerfTiming
|
|
- keyword:
|
|
0x1: Names
|
|
0x2: Devices
|
|
0x4: Resources
|
|
0x8: Timing
|
|
0x10: Contexts
|
|
0x20: CommandLists
|
|
0x100: Markers
|
|
0x200: RenderOperationMarkers
|
|
0x400: DriverCustomMarkers
|
|
0x800: JournalEntries
|
|
0x8000000000000000: Microsoft-Windows-Direct3D11/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Direct3D11/Logging
|
|
0x2000000000000000: Microsoft-Windows-Direct3D11/PerfTiming
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{DBC388BC-89C2-4FE0-B71F-6E4881FB575C} Manifest Microsoft-Windows-IME-JPLMP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-JPLMP/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-JPLMP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DBE9B383-7CF3-4331-91CC-A3CB16A3B538} Manifest Microsoft-Windows-Winlogon
|
|
- channel:
|
|
0x10: Microsoft-Windows-Winlogon/Diagnostic
|
|
0x11: Microsoft-Windows-Winlogon/Operational
|
|
0x8: System: System
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x20000: PerfDiagnostics
|
|
0x40000: NotificationEvents
|
|
0x80000: PerfTrackContext
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-Winlogon/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-Winlogon/Operational
|
|
0x2000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DCA074CE-547C-4595-AE90-56229B8E3BD9} Manifest Microsoft-Windows-MCCS-SyncUtil
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x1000000000: CommsService: CommsService
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DCBE5AAA-16E2-457C-9337-366950045F0A} Manifest Microsoft-Windows-TerminalServices-ServerUSBDevices
|
|
- channel:
|
|
0x10: Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin: Admin
|
|
0x11: Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic: Analytic
|
|
0x12: Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational: Operational
|
|
0x13: Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic: Analytic
|
|
0x2000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational: Operational
|
|
0x1000000000000000: Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DCBFB8F0-CD19-4F1C-A27D-23AC706DED72} Manifest Microsoft-Windows-LinkLayerDiscoveryProtocol
|
|
- channel:
|
|
0x10: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational
|
|
0x11: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic
|
|
- keyword:
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x8000000000000000: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational: Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational
|
|
0x4000000000000000: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic: Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DCFC4489-9CE0-403C-99DF-A05422C60898} Manifest Microsoft-Windows-WPD-MTPUS
|
|
- channel:
|
|
0x10: Microsoft-Windows-WPD-MTPUS/Analytic: Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WPD-MTPUS/Analytic: Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DD2743C6-1722-4674-9F6F-C80044C4232E} Manifest Microsoft-Windows-MCCS-AccountsRT
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4000000000: Warning: Warning
|
|
0x8000000000: StateTransition: StateTransition
|
|
0x80000000000: SyncSelfHost: SyncSelfHost
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{DD2FE441-6C12-41FD-8232-3709C6045F63} Manifest Microsoft-Windows-DirectAccess-MediaManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-DAMM/Diagnostic: Microsoft-Windows-DAMM/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DAMM/Diagnostic: Microsoft-Windows-DAMM/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DD5EF90A-6398-47A4-AD34-4DCECDEF795F} Manifest Microsoft-Windows-HttpService
|
|
- channel:
|
|
0x10: Microsoft-Windows-HttpService/Trace: HTTP Service Channel
|
|
- keyword:
|
|
0x1: HTTP_KEYWORD_SETUP: Flagged on all HTTP events dealing with service setup
|
|
0x2: HTTP_KEYWORD_REQUEST: Flagged on all HTTP events dealing with request processing
|
|
0x4: HTTP_KEYWORD_RESPONSE: Flagged on all HTTP events dealing with response handling
|
|
0x8: HTTP_KEYWORD_ENDPOINT: Flagged on all HTTP events dealing with endpoints
|
|
0x10: HTTP_KEYWORD_CONNECTION: Flagged on all HTTP events occurring on a connection
|
|
0x20: HTTP_KEYWORD_CACHE: Flagged on all HTTP events dealing with URI cache
|
|
0x40: HTTP_KEYWORD_URL_GROUP: Flagged on all HTTP events triggered on a URL group
|
|
0x80: HTTP_KEYWORD_SERVER_SESSION: Flagged on all HTTP events triggered on a server session
|
|
0x100: HTTP_KEYWORD_REQUEST_QUEUE: Flagged on all HTTP events triggered on a request queue
|
|
0x200: HTTP_KEYWORD_SSL: Flagged on all HTTP events handling SSL interactions
|
|
0x400: HTTP_KEYWORD_AUTHENTICATION: Flagged on all HTTP events handling authentication (SSPI) and authentication cache
|
|
0x800: HTTP_KEYWORD_LOGGING: Flagged on all HTTP events dealing with error log activities
|
|
0x1000: HTTP_KEYWORD_TIMEOUT: Flagged on all HTTP events setting/resetting/triggering timeouts
|
|
0x2000: HTTP_KEYWORD_DRIVER_SETTING: Flagged on all HTTP events dealing with global driver settings
|
|
0x4000: HTTP_KEYWORD_THREAD_POOL: Flagged on all HTTP events in thread pool
|
|
0x8000000000000000: Microsoft-Windows-HttpService/Trace: HTTP Service Channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DD70BC80-EF44-421B-8AC3-CD31DA613A4E} Manifest Ntfs
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DD85457F-4E2D-44A5-A7A7-6253362E34DC} Manifest Microsoft-Windows-BranchCacheEventProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-BranchCacheEventProvider/Diagnostic: Microsoft-Windows-BranchCacheEventProvider/DiagnosticChannel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BranchCacheEventProvider/Diagnostic: Microsoft-Windows-BranchCacheEventProvider/DiagnosticChannel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DDCC3826-A68A-4E0D-BCFD-9C06C27C6948} Manifest Microsoft-Windows-Energy-Estimation-Engine
|
|
- channel:
|
|
0x10: Microsoft-Windows-Energy-Estimation-Engine/Trace
|
|
0x11: Microsoft-Windows-Energy-Estimation-Engine/EventLog
|
|
- keyword:
|
|
0x1: CodePath
|
|
0x2: SystemInformation
|
|
0x4: EnergyEstimation
|
|
0x8: ProcessTag
|
|
0x10: CommitEnergy
|
|
0x8000000000000000: Microsoft-Windows-Energy-Estimation-Engine/Trace
|
|
0x4000000000000000: Microsoft-Windows-Energy-Estimation-Engine/EventLog
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DDDC1D91-51A1-4A8D-95B5-350C4EE3D809} Manifest Microsoft-Windows-AuthenticationProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-Authentication/ProtectedUser-Client: Microsoft-Windows-Authentication/ProtectedUser-Client
|
|
0x11: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController
|
|
0x12: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController
|
|
0x13: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Authentication/ProtectedUser-Client: Microsoft-Windows-Authentication/ProtectedUser-Client
|
|
0x4000000000000000: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController: Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController
|
|
0x2000000000000000: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController: Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController
|
|
0x1000000000000000: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController: Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{DDE50426-FA77-4088-8E0C-F2F553FB6843} Manifest HidEventFilter
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: IRP
|
|
0x4: Power
|
|
0x8: PlugnPlay
|
|
0x10: ApiTrace
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DE095DBE-8667-4168-94C2-48CA61665ACA} Manifest Microsoft-Windows-HotspotAuth
|
|
- channel:
|
|
0x10: Microsoft-Windows-HotspotAuth/Analytic: Microsoft-Windows-HotspotAuth/Analytic
|
|
0x11: Microsoft-Windows-HotspotAuth/Operational: Microsoft-Windows-HotspotAuth/Operational
|
|
- keyword:
|
|
0x1: ut:Authentication
|
|
0x10: ut:WISPrDetection
|
|
0x100: ut:HotspotDetection
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-HotspotAuth/Analytic: Microsoft-Windows-HotspotAuth/Analytic
|
|
0x4000000000000000: Microsoft-Windows-HotspotAuth/Operational: Microsoft-Windows-HotspotAuth/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{DE29CF61-5EE6-43FF-9AAC-959C4E13CC6C} Manifest Microsoft-User Experience Virtualization-Agent Driver
|
|
- channel:
|
|
0x10: Microsoft-User Experience Virtualization-Agent Driver/Operational: Operational
|
|
0x11: Microsoft-User Experience Virtualization-Agent Driver/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-User Experience Virtualization-Agent Driver/Operational: Operational
|
|
0x4000000000000000: Microsoft-User Experience Virtualization-Agent Driver/Debug: Debug
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DE513A55-C345-438B-9A74-E18CAC5C5CC5} Manifest Microsoft-Windows-Help
|
|
- channel:
|
|
0x10: Microsoft-Windows-Help/Operational: Microsoft-Windows-Help/Operational
|
|
- keyword:
|
|
0x10000: PerfEvent: Performance Event
|
|
0x20000: NonPerfEvent: Non Performance Event
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Help/Operational: Microsoft-Windows-Help/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DE7B24EA-73C8-4A09-985D-5BDADCFA9017} Manifest Microsoft-Windows-TaskScheduler
|
|
- channel:
|
|
0x10: Microsoft-Windows-TaskScheduler/Operational: Operational
|
|
0x8: System: System
|
|
0x11: Microsoft-Windows-TaskScheduler/Debug: Debug
|
|
0x12: Microsoft-Windows-TaskScheduler/Diagnostic: Diagnostic
|
|
0x13: Microsoft-Windows-TaskScheduler/Maintenance: Maintenance
|
|
- keyword:
|
|
0x1: ForcedIdleProcessing
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-TaskScheduler/Operational: Operational
|
|
0x4000000000000000: System: System
|
|
0x2000000000000000: Microsoft-Windows-TaskScheduler/Debug: Debug
|
|
0x1000000000000000: Microsoft-Windows-TaskScheduler/Diagnostic: Diagnostic
|
|
0x800000000000000: Microsoft-Windows-TaskScheduler/Maintenance: Maintenance
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DEA07764-0790-44DE-B9C4-49677B17174F} Manifest Microsoft-Windows-FMS
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-FMS/Operational: Microsoft-Windows-FMS/Operational
|
|
0x11: Microsoft-Windows-FMS/Analytic: Microsoft-Windows-FMS/Analytic
|
|
0x12: Microsoft-Windows-FMS/Debug: Microsoft-Windows-FMS/Debug
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-FMS/Operational: Microsoft-Windows-FMS/Operational
|
|
0x2000000000000000: Microsoft-Windows-FMS/Analytic: Microsoft-Windows-FMS/Analytic
|
|
0x1000000000000000: Microsoft-Windows-FMS/Debug: Microsoft-Windows-FMS/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{DED165CF-485D-4770-A3E7-9C5F0320E80C} Manifest Microsoft-Windows-DeviceUx
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceUx/Informational
|
|
0x11: Microsoft-Windows-DeviceUx/Performance
|
|
- keyword:
|
|
0x1: DeviceUX
|
|
0x10: DeviceUX-Performance
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DeviceUx/Informational
|
|
0x4000000000000000: Microsoft-Windows-DeviceUx/Performance
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{DF271536-4298-45E1-B0F2-E88F78619C5D} Manifest Microsoft-Windows-Ndu
|
|
- channel:
|
|
0x10: Microsoft-Windows-Ndu/Diagnostic
|
|
- keyword:
|
|
0x1: KeywordNduDebugTrace: NduDebugTrace
|
|
0x2: KeywordNduPerInterfaceStats: PerInterfaceStats
|
|
0x4: KeywordNduPerFlowStats: PerFlowStats
|
|
0x8: KeywordNduTokenTracking: TokenTracking
|
|
0x10: KeywordNduLwtPerMinuteInterfaceStats: PerInterfaceStats
|
|
0x20: KeywordNduPowerDebug: NduPowerDebug
|
|
0x8000000000000000: Microsoft-Windows-Ndu/Diagnostic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{DFA86FAA-2C55-4140-BFF9-5CC586217A7B} Manifest Microsoft-Windows-PDFReader
|
|
- channel:
|
|
0x10: Microsoft-Windows-glcnd/Diagnostic
|
|
0x11: Microsoft-Windows-glcnd/Debug
|
|
0x12: Microsoft-Windows-glcnd/Admin
|
|
- keyword:
|
|
0x10000: Reader
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-glcnd/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-glcnd/Debug
|
|
0x2000000000000000: Microsoft-Windows-glcnd/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E013E74B-97F4-4E1C-A120-596E5629ECFE} Manifest Microsoft-Windows-IME-KRTIP
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-KRTIP/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-IME-KRTIP/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E01B1A7C-C5C9-4E67-99A9-5E85ACFB2E10} Manifest Microsoft-Windows-Diagnosis-WDI
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-WDI/Debug: Microsoft-Windows-Diagnosis-WDI/Debug
|
|
- keyword:
|
|
0x200: memory: Memory tracing events
|
|
0x400000000: debug: Debug events
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-WDI/Debug: Microsoft-Windows-Diagnosis-WDI/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E02A841C-75A3-4FA7-AFC8-AE09CF9B7F23} Manifest Microsoft-Windows-Kernel-Audit-API-Calls
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E04FE2E0-C6CF-4273-B59D-5C97C9C374A4} Manifest Microsoft-Windows-WebServices
|
|
- channel:
|
|
0x10: Microsoft-Windows-WebServices/Tracing
|
|
- keyword:
|
|
0x1: keywords.API: API
|
|
0x2: keywords.Error: Error
|
|
0x4: keywords.IO: IO
|
|
0x8: keywords.Message: Message
|
|
0x10: keywords.BinaryMessage: BinaryMessage
|
|
0x8000000000000000: Microsoft-Windows-WebServices/Tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E08C85F4-C224-499D-B5B3-C1BCE960F096} Manifest Microsoft-Windows-Telephony-PhoneOm
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: Debug
|
|
0x8: PhoneDefault
|
|
0x10: CONTROLLER
|
|
0x20: CellularProvider
|
|
0x40: PHONEUI
|
|
0x100: Callhistory
|
|
0x200: CDMA
|
|
0x400: VVM
|
|
0x1000: MISC
|
|
0x2000: PhoneOM
|
|
0x4000000000: Warning
|
|
0x8000000000: StateTransition
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{E0A40B26-30C4-4656-BC9A-74A5C3A0B2EC} Manifest Microsoft-Windows-UIAnimation
|
|
- channel:
|
|
0x10: Microsoft-Windows-UIAnimation/Diagnostic
|
|
- keyword:
|
|
0x1: Default
|
|
0x8000000000000000: Microsoft-Windows-UIAnimation/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E0C6F6DE-258A-50E0-AC1A-103482D118BC} Manifest Microsoft-Windows-Install-Agent
|
|
- channel:
|
|
0x10: Microsoft-Windows-Store/Operational
|
|
- keyword:
|
|
0x10000000: OldMessages
|
|
0x20000000: Messages
|
|
0x8000000000000000: Microsoft-Windows-Store/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E104FB41-6B04-4F3A-B47D-F0DF2F02B954} Manifest Microsoft-Windows-DiskDiagnosticDataCollector
|
|
- channel:
|
|
0x10: Microsoft-Windows-DiskDiagnosticDataCollector/Operational: Microsoft-Windows-DiskDiagnosticDataCollector/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DiskDiagnosticDataCollector/Operational: Microsoft-Windows-DiskDiagnosticDataCollector/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E1168941-8333-497F-98D9-67BEE05A6034} Manifest Microsoft-Windows-Globalization-FontGroups
|
|
- channel:
|
|
0x10: Microsoft-Windows-FontGroups/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-FontGroups/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E13C0D23-CCBC-4E12-931B-D9CC2EEE27E4} Manifest Microsoft-Windows-DotNETRuntime
|
|
- keyword:
|
|
0x1: GCKeyword: GC
|
|
0x2: GCHandleKeyword: GCHandle
|
|
0x4: FusionKeyword: Binder
|
|
0x8: LoaderKeyword: Loader
|
|
0x10: JitKeyword: Jit
|
|
0x20: NGenKeyword: NGen
|
|
0x40: StartEnumerationKeyword: StartEnumeration
|
|
0x80: EndEnumerationKeyword: StopEnumeration
|
|
0x400: SecurityKeyword: Security
|
|
0x800: AppDomainResourceManagementKeyword: AppDomainResourceManagement
|
|
0x1000: JitTracingKeyword: JitTracing
|
|
0x2000: InteropKeyword: Interop
|
|
0x4000: ContentionKeyword: Contention
|
|
0x8000: ExceptionKeyword: Exception
|
|
0x10000: ThreadingKeyword: Threading
|
|
0x20000: JittedMethodILToNativeMapKeyword: JittedMethodILToNativeMap
|
|
0x40000: OverrideAndSuppressNGenEventsKeyword: OverrideAndSuppressNGenEvents
|
|
0x80000: TypeKeyword: Type
|
|
0x100000: GCHeapDumpKeyword: GCHeapDump
|
|
0x200000: GCSampledObjectAllocationHighKeyword: GCSampledObjectAllocationHigh
|
|
0x400000: GCHeapSurvivalAndMovementKeyword: GCHeapSurvivalAndMovement
|
|
0x800000: GCHeapCollectKeyword: GCHeapCollect
|
|
0x1000000: GCHeapAndTypeNamesKeyword: GCHeapAndTypeNames
|
|
0x2000000: GCSampledObjectAllocationLowKeyword: GCSampledObjectAllocationLow
|
|
0x20000000: PerfTrackKeyword: PerfTrack
|
|
0x40000000: StackKeyword: Stack
|
|
0x80000000: ThreadTransferKeyword: ThreadTransfer
|
|
0x100000000: DebuggerKeyword: Debugger
|
|
0x200000000: MonitoringKeyword: Monitoring
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E13FF11E-E989-4838-A9FA-38A4D13914CF} Manifest Microsoft-Windows-GPIOButtons
|
|
- keyword:
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E18D0FC9-9515-4232-98E4-89E456D8551B} Manifest Microsoft-Windows-RTWorkQueue-Threading
|
|
- channel:
|
|
0x10: RTWorkQueueTheading: RTWorkQueue Threading
|
|
- keyword:
|
|
0x100: Telemetry
|
|
0x200: DiagTrack
|
|
0x8000000000000000: RTWorkQueueTheading: RTWorkQueue Threading
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E18D0FCA-9515-4232-98E4-89E456D8551B} Manifest Microsoft-Windows-DVD
|
|
- channel:
|
|
0x10: Navigator: DVD Navigator
|
|
- keyword:
|
|
0x8000000000000000: Navigator: DVD Navigator
|
|
- level:
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E1DA8995-85BC-452B-B62B-0913306A430E} Manifest TeeDriver
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x1: Default
|
|
0x2: Interrupt
|
|
0x4: IRP
|
|
0x8: Power
|
|
0x10: PlugnPlay
|
|
0x20: Performance
|
|
0x40: Enumeration
|
|
0x80: Register
|
|
0x100: ApiTrace
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x1: win:Critical: Critical
|
|
0x4: win:Informational: Information
|
|
|
|
{E1DD7E52-621D-44E3-A1AD-0370C2B25946} Manifest Microsoft-Windows-Diagnosis-Scripted
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-Scripted/Admin: Microsoft-Windows-Diagnosis-Scripted/Admin
|
|
0x11: Microsoft-Windows-Diagnosis-Scripted/Operational: Microsoft-Windows-Diagnosis-Scripted/Operational
|
|
0x12: Microsoft-Windows-Diagnosis-Scripted/Debug: Microsoft-Windows-Diagnosis-Scripted/Debug
|
|
0x13: Microsoft-Windows-Diagnosis-Scripted/Analytic: Microsoft-Windows-Diagnosis-Scripted/Analytic
|
|
- keyword:
|
|
0x100000000: analytic: Analytic Keyword
|
|
0x200000000: debug: Debug Keyword
|
|
0x400000000: admin: Admin Keyword
|
|
0x800000000: lifecycle: Lifecycle Keyword
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-Scripted/Admin: Microsoft-Windows-Diagnosis-Scripted/Admin
|
|
0x4000000000000000: Microsoft-Windows-Diagnosis-Scripted/Operational: Microsoft-Windows-Diagnosis-Scripted/Operational
|
|
0x2000000000000000: Microsoft-Windows-Diagnosis-Scripted/Debug: Microsoft-Windows-Diagnosis-Scripted/Debug
|
|
0x1000000000000000: Microsoft-Windows-Diagnosis-Scripted/Analytic: Microsoft-Windows-Diagnosis-Scripted/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{E2242B38-9453-42FD-B446-00746E76EB82} Manifest Microsoft-Windows-IME-CustomerFeedbackManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-CustomerFeedbackManager/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-CustomerFeedbackManager/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156} Manifest Microsoft-Windows-Security-SPP
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-SPP/Perf
|
|
- keyword:
|
|
0x10000: PerfInstrumentation
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Microsoft-Windows-Security-SPP/Perf
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{E2816346-87F4-4F85-95C3-0C79409AA89D} Manifest Microsoft-Windows-VHDMP
|
|
- channel:
|
|
0x10: Microsoft-Windows-VHDMP-Operational: Microsoft-Windows-VHDMP/Operational
|
|
0x11: Microsoft-Windows-VHDMP-Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VHDMP-Operational: Microsoft-Windows-VHDMP/Operational
|
|
0x4000000000000000: Microsoft-Windows-VHDMP-Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E2C15FD7-8924-4C8C-8CFE-DA0BE539CE27} Manifest Microsoft-Windows-IME-Broker
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-Broker/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-Broker/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E3257C8C-C7CB-444F-9DA0-5D92A2625289} Manifest Microsoft-Windows-Defrag-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-Defrag-Core/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Defrag-Core/Debug
|
|
|
|
{E3BAC9F8-27BE-4823-8D7F-1CC320C05FA7} Manifest Microsoft-Windows-MountMgr
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E3E0E2F0-C9C5-11E0-8AB9-9EBC4824019B} Manifest Microsoft-Windows-Crypto-CNG
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-CNG/Analytic: Microsoft-Windows-Crypto-CNG/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Crypto-CNG/Analytic: Microsoft-Windows-Crypto-CNG/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E3EE1525-8742-4E05-871B-DD2A60330C53} Manifest Microsoft-Windows-UI-Shell
|
|
- channel:
|
|
0x10: Microsoft-Windows-UI-Shell/Diagnostic
|
|
- keyword:
|
|
0x1: Shell
|
|
0x8000000000000000: Microsoft-Windows-UI-Shell/Diagnostic
|
|
|
|
{E4480490-85B6-11DD-AD8B-0800200C9A66} Manifest Microsoft-Windows-VDRVROOT
|
|
- channel:
|
|
0x10: Microsoft-Windows-VDRVROOT/Operational: Microsoft-Windows-VDRVROOT/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VDRVROOT/Operational: Microsoft-Windows-VDRVROOT/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E46EEAD8-0C54-4489-9898-8FA79D059E0E} Manifest Microsoft-Windows-Feedback-Service-TriggerProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-Feedback-Service-TriggerProvider
|
|
- keyword:
|
|
0x1: WerSvc
|
|
0x8000000000000000: Microsoft-Windows-Feedback-Service-TriggerProvider
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E4B70372-261F-4C54-8FA6-A5A7914D73DA} Manifest Microsoft-Antimalware-Protection
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E4D53F84-7DE3-11D8-9435-505054503030} Manifest Microsoft-Windows-Diagnosis-PLA
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-PLA/Operational: Microsoft-Windows-Diagnosis-PLA/Operational
|
|
0x11: Microsoft-Windows-Diagnosis-PLA/Debug: Microsoft-Windows-Diagnosis-PLA/Debug
|
|
- keyword:
|
|
0x100: transaction: Transactions
|
|
0x200: memory: Memory
|
|
0x400: object: Object
|
|
0x800: errors: Errors
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-PLA/Operational: Microsoft-Windows-Diagnosis-PLA/Operational
|
|
0x4000000000000000: Microsoft-Windows-Diagnosis-PLA/Debug: Microsoft-Windows-Diagnosis-PLA/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{E4F68870-5AE8-4E5B-9CE7-CA9ED75B0245} Manifest Microsoft-AppV-Client
|
|
- channel:
|
|
0x10: Microsoft-AppV-Client/Admin: Admin
|
|
0x11: Microsoft-AppV-Client/Operational: Operational
|
|
0x12: Microsoft-AppV-Client/Virtual Applications: Virtual Applications
|
|
- keyword:
|
|
0x1: Startup: Startup
|
|
0x2: Shutdown: Shutdown
|
|
0x4: Logon: Logon
|
|
0x8: Logoff: Logoff
|
|
0x10: API: API
|
|
0x20: ComponentStartup: Component Startup
|
|
0x40: Common: Client Common
|
|
0x80: Catalog: Catalog
|
|
0x100: Publishing: Publishing
|
|
0x200: EmbeddedScripting: Embedded Scripting
|
|
0x400: VFS: Virtual File System
|
|
0x800: VirtualServices: Virtual Services
|
|
0x1000: Settings: Settings
|
|
0x2000: DynamicConfiguration: Dynamic Configuration
|
|
0x4000: ClientManagement: Client Management
|
|
0x8000: Subsystems: Subsystems
|
|
0x10000: ClientCoExistence: Client Co-existence
|
|
0x20000: VREG: Virtual Registry
|
|
0x40000: Streaming: Streaming
|
|
0x80000: ClientStreamingUX: Client Streaming UX
|
|
0x100000: VirtualAppLaunch: Virtual Application Launch
|
|
0x200000: VOBJ: Virtual Object
|
|
0x400000: Reporting: Reporting
|
|
0x800000: PublishingRefresh: Publishing Refresh
|
|
0x1000000: Integration: Integration
|
|
0x2000000: SxS: Side by Side
|
|
0x4000000: AppManagementConfiguration: AppManagementConfiguration
|
|
0x8000000000000000: Microsoft-AppV-Client/Admin: Admin
|
|
0x4000000000000000: Microsoft-AppV-Client/Operational: Operational
|
|
0x2000000000000000: Microsoft-AppV-Client/Virtual Applications: Virtual Applications
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{E53C6823-7BB8-44BB-90DC-3F86090D48A6} Manifest Microsoft-Windows-Winsock-AFD
|
|
- channel:
|
|
0x10: Microsoft-Windows-Winsock-AFD/Operational: Microsoft-Windows-Winsock Network Event/Operational
|
|
- keyword:
|
|
0x1: AFD_KW_DATAGRAM: Datagram socket
|
|
0x2: AFD_KW_STREAM: Stream socket
|
|
0x4: AFD_KW_SOURCE_WINSOCK: Winsock initiated event
|
|
0x8: AFD_KW_SOURCE_TRANSPORT: Transport initiated event
|
|
0x10: AFD_KW_FASTPATH: Fastpath I/O
|
|
0x20: AFD_KW_BUFFERED: Buffered
|
|
0x40: AFD_KW_RIO: RIO
|
|
0x80: AFD_KW_NRT: NRT
|
|
0x10000000000: ut:Dropped
|
|
0x8000000000000000: Microsoft-Windows-Winsock-AFD/Operational: Microsoft-Windows-Winsock Network Event/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E53DF8BA-367A-4406-98D5-709FFB169681} Manifest Microsoft-Windows-WDAG-PolicyEvaluator-GP
|
|
- channel:
|
|
0x10: Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational: Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational: Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{E595F735-B42A-494B-AFCD-B68666945CD3} Manifest Microsoft-Windows-Firewall
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E5AA2A53-30BE-40F5-8D84-AD3F40A404CD} Manifest Microsoft-Windows-TabletPC-Platform-Input-Wisp
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC} Manifest Microsoft-Windows-Security-Netlogon
|
|
- channel:
|
|
0x10: Microsoft-Windows-NTLM/Operational
|
|
0x11: Microsoft-Windows-Security-Netlogon/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-NTLM/Operational
|
|
0x4000000000000000: Microsoft-Windows-Security-Netlogon/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{E5C16D49-2464-4382-BB20-97A4B5465DB9} Manifest Microsoft-Windows-WiFiNetworkManager
|
|
- channel:
|
|
0x69: Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel: WiFiConnSvc tracing
|
|
- keyword:
|
|
0x1: ScnEvt
|
|
0x2: PwrEvt
|
|
0x4: SvcEvt
|
|
0x8: NtfEvt
|
|
0x10: ConEvt
|
|
0x20: PrfEvt
|
|
0x8000000000000000: Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel: WiFiConnSvc tracing
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{E5FC4A0F-7198-492F-9B0F-88FDCBFDED48} Manifest Microsoft-Windows Networking VPN Plugin Platform
|
|
- channel:
|
|
0x10: Windows Networking Vpn Plugin Platform/Operational: Microsoft-Windows-Vpn Plugin Platform/Operational
|
|
0x11: Windows Networking Vpn Plugin Platform/OperationalVerbose: Microsoft-Windows-Vpn Plugin Platform/OperationalVerbose
|
|
- keyword:
|
|
0x20000000000: ut:PiiPresent
|
|
0x8000000000000000: Windows Networking Vpn Plugin Platform/Operational: Microsoft-Windows-Vpn Plugin Platform/Operational
|
|
0x4000000000000000: Windows Networking Vpn Plugin Platform/OperationalVerbose: Microsoft-Windows-Vpn Plugin Platform/OperationalVerbose
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E6307A09-292C-497E-AAD6-498F68E2B619} Manifest Microsoft-Windows-ReadyBoost
|
|
- channel:
|
|
0x10: Microsoft-Windows-ReadyBoost/Operational: Operational
|
|
0x11: Microsoft-Windows-ReadyBoost/Analytic
|
|
- keyword:
|
|
0x1000: Diag
|
|
0x2000: ReadyBoot
|
|
0x4000: ReadyBoost
|
|
0x8000000000000000: Microsoft-Windows-ReadyBoost/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-ReadyBoost/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{E670A5A2-CE74-4AB4-9347-61B815319F4C} Manifest Microsoft-Windows-DiskDiagnostic
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-DiskDiagnostic/Operational: Microsoft-Windows-DiskDiagnostic/Operational
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-DiskDiagnostic/Operational: Microsoft-Windows-DiskDiagnostic/Operational
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{E6835967-E0D2-41FB-BCEC-58387404E25A} Manifest Microsoft-Windows-BrokerInfrastructure
|
|
- channel:
|
|
0x10: Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic
|
|
0x11: Microsoft-Windows-BackgroundTaskInfrastructure/Operational
|
|
- keyword:
|
|
0x1: BackgroundTask
|
|
0x2: PDC
|
|
0x4: LowOverheadDiag
|
|
0x8: Package
|
|
0x10: Watchdog
|
|
0x20: Session
|
|
0x40: SleepStudy
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-BackgroundTaskInfrastructure/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{E6C92FB8-89D7-4D1F-BE46-D56E59804783} Manifest Microsoft-Windows-Security-Vault
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-Vault/Performance
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-Vault/Performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E7558269-3FA5-46ED-9F4D-3C6E282DDE55} Manifest Microsoft-Windows-UAC
|
|
- channel:
|
|
0x10: Microsoft-Windows-UAC/Operational: Microsoft-Windows-UAC/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-UAC/Operational: Microsoft-Windows-UAC/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E7AA32FB-77D0-477F-987D-7E83DF1B7ED0} Manifest Microsoft-Windows-Graphics-Printing
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E8316A2D-0D94-4F52-85DD-1E15B66C5891} Manifest Microsoft-Windows-Subsys-Csr
|
|
- channel:
|
|
0x10: Microsoft-Windows-Subsys-Csr/Operational
|
|
- keyword:
|
|
0x10000: csr:Diagnostics
|
|
0x8000000000000000: Microsoft-Windows-Subsys-Csr/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E837619C-A2A8-4689-833F-47B48EBD2442} Manifest Microsoft-Windows-BranchCacheClientEventProvider
|
|
- channel:
|
|
0x10: Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic: Microsoft-Windows-BranchCacheClientEventProvider/DiagnosticChannel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic: Microsoft-Windows-BranchCacheClientEventProvider/DiagnosticChannel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E8A7C168-81EE-465C-8E8E-D39A2AC1CA41} Manifest Microsoft-Windows-Thermal-Polling
|
|
- keyword:
|
|
0x1: thrmpoll:OneSecond
|
|
0x2: thrmpoll:FiveSecond
|
|
0x4: thrmpoll:ThirtySecond
|
|
0x8: thrmpoll:FiveMinute
|
|
0x10: thrmpoll:ThirtyMinute
|
|
|
|
{E8AA5402-26A1-455E-A21B-F240ED62D155} Manifest Microsoft-Windows-WCNWiz
|
|
- channel:
|
|
0x10: Microsoft-Windows-WCNWiz/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WCNWiz/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E8ED09DC-100C-45E2-9FC8-B53399EC1F70} Manifest Microsoft-Windows-Crypto-NCrypt
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crypto-NCrypt/Operational: Microsoft-Windows-Crypto-NCrypt/Operational
|
|
- keyword:
|
|
0x1: ETW_KEYWORD_NCRYPT_OPERATION: NCrypt Operation
|
|
0x2: ETW_KEYWORD_PROTECT_OPERATION: Secret Protection
|
|
0x8000000000000000: Microsoft-Windows-Crypto-NCrypt/Operational: Microsoft-Windows-Crypto-NCrypt/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{E8F9AF91-AFBE-5A03-DFEC-5D591686326C} Manifest Microsoft-Windows-DeviceUpdateAgent
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceUpdateAgent/Operational: Device Update Agent operational channel
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DeviceUpdateAgent/Operational: Device Update Agent operational channel
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{E978F84E-582D-4167-977E-32AF52706888} Manifest Microsoft-Windows-TabletPC-InputPanel
|
|
- channel:
|
|
0x10: TabletPC_InputPanel_Channel
|
|
0x11: OSK_SoftKeyboard_Channel
|
|
0x12: TabletPC_InputPanel_Channel/IHM
|
|
0x13: Physical_Keyboard_Manager_Channel
|
|
0x14: IHM_DebugChannel
|
|
- keyword:
|
|
0x10000: TabletPC_InputPanel_Keyword
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: TabletPC_InputPanel_Channel
|
|
0x4000000000000000: OSK_SoftKeyboard_Channel
|
|
0x2000000000000000: TabletPC_InputPanel_Channel/IHM
|
|
0x1000000000000000: Physical_Keyboard_Manager_Channel
|
|
0x800000000000000: IHM_DebugChannel
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{E98EBDBF-3058-4784-8521-47860B1D2B8E} Manifest Microsoft-WindowsPhone-Ufx
|
|
- keyword:
|
|
0x1: Error: Error
|
|
0x2: Performance: Performance
|
|
0x4: Debug: Debug
|
|
0x8: Function: Function
|
|
0x10: UfxBus: UfxBus
|
|
0x20: Setup: Setup
|
|
0x40: StateMachine: StateMachine
|
|
0x80: Notification: Notification
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{EA216962-877B-5B73-F7C5-8AEF5375959E} Manifest Microsoft-Windows-Security-Adminless
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-Adminless/Operational: Microsoft-Windows-Security-Adminless/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-Adminless/Operational: Microsoft-Windows-Security-Adminless/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{EA4CC8B8-A150-47A3-AFB9-C8D194B19452} Manifest Microsoft-Windows-ACL-UI
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{EA8CD8A5-78FF-4418-B292-AADC6A7181DF} Manifest Microsoft-Windows-SecurityMitigationsBroker
|
|
- channel:
|
|
0x10: Microsoft-Windows-SecurityMitigationsBroker/Perf
|
|
0x11: Microsoft-Windows-SecurityMitigationsBroker/Operational
|
|
0x12: Microsoft-Windows-SecurityMitigationsBroker/Admin
|
|
- keyword:
|
|
0x1: SECURITYMITIGATIONBROKER_KEYWORD_BROKER: Flagged on all events dealing with the general web platform security broker operations
|
|
0x2: SECURITYMITIGATIONBROKER_KEYWORD_ACG: Flagged on all events dealing with the ACG related web platform security broker operations
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Perf
|
|
0x4000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Operational
|
|
0x2000000000000000: Microsoft-Windows-SecurityMitigationsBroker/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{EB492407-201E-4281-8531-CDFB141CA69F} Manifest Microsoft-Windows-Bluetooth-BthLEEnum
|
|
|
|
{EB65A492-86C0-406A-BACE-9912D595BD69} Manifest Microsoft-Windows-AppModel-Exec
|
|
- keyword:
|
|
0x20: ExecMan: ExecMan
|
|
0x100: TaskHost: TaskHost
|
|
0x1000: Sqm: Sqm
|
|
0x4000: PLM: Lifetime Manager
|
|
0x8000: FM: ForegroundManager
|
|
0x10000: BM: Background Manager
|
|
0x20000: ExecProductionCircular: Production Circular
|
|
0x40000: ExecProductionCritical: Production Critical
|
|
0x80000: ExecSelfHostCircular: SelfHost Circular
|
|
0x100000: ExecSelfHostCritical: SelfHost Critical
|
|
0x200000: ExecDevPlatCircular: DevPlat Circular
|
|
0x400000: VOIP: VOIP
|
|
0x4000000: Activation: Activation Manager
|
|
0x8000000: AgHost: AgHost
|
|
0x80000000: Telemetry: Telemetry
|
|
0x100000000: EEC: ExtendedExecutionClient
|
|
0x200000000: ODB: OnDemandBroker
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{EC23F986-AE2D-4269-B52F-4E20765C1A94} Manifest Microsoft-Windows-NcdAutoSetup
|
|
- channel:
|
|
0x10: Microsoft-Windows-NcdAutoSetup/Operational: Microsoft-Windows-NcdAutoSetup/Operational
|
|
0x11: Microsoft-Windows-NcdAutoSetup/Diagnostic: Microsoft-Windows-NcdAutoSetup/Diagnostic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-NcdAutoSetup/Operational: Microsoft-Windows-NcdAutoSetup/Operational
|
|
0x4000000000000000: Microsoft-Windows-NcdAutoSetup/Diagnostic: Microsoft-Windows-NcdAutoSetup/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{EC276CDE-2A17-473C-A010-2FF78D5426D2} Manifest Microsoft-Windows-OOBE-Machine-Core
|
|
- channel:
|
|
0x10: Microsoft-Windows-OOBE-Machine-Core/Diagnostic
|
|
- keyword:
|
|
0x1: msoobe
|
|
0x8000000000000000: Microsoft-Windows-OOBE-Machine-Core/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{ECDAACFA-6FE9-477C-B5F0-85B76F8F50AA} Manifest Microsoft-Windows-Crashdump
|
|
- channel:
|
|
0x10: Microsoft-Windows-Crashdump/Operational
|
|
- keyword:
|
|
0x1: Config
|
|
0x8000000000000000: Microsoft-Windows-Crashdump/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{ED8B9BD3-F66E-4FF2-B86B-75C7925F72A9} Manifest Microsoft-Windows-Provisioning-Diagnostics-Provider
|
|
- channel:
|
|
0x10: Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin: Admin
|
|
0x11: Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot: AutoPilot
|
|
0x12: Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug: Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot: AutoPilot
|
|
0x2000000000000000: Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{EDD08927-9CC4-4E65-B970-C2560FB5C289} Manifest Microsoft-Windows-Kernel-File
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-File/Analytic
|
|
- keyword:
|
|
0x10: KERNEL_FILE_KEYWORD_FILENAME
|
|
0x20: KERNEL_FILE_KEYWORD_FILEIO
|
|
0x40: KERNEL_FILE_KEYWORD_OP_END
|
|
0x80: KERNEL_FILE_KEYWORD_CREATE
|
|
0x100: KERNEL_FILE_KEYWORD_READ
|
|
0x200: KERNEL_FILE_KEYWORD_WRITE
|
|
0x400: KERNEL_FILE_KEYWORD_DELETE_PATH
|
|
0x800: KERNEL_FILE_KEYWORD_RENAME_SETLINK_PATH
|
|
0x1000: KERNEL_FILE_KEYWORD_CREATE_NEW_FILE
|
|
0x8000000000000000: Microsoft-Windows-Kernel-File/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{EEE173EF-7ED2-45DE-9877-01C70A852FBD} Manifest Microsoft-Windows-Serial-ClassExtension-V2
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Serial-ClassExtension-V2/Analytic: Analytic
|
|
- keyword:
|
|
0x1: Rundown: Rundown events that list all devices when the provider is enabled.
|
|
0x2: PNP: Plug & Play events.
|
|
0x4: TransferStateMachine: TransferStateMachine events.
|
|
0x8: TransmitTransferStateMachine: Transmit TransferStateMachine events.
|
|
0x10: ReceiveTransferStateMachine: Receive TransferStateMachine events.
|
|
0x20: IO: I/O request events.
|
|
0x40: TransmitIO: Transmit I/O request events.
|
|
0x80: ReceiveIO: Receive I/O request events.
|
|
0x100: IOPayload: I/O request payloads.
|
|
0x200: TransmitIOPayload: Transmit I/O request payloads.
|
|
0x400: ReceiveIOPayload: Receive I/O request payloads.
|
|
0x800: IOCTL: IOCTL request events.
|
|
0x1000: PowerStateTransition: Power state transition events.
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Serial-ClassExtension-V2/Analytic: Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{EEF54E71-0661-422D-9A98-82FD4940B820} Manifest Microsoft-Windows-Application-Experience
|
|
- channel:
|
|
0x10: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug
|
|
0x11: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
|
|
0x12: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace
|
|
0x13: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant
|
|
0x14: Microsoft-Windows-Application-Experience/Program-Telemetry: Microsoft-Windows-Application-Experience/Program-Telemetry
|
|
0x15: Microsoft-Windows-Application-Experience/Program-Inventory: Microsoft-Windows-Application-Experience/Program-Inventory
|
|
0x16: Microsoft-Windows-Application-Experience/Steps-Recorder: Microsoft-Windows-Application-Experience/Steps-Recorder
|
|
0x17: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter
|
|
- keyword:
|
|
0x100: WDI
|
|
0x200: Debug
|
|
0x400: ShimEng
|
|
0x800: Shims
|
|
0x1000: Siuf
|
|
0x8000000000000000: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug: Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug
|
|
0x4000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic
|
|
0x2000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace
|
|
0x1000000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant: Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant
|
|
0x800000000000000: Microsoft-Windows-Application-Experience/Program-Telemetry: Microsoft-Windows-Application-Experience/Program-Telemetry
|
|
0x400000000000000: Microsoft-Windows-Application-Experience/Program-Inventory: Microsoft-Windows-Application-Experience/Program-Inventory
|
|
0x200000000000000: Microsoft-Windows-Application-Experience/Steps-Recorder: Microsoft-Windows-Application-Experience/Steps-Recorder
|
|
0x100000000000000: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter: Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{EF1CC15B-46C1-414E-BB95-E76B077BD51E} Manifest Microsoft-Windows-Bits-Client
|
|
- channel:
|
|
0x8: System: System
|
|
0x10: Microsoft-Windows-Bits-Client/Operational: Microsoft-Windows-Bits-Client/Operational
|
|
0x11: Microsoft-Windows-Bits-Client/Analytic: Microsoft-Windows-Bits-Client/Analytic
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Microsoft-Windows-Bits-Client/Operational: Microsoft-Windows-Bits-Client/Operational
|
|
0x2000000000000000: Microsoft-Windows-Bits-Client/Analytic: Microsoft-Windows-Bits-Client/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{F029AC39-38F0-4A40-B7DE-404D244004CB} Manifest Microsoft-Windows-Kernel-XDV
|
|
- channel:
|
|
0x10: Microsoft-Windows-Kernel-XDV/Analytic
|
|
0x8: System: System
|
|
- keyword:
|
|
0x200000000000: ms:Telemetry
|
|
0x8000000000000000: Microsoft-Windows-Kernel-XDV/Analytic
|
|
0x4000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F0BE35F8-237B-4814-86B5-ADE51192E503} Manifest Microsoft-Windows-AppReadiness
|
|
- channel:
|
|
0x10: Microsoft-Windows-AppReadiness/Admin: Admin
|
|
0x11: Microsoft-Windows-AppReadiness/Operational: Operational
|
|
0x12: Microsoft-Windows-AppReadiness/Debug: Debug
|
|
- keyword:
|
|
0x1: Service
|
|
0x2: User
|
|
0x4: Tasks
|
|
0x8: Api
|
|
0x10: Scoring
|
|
0x20: BrokerSession
|
|
0x40: Triggers
|
|
0x80: Error
|
|
0x100: Timeline
|
|
0x400000000000: ms:Measures
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-AppReadiness/Admin: Admin
|
|
0x4000000000000000: Microsoft-Windows-AppReadiness/Operational: Operational
|
|
0x2000000000000000: Microsoft-Windows-AppReadiness/Debug: Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43} Manifest Microsoft-Windows-CertificateServicesClient-AutoEnrollment
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{F1201B5A-E170-42B6-8D20-B57AC57E6416} Manifest Microsoft-Windows-DeviceManagement-Pushrouter
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F1394DE0-32C7-4A76-A6DE-B245E48F4615} Manifest Microsoft-Windows-RemoteDesktopServices-SessionServices
|
|
- channel:
|
|
0x10: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational: Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F1EF270A-0D32-4352-BA52-DBAB41E1D859} Manifest Microsoft-Windows-AppModel-Runtime
|
|
- channel:
|
|
0x9: Application: Application
|
|
0x10: Microsoft-Windows-AppModel-Runtime/Analytic: Microsoft-Windows-AppModel-Runtime/Analytic
|
|
0x11: Microsoft-Windows-AppModel-Runtime/Admin
|
|
0x12: Microsoft-Windows-AppModel-Runtime/Debug
|
|
0x13: Microsoft-Windows-AppModel-Runtime/Diagnostics
|
|
- keyword:
|
|
0x1: Process: Process
|
|
0x2: AppContainer: AppContainer
|
|
0x4: DesktopAppXProcess: DesktopAppXProcess
|
|
0x8: DesktopAppXContainer: DesktopAppXContainer
|
|
0x200000000000: ms:Telemetry
|
|
0x400000000000: ms:Measures
|
|
0x8000000000000000: Application: Application
|
|
0x4000000000000000: Microsoft-Windows-AppModel-Runtime/Analytic: Microsoft-Windows-AppModel-Runtime/Analytic
|
|
0x2000000000000000: Microsoft-Windows-AppModel-Runtime/Admin
|
|
0x1000000000000000: Microsoft-Windows-AppModel-Runtime/Debug
|
|
0x800000000000000: Microsoft-Windows-AppModel-Runtime/Diagnostics
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F230D19A-5D93-47D9-A83F-53829EDFB8DF} Manifest Microsoft-Windows-TriggerEmulatorProvider
|
|
- keyword:
|
|
0x1: Keyword_TriggerEmulatorEvent
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F2311B48-32BE-4902-A22A-7240371DBB2C} Manifest Microsoft-Windows-AssignedAccessBroker
|
|
- channel:
|
|
0x10: Microsoft-Windows-AssignedAccessBroker/Operational
|
|
0x11: Microsoft-Windows-AssignedAccessBroker/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-AssignedAccessBroker/Operational
|
|
0x4000000000000000: Microsoft-Windows-AssignedAccessBroker/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F27B948B-0A7C-4EB6-92EC-8A2C1B353ECD} Manifest Microsoft-Windows-Diagnosis-PerfHost
|
|
- channel:
|
|
0x10: Microsoft-Windows-Diagnosis-Perfhost/Analytic: Microsoft-Windows-Diagnosis-Perfhost/Analytic
|
|
- keyword:
|
|
0x800: errors: Errors
|
|
0x1000: callouts: Provider DLL callouts
|
|
0x8000000000000000: Microsoft-Windows-Diagnosis-Perfhost/Analytic: Microsoft-Windows-Diagnosis-Perfhost/Analytic
|
|
|
|
{F2C628AE-D26C-4352-9C45-74754E1E2F9F} Manifest Microsoft-Windows-MPRMSG
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{F2E2CE31-0E8A-4E46-A03B-2E0FE97E93C2} Manifest Microsoft-Windows-Hyper-V-Guest-Drivers-Vmbus
|
|
- channel:
|
|
0x10: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
|
|
{F3419A17-E994-4C40-B593-79B8EDEC54E9} Manifest Microsoft-Windows-Dot3MM
|
|
- channel:
|
|
0x10: Microsoft-Windows-Dot3MM/Diagnostic: Microsoft-Windows-Dot3MM/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Dot3MM/Diagnostic: Microsoft-Windows-Dot3MM/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D} Manifest Microsoft-Windows-FilterManager
|
|
- channel:
|
|
0x8: System: System
|
|
- keyword:
|
|
0x8000000000000000: System: System
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F3F14FF3-7B80-4868-91D0-D77E497B025E} Manifest Microsoft-Windows-WMP
|
|
- channel:
|
|
0x10: WMPSyncEngine
|
|
- keyword:
|
|
0x10000: mediaplayer
|
|
0x20000: metadataplugin
|
|
0x40000: ramcache
|
|
0x80000: metadatalifecycle
|
|
0x100000: mls
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: WMPSyncEngine
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F3F53C76-B06D-4F15-B412-61164A0D2B73} Manifest Microsoft-Windows-VerifyHardwareSecurity
|
|
- channel:
|
|
0x10: Microsoft-Windows-VerifyHardwareSecurity/Operational: Microsoft-Windows-VerifyHardwareSecurity/Operational
|
|
0x11: Microsoft-Windows-VerifyHardwareSecurity/Admin: Microsoft-Windows-VerifyHardwareSecurity/Admin
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-VerifyHardwareSecurity/Operational: Microsoft-Windows-VerifyHardwareSecurity/Operational
|
|
0x4000000000000000: Microsoft-Windows-VerifyHardwareSecurity/Admin: Microsoft-Windows-VerifyHardwareSecurity/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F404B94E-27E0-4384-BFE8-1D8D390B0AA3} Manifest Microsoft-Windows-MediaFoundation-Performance
|
|
- channel:
|
|
0x10: MediaFoundationPerformance: Media Foundation Performance
|
|
0x11: Microsoft-Windows-MediaFoundation-Performance/SARStreamResource
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: MediaFoundationPerformance: Media Foundation Performance
|
|
0x4000000000000000: Microsoft-Windows-MediaFoundation-Performance/SARStreamResource
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{F43C3C35-22E2-53EB-F169-07594054779E} Manifest Microsoft-Windows-SettingSync-OneDrive
|
|
- channel:
|
|
0x10: Microsoft-Windows-SettingSync-OneDrive/Operational: Operational
|
|
0x11: Microsoft-Windows-SettingSync-OneDrive/Debug: Debug
|
|
0x12: Microsoft-Windows-SettingSync-OneDrive/Analytic: Microsoft-Windows-SettingSync-OneDrive/Analytic
|
|
- keyword:
|
|
0x1: RoamingSettings
|
|
0x8000000000000000: Microsoft-Windows-SettingSync-OneDrive/Operational: Operational
|
|
0x4000000000000000: Microsoft-Windows-SettingSync-OneDrive/Debug: Debug
|
|
0x2000000000000000: Microsoft-Windows-SettingSync-OneDrive/Analytic: Microsoft-Windows-SettingSync-OneDrive/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F4AED7C7-A898-4627-B053-44A7CAA12FCD} Manifest Microsoft-Windows-RPC-Events
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{F4C9BE26-414F-42D7-B540-8BFF965E6D32} Manifest Microsoft-Windows-WWAN-MediaManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-WWAN-MediaManager/Diagnostic: Microsoft-Windows-WWAN-MediaManager/Diagnostic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-WWAN-MediaManager/Diagnostic: Microsoft-Windows-WWAN-MediaManager/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F4E1897C-BB5D-5668-F1D8-040F4D8DD344} Manifest Microsoft-Windows-Threat-Intelligence
|
|
- channel:
|
|
0x10: Microsoft-Windows-Threat-Intelligence/Analytic
|
|
- keyword:
|
|
0x10: KERNEL_THREATINT_KEYWORD_ALLOCVM
|
|
0x20: KERNEL_THREATINT_KEYWORD_PROTECTVM
|
|
0x40: KERNEL_THREATINT_KEYWORD_MAPVIEW
|
|
0x80: KERNEL_THREATINT_KEYWORD_QUEUEUSERAPC
|
|
0x100: KERNEL_THREATINT_KEYWORD_SETTHREADCONTEXT
|
|
0x200: KERNEL_THREATINT_KEYWORD_LOCAL_CALLS
|
|
0x400: KERNEL_THREATINT_KEYWORD_CONTEXT_PARSE
|
|
0x800: KERNEL_THREATINT_KEYWORD_EXECUTION_ADDRESS_VAD_PROBE
|
|
0x1000: KERNEL_THREATINT_KEYWORD_EXECUTION_ADDRESS_MMF_NAME_PROBE
|
|
0x2000: KERNEL_THREATINT_KEYWORD_READVM
|
|
0x4000: KERNEL_THREATINT_KEYWORD_WRITEVM
|
|
0x8000: KERNEL_THREATINT_KEYWORD_READWRITEVM_NO_SIGNATURE_RESTRICTION
|
|
0x8000000000000000: Microsoft-Windows-Threat-Intelligence/Analytic
|
|
|
|
{F50D9315-E17E-43C1-8370-3EDF6CC057BE} Manifest OfficeLoggingLiblet
|
|
- channel:
|
|
0x10: General Logging
|
|
- keyword:
|
|
0x100: LoggingScope: Mso Logging Scope keyword
|
|
0x200: DiskIO: Resouce Usage DiskIO keyword
|
|
0x400: NetworkUsage: Resouce Usage Network Usage keyword
|
|
0x800: ResourceUsageDiagnostic: Resouce Usage Diagnostic keyword
|
|
0x1000: MemoryUsage: Resouce Usage Memory Usage keyword
|
|
0x2000: LoggingLiblet: Logging Liblet keyword
|
|
0x8000000000000000: General Logging
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
0x10: VerboseEx
|
|
|
|
{F5344219-87A4-4399-B14A-E59CD118ABB8} Manifest Microsoft-Windows-Http-SQM-Provider
|
|
- keyword:
|
|
0x8000000000000: win:SQM: SQM
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F5528ADA-BE5F-4F14-8AEF-A95DE7281161} Manifest Microsoft-Windows-Kernel-Licensing-StartServiceTrigger
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F562BB8E-422D-4B5C-B20E-90D710F7D11C} Manifest OfficeAirSpace
|
|
- channel:
|
|
0x10: AirSpaceChannel
|
|
- keyword:
|
|
0x1: Memory
|
|
0x2: Timing
|
|
0x4: FPS
|
|
0x8: Layer
|
|
0x10: Texture
|
|
0x20: DirectX
|
|
0x40: CPU
|
|
0x80: GPU
|
|
0x100: Window
|
|
0x200: Initialization
|
|
0x400: Exception
|
|
0x800: Animation
|
|
0x1000: Shutdown
|
|
0x2000: AirSpy
|
|
0x4000: Atlas
|
|
0x8000: LowResourceMode
|
|
0x10000: GDIRendering
|
|
0x20000: Channel
|
|
0x40000: Automation
|
|
0x80000: DebugLog
|
|
0x100000: Scrolling
|
|
0x200000: FrontEnd
|
|
0x400000: BackEnd
|
|
0x800000: CommandList
|
|
0x1000000: Desktop
|
|
0x2000000: MaxTextureDimension
|
|
0x4000000: Immersive
|
|
0x8000000: NullRenderTarget
|
|
0x10000000: WetInk
|
|
0x20000000: Scene
|
|
0x40000000: Interaction
|
|
0x80000000: Pointer
|
|
0x100000000: LayerTileManager
|
|
0x200000000: LayerTexture
|
|
0x400000000: Tile
|
|
0x800000000: NullHDC
|
|
0x1000000000: DirectManipulation
|
|
0x8000000000000000: AirSpaceChannel
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{F5988ABB-323A-4098-8A34-85A3613D4638} Manifest Microsoft-Windows-UserDataAccess-CallHistoryClient
|
|
- keyword:
|
|
0x1: Error
|
|
0x2: Performance
|
|
0x4: CommsDataModel
|
|
0x4000000000: Warning
|
|
0x400000000000: ms:Measures
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{F5D05B38-80A6-4653-825D-C414E4AB3C68} Manifest Microsoft-Windows-StorDiag
|
|
- channel:
|
|
0x10: Microsoft-Windows-StorDiag/Operational
|
|
0x11: Microsoft-Windows-Storage-ClassPnP/Diagnose
|
|
0x12: Microsoft-Windows-Storage-ClassPnP/Debug
|
|
0x13: Microsoft-Windows-Storage-ClassPnP/Analytic
|
|
0x14: Microsoft-Windows-Storage-ClassPnP/Operational
|
|
0x15: Microsoft-Windows-Storage-ClassPnP/Admin
|
|
- keyword:
|
|
0x1: ClassPnPAllIO
|
|
0x2: ClassPnPIdleIO
|
|
0x4: CopyOffload_IO_Performance: CopyOffload IO Performance measurement
|
|
0x8: CopyOffload_Read: CopyOffload Read request
|
|
0x10: CopyOffload_Write: CopyOffload Write request
|
|
0x20: SenseData: Sense Data returned
|
|
0x40: FirmwareUpdate: Storage Firmware Update
|
|
0x80: SMR: Shingled Magnetic Recording Drive Operation
|
|
0x100000: IO_Performance: IO Performance measurement
|
|
0x200000: Read: Read request
|
|
0x400000: Write: Write request
|
|
0x800000: PagingRead: Paging Read request
|
|
0x1000000: PagingWrite: Paging Write request
|
|
0x2000000: LowMemoryRead: Low memory Read request
|
|
0x4000000: LowMemoryWrite: Low memory write request
|
|
0x8000000: NonReadWrite: Non-Read/Write request
|
|
0x10000000: PassThrough: Pass-Through request
|
|
0x20000000: Flush: Flush request
|
|
0x40000000: IOCTL: Device I/O control request
|
|
0x80000000: WMI: WMI request
|
|
0x100000000: Power: Power request
|
|
0x200000000: PnP: PnP request
|
|
0x400000000: Enum: Device enumeration handling
|
|
0x800000000: Queue: Queue-related operation
|
|
0x1000000000: ISR: Interrupt Service Routine processing
|
|
0x2000000000: DPC: Deferred Procedure Call handling
|
|
0x4000000000: Timer: Timer-related operation
|
|
0x8000000000: Protocol: Bus protocol specific operation
|
|
0x10000000000: Target: Target-related operation
|
|
0x20000000000: Adapter: Controller or Host Bus Adapter related operation
|
|
0x40000000000: Retry: Retry handling
|
|
0x80000000000: Timeout: Timeout handling
|
|
0x100000000000: ReSet: Reset handling
|
|
0x200000000000: MiniportInterface: Activity between port and miniport
|
|
0x400000000000: Trim: Trim
|
|
0x800000000000: Test: Testing-specific processing
|
|
0x8000000000000000: Microsoft-Windows-StorDiag/Operational
|
|
0x4000000000000000: Microsoft-Windows-Storage-ClassPnP/Diagnose
|
|
0x2000000000000000: Microsoft-Windows-Storage-ClassPnP/Debug
|
|
0x1000000000000000: Microsoft-Windows-Storage-ClassPnP/Analytic
|
|
0x800000000000000: Microsoft-Windows-Storage-ClassPnP/Operational
|
|
0x400000000000000: Microsoft-Windows-Storage-ClassPnP/Admin
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F5DBAA02-15D6-4644-A784-7032D508BF64} Manifest Microsoft-Windows-OOBE-Machine-DUI
|
|
- channel:
|
|
0x10: Microsoft-Windows-OOBE-Machine-DUI/Diagnostic
|
|
0x11: Microsoft-Windows-OOBE-Machine-DUI/Operational: Microsoft-Windows-OOBE-Machine-DUI/Operational
|
|
- keyword:
|
|
0x1: msoobe
|
|
0x8000000000000000: Microsoft-Windows-OOBE-Machine-DUI/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-OOBE-Machine-DUI/Operational: Microsoft-Windows-OOBE-Machine-DUI/Operational
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F61CEFC0-AA2E-11DA-A746-0800200C9A66} Manifest Microsoft-Windows-Shell-Shwebsvc
|
|
- channel:
|
|
0x10: Microsoft-Windows-Shell-Shwebsvc
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Shell-Shwebsvc
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F67B2345-47FA-4721-A6FB-FE08110EECF7} Manifest Microsoft-Windows-IME-TCCORE
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-TCCORE/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-TCCORE/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{F708C483-4880-11E6-9121-5CF37068B67B} Manifest Microsoft-Windows-USB-CCID
|
|
|
|
{F717D024-F5B4-4F03-9AB9-331B2DC38FFB} Manifest Microsoft-Windows-DeviceGuard
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceGuard/Operational: Microsoft-Windows-DeviceGuard/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-DeviceGuard/Operational: Microsoft-Windows-DeviceGuard/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{F82FB576-E941-4956-A2C7-A0CF83F6450A} Manifest Microsoft-Windows-PerfOS
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
0x8000000000000000: Application: Application
|
|
|
|
{F8AD09BA-419C-5134-1750-270F4D0FB889} Manifest Microsoft-Windows-DeliveryOptimization
|
|
- channel:
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x8000000000000000: Application: Application
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{F91577C6-A704-4A0A-A8F5-7D10DFC761DF} Manifest Microsoft-Windows-LanguageProfile
|
|
- channel:
|
|
0x10: Microsoft-Windows-LanguageProfile/Analytic: Analytic channel logs minor warnings, major state/configuration change that can help debug admin and operational events. Default enabled state: off. Target audience: PSS/diagnostic tools/component developers
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-LanguageProfile/Analytic: Analytic channel logs minor warnings, major state/configuration change that can help debug admin and operational events. Default enabled state: off. Target audience: PSS/diagnostic tools/component developers
|
|
|
|
{F997CD11-0FC9-4AB4-ACBA-BC742A4C0DD3} Manifest Microsoft-Windows-RPC-FirewallManager
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{F9FE3908-44B8-48D9-9A32-5A763FF5ED79} Manifest Microsoft-Windows-Deduplication
|
|
- channel:
|
|
0x10: Microsoft-Windows-Deduplication/Operational
|
|
0x11: Microsoft-Windows-Deduplication/Scrubbing
|
|
0x12: Microsoft-Windows-Deduplication/Diagnostic
|
|
0x13: Microsoft-Windows-Deduplication/Performance
|
|
0x9: Application: Application
|
|
- keyword:
|
|
0x1: Reporting: Reporting
|
|
0x2: Filter: Filter
|
|
0x4: KmStreamStore: Kernel mode stream store
|
|
0x8: KmChunkStore: Kernel mode chunk store
|
|
0x10: KmChunkContainer: Kernel mode chunk container
|
|
0x20: KmFileCache: Kernel mode file cache
|
|
0x8000000000000000: Microsoft-Windows-Deduplication/Operational
|
|
0x4000000000000000: Microsoft-Windows-Deduplication/Scrubbing
|
|
0x2000000000000000: Microsoft-Windows-Deduplication/Diagnostic
|
|
0x1000000000000000: Microsoft-Windows-Deduplication/Performance
|
|
0x800000000000000: Application: Application
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{FA5CF675-72EB-49E2-B447-DE5552FAFF1C} Manifest Microsoft-Windows-Runtime-Graphics
|
|
- channel:
|
|
0x10: Microsoft-Windows-Runtime-Graphics/Analytic
|
|
- keyword:
|
|
0x1: DisplayProperties
|
|
0x8000000000000000: Microsoft-Windows-Runtime-Graphics/Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
|
|
{FA773482-F6ED-4895-8A7D-4F5850678E59} Manifest Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter
|
|
- channel:
|
|
0x10: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Admin
|
|
0x11: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Analytic
|
|
- keyword:
|
|
0x1: Default
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Admin
|
|
0x4000000000000000: Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{FAE10392-F0AF-4AC0-B8FF-9F4D920C3CDF} Manifest Microsoft-Windows-Security-Mitigations
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-Mitigations/KernelMode: Kernel Mode
|
|
0x11: Microsoft-Windows-Security-Mitigations/UserMode: User Mode
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-Mitigations/KernelMode: Kernel Mode
|
|
0x4000000000000000: Microsoft-Windows-Security-Mitigations/UserMode: User Mode
|
|
- level:
|
|
0x3: win:Warning: Warning
|
|
|
|
{FAE96D09-ADE1-5223-0098-AF7B67348531} Manifest Microsoft-Windows-SENSE
|
|
- channel:
|
|
0x10: Microsoft-Windows-SENSE/Operational
|
|
- keyword:
|
|
0x8: Trigger
|
|
0x8000000000000000: Microsoft-Windows-SENSE/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{FB19EE2C-0D22-4A2E-969E-DD41AE0CE1A9} Manifest Microsoft-Windows-UserDataAccess-UserDataService
|
|
|
|
{FB4A19EE-EB5A-47A4-BC52-E71AAC6D0859} Manifest Microsoft-AppV-SharedPerformance
|
|
- channel:
|
|
0x10: Microsoft-AppV-SharedPerformance/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-AppV-SharedPerformance/Analytic
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x4: win:Informational: Information
|
|
0x6: win:ReservedLevel6
|
|
0x7: win:ReservedLevel7
|
|
|
|
{FB829150-CD7D-44C3-AF5B-711A3C31CEDC} Manifest Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging
|
|
- channel:
|
|
0x10: Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{FBBD52E1-DF97-529D-4B67-53F67DA99A98} Manifest Microsoft-Windows-SystemSettingsHandlers
|
|
|
|
{FBCFAC3F-8459-419F-8E48-1F0B49CDB85E} Manifest Microsoft-Windows-NetworkProfile
|
|
- channel:
|
|
0x10: Microsoft-Windows-NetworkProfile/Diagnostic: Microsoft-Windows-NetworkProfile/Diagnostic
|
|
0x11: Microsoft-Windows-NetworkProfile/Operational: Microsoft-Windows-NetworkProfile/Operational
|
|
- keyword:
|
|
0x20: LwtDiagnostic
|
|
0x100000000: ut:SendPath
|
|
0x200000000: ut:ReceivePath
|
|
0x400000000: ut:L3ConnectPath
|
|
0x800000000: ut:L2ConnectPath
|
|
0x1000000000: ut:ClosePath
|
|
0x2000000000: ut:Authentication
|
|
0x4000000000: ut:Configuration
|
|
0x8000000000: ut:Global
|
|
0x10000000000: ut:Dropped
|
|
0x20000000000: ut:PiiPresent
|
|
0x40000000000: ut:Packet
|
|
0x80000000000: ut:Address
|
|
0x100000000000: ut:StdTemplateHint
|
|
0x200000000000: ut:StateTransition
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-NetworkProfile/Diagnostic: Microsoft-Windows-NetworkProfile/Diagnostic
|
|
0x4000000000000000: Microsoft-Windows-NetworkProfile/Operational: Microsoft-Windows-NetworkProfile/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{FBCFAC3F-8460-419F-8E48-1F0B49CDB85E} Manifest Microsoft-Windows-NetworkProfileTriggerProvider
|
|
- keyword:
|
|
0x1: Keyword_ProfileChange
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{FBEF8096-2CA3-4082-ACDE-DCFB47E96B72} Manifest Microsoft-Windows-FirstUX-PerfInstrumentation
|
|
- channel:
|
|
0x10: FirstUXPerf-Analytic: Setup splash window performance
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: FirstUXPerf-Analytic: Setup splash window performance
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{FC3BC8A7-2F61-449C-A8B4-22AC22058F92} Manifest Microsoft-Windows-NDF-HelperClassDiscovery
|
|
- channel:
|
|
0x10: Microsoft-Windows-NDF-HelperClassDiscovery/Debug: Microsoft-Windows-Diagnostics-Networking/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-NDF-HelperClassDiscovery/Debug: Microsoft-Windows-Diagnostics-Networking/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
|
|
{FC4E8F51-7A04-4BAB-8B91-6321416F72AB} Manifest Microsoft-Windows-Containers-BindFlt
|
|
- channel:
|
|
0x10: Microsoft-Windows-Containers-BindFlt/Operational
|
|
0x11: Microsoft-Windows-Containers-BindFlt/Debug
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-Containers-BindFlt/Operational
|
|
0x4000000000000000: Microsoft-Windows-Containers-BindFlt/Debug
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x4: win:Informational: Information
|
|
|
|
{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148} Manifest Microsoft-Windows-Eventlog
|
|
- channel:
|
|
0x8: System: System
|
|
0xa: Security: Security
|
|
0x10: Setup: Setup
|
|
0x11: Microsoft-Windows-EventLog/Debug: Debug
|
|
0x12: Microsoft-Windows-EventLog/Analytic: Analytic
|
|
- keyword:
|
|
0x20000: el:Availability: Service availability
|
|
0x40000: el:Settings: Service configuration
|
|
0x80000: el:SystemAvailability: System availability
|
|
0x20000000000000: win:AuditSuccess: Audit Success
|
|
0x8000000000000000: System: System
|
|
0x4000000000000000: Security: Security
|
|
0x2000000000000000: Setup: Setup
|
|
0x1000000000000000: Microsoft-Windows-EventLog/Debug: Debug
|
|
0x800000000000000: Microsoft-Windows-EventLog/Analytic: Analytic
|
|
- level:
|
|
0x1: win:Critical: Critical
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{FC6F77DD-769A-470E-BCF9-1B6555A118BE} Manifest Microsoft-Windows-Search-ProfileNotify
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{FCBB06BB-6A2A-46E3-ABAA-246CB4E508B2} Manifest Microsoft-Windows-DeviceSetupManager
|
|
- channel:
|
|
0x10: Microsoft-Windows-DeviceSetupManager/Operational
|
|
0x11: Microsoft-Windows-DeviceSetupManager/Admin
|
|
0x12: Microsoft-Windows-DeviceSetupManager/Debug
|
|
0x13: Microsoft-Windows-DeviceSetupManager/Analytic
|
|
- keyword:
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-Windows-DeviceSetupManager/Operational
|
|
0x4000000000000000: Microsoft-Windows-DeviceSetupManager/Admin
|
|
0x2000000000000000: Microsoft-Windows-DeviceSetupManager/Debug
|
|
0x1000000000000000: Microsoft-Windows-DeviceSetupManager/Analytic
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{FD44A6E7-580F-4A9C-83D9-D820B7D3A033} Manifest Microsoft-Windows-IME-OEDCompiler
|
|
- channel:
|
|
0x10: Microsoft-Windows-IME-OEDCompiler/Analytic
|
|
- keyword:
|
|
0x8000000000000000: Microsoft-Windows-IME-OEDCompiler/Analytic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{FD771D53-8492-4057-8E35-8C02813AF49B} Manifest Microsoft-Windows-ProcessExitMonitor
|
|
- keyword:
|
|
0x80000000000000: win:EventlogClassic: Classic
|
|
|
|
{FDC7B3F9-EB64-4043-9D47-BF2B7457BAA6} Manifest EsifLfEtwProvider
|
|
- keyword:
|
|
0x1: ApiTrace
|
|
0x2: Action_const
|
|
0x4: Action_msr
|
|
0x8: Action_mmio
|
|
0x10: Action_acpi
|
|
0x20: IPC
|
|
0x40: Command
|
|
0x80: Primitive
|
|
0x100: Action
|
|
0x200: Cpc
|
|
0x400: Power
|
|
0x800: Dsp
|
|
0x1000: Event
|
|
0x2000: Elf
|
|
0x4000: Pmg
|
|
0x8000: Queue
|
|
0x10000: Hash
|
|
0x20000: Pnp
|
|
0x40000: Action_code
|
|
0x80000: Domain
|
|
0x100000: Action_mbi
|
|
0x200000: Drvm
|
|
0x400000: Windows
|
|
0x800000: Linux
|
|
0x1000000: Action_delegate
|
|
0x2000000: Lp
|
|
0x4000000: KIoctl
|
|
0x100000000: Interrupt
|
|
- level:
|
|
0x0: win:LogAlways: Log Always
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
|
|
{FE28004E-B08F-4407-92B3-BAD3A2C51708} Manifest Microsoft-Windows-Sdbus
|
|
- channel:
|
|
0x10: Microsoft-Windows-Sdbus/Analytic
|
|
0x11: Microsoft-Windows-Sdbus/Debug
|
|
- keyword:
|
|
0x1: Interrupt: Interrupt handling
|
|
0x2: Emmc: eMMC specific processing
|
|
0x4: Sdio: SDIO specific processing
|
|
0x8: Sd: SD specific processing
|
|
0x10: Perf: Sdbus P-state frequency scaling
|
|
0x20: Error: SD bus errors
|
|
0x40: Dpc: SD bus DPC
|
|
0x80: Request: SD bus request
|
|
0x8000000000000000: Microsoft-Windows-Sdbus/Analytic
|
|
0x4000000000000000: Microsoft-Windows-Sdbus/Debug
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|
|
{FF79A477-C45F-4A52-8AE0-2B324346D4E4} Manifest Windows-ApplicationModel-Store-SDK
|
|
- channel:
|
|
0x10: Microsoft-Windows-Store/Operational
|
|
- keyword:
|
|
0x1: StorefrontClient
|
|
0x2: Messages
|
|
0x4: StorePurchaseApp
|
|
0x8000000000000000: Microsoft-Windows-Store/Operational
|
|
- level:
|
|
0x2: win:Error: Error
|
|
0x3: win:Warning: Warning
|
|
0x4: win:Informational: Information
|
|
0x5: win:Verbose: Verbose
|
|
|
|
{FFDB9886-80F3-4540-AA8B-B85192217DDF} Manifest Microsoft-PerfTrack-MSHTML
|
|
- channel:
|
|
0x10: Microsoft-PerfTrack-MSHTML/Diagnostic
|
|
- keyword:
|
|
0x1: defunct
|
|
0x1000000000000: win:ResponseTime: Response Time
|
|
0x8000000000000000: Microsoft-PerfTrack-MSHTML/Diagnostic
|
|
- level:
|
|
0x4: win:Informational: Information
|
|
|