mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
repnz
150 lines
14 KiB
XML
150 lines
14 KiB
XML
<instrumentationManifest xmlns="http://schemas.microsoft.com/win/2004/08/events">
|
|
<instrumentation xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
|
|
<events>
|
|
<provider name="Microsoft-Windows-BitLocker-Driver-Performance" guid="{1de130e1-c026-4cbf-ba0f-ab608e40aeea}" resourceFileName="Microsoft-Windows-BitLocker-Driver-Performance" messageFileName="Microsoft-Windows-BitLocker-Driver-Performance" symbol="MicrosoftWindowsBitLockerDriverPerformance" source="Xml" >
|
|
<keywords>
|
|
<keyword name="fve:Performance" message="$(string.keyword_fve:Performance)" mask="0x20"/>
|
|
<keyword name="fve:CryptoPerformance" message="$(string.keyword_fve:CryptoPerformance)" mask="0x40"/>
|
|
</keywords>
|
|
<tasks>
|
|
<task name="fve:ReadRequest" message="$(string.task_fve:ReadRequest)" value="1"/>
|
|
<task name="fve:WriteRequest" message="$(string.task_fve:WriteRequest)" value="2"/>
|
|
<task name="fve:ReadSubRequest" message="$(string.task_fve:ReadSubRequest)" value="3"/>
|
|
<task name="fve:WriteSubRequest" message="$(string.task_fve:WriteSubRequest)" value="4"/>
|
|
<task name="fve:VolumeStackCreate" message="$(string.task_fve:VolumeStackCreate)" value="5"/>
|
|
<task name="fve:VolumeStackDelete" message="$(string.task_fve:VolumeStackDelete)" value="6"/>
|
|
<task name="fve:VolumeDiscovery" message="$(string.task_fve:VolumeDiscovery)" value="7"/>
|
|
<task name="fve:MetadataWrite" message="$(string.task_fve:MetadataWrite)" value="8"/>
|
|
<task name="fve:FveIoctl" message="$(string.task_fve:FveIoctl)" value="9"/>
|
|
<task name="fve:FveAction" message="$(string.task_fve:FveAction)" value="10"/>
|
|
<task name="fve:Conversion" message="$(string.task_fve:Conversion)" value="11"/>
|
|
<task name="fve:ConversionStep" message="$(string.task_fve:ConversionStep)" value="12"/>
|
|
<task name="fve:SliderMove" message="$(string.task_fve:SliderMove)" value="13"/>
|
|
<task name="fve:IoEncryptRequest" message="$(string.task_fve:IoEncryptRequest)" value="14"/>
|
|
<task name="fve:IoDecryptRequest" message="$(string.task_fve:IoDecryptRequest)" value="15"/>
|
|
<task name="fve:BCryptEncryptRequest" message="$(string.task_fve:BCryptEncryptRequest)" value="16"/>
|
|
<task name="fve:BCryptDecryptRequest" message="$(string.task_fve:BCryptDecryptRequest)" value="17"/>
|
|
</tasks>
|
|
<events>
|
|
<event value="1" symbol="fve:ReadRequestStart" version="0" task="fve:ReadRequest" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="2" symbol="fve:ReadRequestStop" version="0" task="fve:ReadRequest" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="3" symbol="fve:WriteRequestStart" version="0" task="fve:WriteRequest" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="4" symbol="fve:WriteRequestStop" version="0" task="fve:WriteRequest" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="5" symbol="fve:ReadSubRequest" version="0" task="fve:ReadSubRequest" level="win:Informational" keywords="fve:Performance" template="fve:ReadSubRequestArgs"/>
|
|
<event value="6" symbol="fve:WriteSubRequest" version="0" task="fve:WriteSubRequest" level="win:Informational" keywords="fve:Performance" template="fve:ReadSubRequestArgs"/>
|
|
<event value="7" symbol="fve:ReadSubRequestStart" version="0" task="fve:ReadSubRequest" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="8" symbol="fve:ReadSubRequestStop" version="0" task="fve:ReadSubRequest" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="9" symbol="fve:WriteSubRequestStart" version="0" task="fve:WriteSubRequest" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="10" symbol="fve:WriteSubRequestStop" version="0" task="fve:WriteSubRequest" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:ReadRequestStartArgs"/>
|
|
<event value="11" symbol="fve:VolumeStackCreate" version="0" task="fve:VolumeStackCreate" level="win:Informational" keywords="fve:Performance" template="fve:VolumeStackCreateArgs"/>
|
|
<event value="12" symbol="fve:VolumeStackDelete" version="0" task="fve:VolumeStackDelete" level="win:Informational" keywords="fve:Performance" template="fve:VolumeStackCreateArgs"/>
|
|
<event value="13" symbol="fve:VolumeDiscoveryStart" version="0" task="fve:VolumeDiscovery" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:VolumeDiscoveryStartArgs"/>
|
|
<event value="14" symbol="fve:VolumeDiscoveryStop" version="0" task="fve:VolumeDiscovery" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:VolumeDiscoveryStartArgs"/>
|
|
<event value="15" symbol="fve:MetadataWriteStart" version="0" task="fve:MetadataWrite" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:MetadataWriteStartArgs"/>
|
|
<event value="16" symbol="fve:MetadataWriteStop" version="0" task="fve:MetadataWrite" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:MetadataWriteStartArgs"/>
|
|
<event value="17" symbol="fve:FveIoctlStart" version="0" task="fve:FveIoctl" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="18" symbol="fve:FveIoctlStop" version="0" task="fve:FveIoctl" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="19" symbol="fve:FveActionStart" version="0" task="fve:FveAction" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="20" symbol="fve:FveActionStop" version="0" task="fve:FveAction" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="21" symbol="fve:ConversionStart" version="0" task="fve:Conversion" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="22" symbol="fve:ConversionStop" version="0" task="fve:Conversion" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:FveIoctlStartArgs"/>
|
|
<event value="23" symbol="fve:ConversionStepStart" version="0" task="fve:ConversionStep" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:ConversionStepStartArgs"/>
|
|
<event value="24" symbol="fve:ConversionStepStop" version="0" task="fve:ConversionStep" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:ConversionStepStartArgs"/>
|
|
<event value="25" symbol="fve:SliderMoveStart" version="0" task="fve:SliderMove" opcode="win:Start" level="win:Informational" keywords="fve:Performance" template="fve:SliderMoveStartArgs"/>
|
|
<event value="26" symbol="fve:SliderMoveStop" version="0" task="fve:SliderMove" opcode="win:Stop" level="win:Informational" keywords="fve:Performance" template="fve:SliderMoveStartArgs"/>
|
|
<event value="27" symbol="fve:IoDecryptRequestStart" version="0" task="fve:IoDecryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:IoDecryptRequestStartArgs"/>
|
|
<event value="28" symbol="fve:IoDecryptRequestStop" version="0" task="fve:IoDecryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:IoDecryptRequestStartArgs"/>
|
|
<event value="29" symbol="fve:IoEncryptRequestStart" version="0" task="fve:IoEncryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:IoDecryptRequestStartArgs"/>
|
|
<event value="30" symbol="fve:IoEncryptRequestStop" version="0" task="fve:IoEncryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:IoDecryptRequestStartArgs"/>
|
|
<event value="31" symbol="fve:BCryptEncryptRequestStart" version="0" task="fve:BCryptEncryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="32" symbol="fve:BCryptEncryptRequestStop" version="0" task="fve:BCryptEncryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="33" symbol="fve:BCryptDecryptRequestStart" version="0" task="fve:BCryptDecryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="34" symbol="fve:BCryptDecryptRequestStop" version="0" task="fve:BCryptDecryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="35" symbol="fve:BCryptEncryptRequestStart35" version="0" task="fve:BCryptEncryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="36" symbol="fve:BCryptEncryptRequestStop36" version="0" task="fve:BCryptEncryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="37" symbol="fve:BCryptEncryptRequestStart37" version="0" task="fve:BCryptEncryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="38" symbol="fve:BCryptEncryptRequestStop38" version="0" task="fve:BCryptEncryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="39" symbol="fve:BCryptDecryptRequestStart39" version="0" task="fve:BCryptDecryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="40" symbol="fve:BCryptDecryptRequestStop40" version="0" task="fve:BCryptDecryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="41" symbol="fve:BCryptDecryptRequestStart41" version="0" task="fve:BCryptDecryptRequest" opcode="win:Start" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
<event value="42" symbol="fve:BCryptDecryptRequestStop42" version="0" task="fve:BCryptDecryptRequest" opcode="win:Stop" level="win:Informational" keywords="fve:CryptoPerformance" template="fve:BCryptEncryptRequestStartArgs"/>
|
|
</events>
|
|
<templates>
|
|
<template tid="fve:ReadRequestStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="IrpPtr" inType="win:Pointer"/>
|
|
</template>
|
|
<template tid="fve:ReadSubRequestArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="IrpPtr" inType="win:Pointer"/>
|
|
<data name="SubIrpPtr" inType="win:Pointer"/>
|
|
</template>
|
|
<template tid="fve:VolumeStackCreateArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="PdoPtr" inType="win:Pointer"/>
|
|
</template>
|
|
<template tid="fve:VolumeDiscoveryStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
</template>
|
|
<template tid="fve:MetadataWriteStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="Index" inType="win:UInt32"/>
|
|
<data name="Offset" inType="win:UInt64"/>
|
|
</template>
|
|
<template tid="fve:FveIoctlStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="Command" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="fve:ConversionStepStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="Offset" inType="win:UInt64"/>
|
|
<data name="Size" inType="win:UInt32"/>
|
|
<data name="Command" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="fve:SliderMoveStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="PrevOffset" inType="win:UInt64"/>
|
|
<data name="NextOffset" inType="win:UInt64"/>
|
|
<data name="Size" inType="win:UInt64"/>
|
|
</template>
|
|
<template tid="fve:IoDecryptRequestStartArgs">
|
|
<data name="DevObjPtr" inType="win:Pointer"/>
|
|
<data name="SubIrpPtr" inType="win:Pointer"/>
|
|
<data name="Offset" inType="win:UInt64"/>
|
|
<data name="Size" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="fve:BCryptEncryptRequestStartArgs">
|
|
<data name="BufferPtr" inType="win:Pointer"/>
|
|
<data name="Size" inType="win:UInt32"/>
|
|
</template>
|
|
</templates>
|
|
</provider>
|
|
</events>
|
|
</instrumentation>
|
|
<localization>
|
|
<resources culture="en-US">
|
|
<stringTable>
|
|
<string id="keyword_fve:Performance" value="fve:Performance"/>
|
|
<string id="keyword_fve:CryptoPerformance" value="fve:CryptoPerformance"/>
|
|
<string id="task_fve:ReadRequest" value="fve:ReadRequest"/>
|
|
<string id="task_fve:WriteRequest" value="fve:WriteRequest"/>
|
|
<string id="task_fve:ReadSubRequest" value="fve:ReadSubRequest"/>
|
|
<string id="task_fve:WriteSubRequest" value="fve:WriteSubRequest"/>
|
|
<string id="task_fve:VolumeStackCreate" value="fve:VolumeStackCreate"/>
|
|
<string id="task_fve:VolumeStackDelete" value="fve:VolumeStackDelete"/>
|
|
<string id="task_fve:VolumeDiscovery" value="fve:VolumeDiscovery"/>
|
|
<string id="task_fve:MetadataWrite" value="fve:MetadataWrite"/>
|
|
<string id="task_fve:FveIoctl" value="fve:FveIoctl"/>
|
|
<string id="task_fve:FveAction" value="fve:FveAction"/>
|
|
<string id="task_fve:Conversion" value="fve:Conversion"/>
|
|
<string id="task_fve:ConversionStep" value="fve:ConversionStep"/>
|
|
<string id="task_fve:SliderMove" value="fve:SliderMove"/>
|
|
<string id="task_fve:IoEncryptRequest" value="fve:IoEncryptRequest"/>
|
|
<string id="task_fve:IoDecryptRequest" value="fve:IoDecryptRequest"/>
|
|
<string id="task_fve:BCryptEncryptRequest" value="fve:BCryptEncryptRequest"/>
|
|
<string id="task_fve:BCryptDecryptRequest" value="fve:BCryptDecryptRequest"/>
|
|
</stringTable>
|
|
</resources>
|
|
</localization>
|
|
</instrumentationManifest>
|