mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
repnz
136 lines
9.0 KiB
XML
136 lines
9.0 KiB
XML
<instrumentationManifest xmlns="http://schemas.microsoft.com/win/2004/08/events">
|
|
<instrumentation xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
|
|
<events>
|
|
<provider name="Microsoft-Windows-Program-Compatibility-Assistant" guid="{4cb314df-c11f-47d7-9c04-65fb0051561b}" resourceFileName="Microsoft-Windows-Program-Compatibility-Assistant" messageFileName="Microsoft-Windows-Program-Compatibility-Assistant" symbol="MicrosoftWindowsProgramCompatibilityAssistant" source="Xml" >
|
|
<keywords>
|
|
<keyword name="WDI" message="$(string.keyword_WDI)" mask="0x100"/>
|
|
<keyword name="keyword_200000000000" message="$(string.keyword_keyword_200000000000)" mask="0x200000000000"/>
|
|
</keywords>
|
|
<tasks>
|
|
<task name="task_0" message="$(string.task_task_0)" value="0"/>
|
|
<task name="PCA_ServiceStartup" message="$(string.task_PCA_ServiceStartup)" value="1"/>
|
|
<task name="PCA_MonitorProcess" message="$(string.task_PCA_MonitorProcess)" value="2"/>
|
|
<task name="PCA_ServiceInitialize" message="$(string.task_PCA_ServiceInitialize)" value="3"/>
|
|
<task name="PCA_ServiceShutdown" message="$(string.task_PCA_ServiceShutdown)" value="4"/>
|
|
</tasks>
|
|
<events>
|
|
<event value="1" symbol="task_0" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="3" symbol="task_03" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="5" symbol="task_05" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="8" symbol="task_08" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="9" symbol="task_09" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="10" symbol="task_010" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="11" symbol="task_011" version="0" task="task_0" level="win:Informational" template="task_011Args"/>
|
|
<event value="12" symbol="task_012" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="14" symbol="task_014" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
<event value="15" symbol="task_015" version="0" task="task_0" level="win:Informational" template="task_015Args"/>
|
|
<event value="16" symbol="task_016" version="0" task="task_0" level="win:Informational" template="task_016Args"/>
|
|
<event value="17" symbol="task_017" version="0" task="task_0" level="win:Informational" template="task_017Args"/>
|
|
<event value="30" symbol="task_030" version="0" task="task_0" level="win:Informational" template="task_030Args"/>
|
|
<event value="31" symbol="task_031" version="0" task="task_0" level="win:Informational" template="task_031Args"/>
|
|
<event value="32" symbol="task_032" version="0" task="task_0" level="win:Informational" template="task_032Args"/>
|
|
<event value="101" symbol="PCA_ServiceStartupStart" version="0" task="PCA_ServiceStartup" opcode="win:Start" level="win:Informational"/>
|
|
<event value="102" symbol="PCA_ServiceStartupStop" version="0" task="PCA_ServiceStartup" opcode="win:Stop" level="win:Informational"/>
|
|
<event value="103" symbol="PCA_MonitorProcessStart" version="0" task="PCA_MonitorProcess" opcode="win:Start" level="win:Informational"/>
|
|
<event value="104" symbol="PCA_MonitorProcessStop" version="0" task="PCA_MonitorProcess" opcode="win:Stop" level="win:Informational"/>
|
|
<event value="105" symbol="PCA_ServiceInitializeStart" version="0" task="PCA_ServiceInitialize" opcode="win:Start" level="win:Informational"/>
|
|
<event value="106" symbol="PCA_ServiceInitializeStop" version="0" task="PCA_ServiceInitialize" opcode="win:Stop" level="win:Informational"/>
|
|
<event value="107" symbol="PCA_ServiceShutdownStart" version="0" task="PCA_ServiceShutdown" opcode="win:Start" level="win:Informational"/>
|
|
<event value="108" symbol="PCA_ServiceShutdownStop" version="0" task="PCA_ServiceShutdown" opcode="win:Stop" level="win:Informational"/>
|
|
<event value="200" symbol="task_0200" version="0" task="task_0" level="win:Informational"/>
|
|
<event value="201" symbol="task_0201" version="0" task="task_0" level="win:Informational"/>
|
|
<event value="202" symbol="task_0202" version="0" task="task_0" level="win:Error"/>
|
|
<event value="203" symbol="task_0203" version="0" task="task_0" level="win:Error"/>
|
|
<event value="204" symbol="task_0204" version="0" task="task_0" level="win:Error"/>
|
|
<event value="205" symbol="task_0205" version="0" task="task_0" level="win:Error"/>
|
|
<event value="206" symbol="task_0206" version="0" task="task_0" level="win:Informational"/>
|
|
<event value="1100" symbol="task_01100" version="0" task="task_0" level="win:Informational" keywords="WDI"/>
|
|
<event value="1200" symbol="task_01200" version="0" task="task_0" level="win:Informational" keywords="WDI" template="task_01200Args"/>
|
|
<event value="1234" symbol="task_01234" version="0" task="task_0" level="win:Informational" keywords="keyword_200000000000" template="task_01234Args"/>
|
|
</events>
|
|
<templates>
|
|
<template tid="task_0Args">
|
|
<data name="ApplicationNameSize" inType="win:UInt32"/>
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="CommandLineSize" inType="win:UInt32"/>
|
|
<data name="CommandLine" inType="win:UnicodeString"/>
|
|
<data name="CurrentDirectorySize" inType="win:UInt32"/>
|
|
<data name="CurrentDirectory" inType="win:UnicodeString"/>
|
|
<data name="DllNameSize" inType="win:UInt32"/>
|
|
<data name="DllName" inType="win:UnicodeString"/>
|
|
<data name="InterfaceCLSID" inType="win:GUID"/>
|
|
<data name="SessionId" inType="win:UInt32"/>
|
|
<data name="Flags" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="task_011Args">
|
|
<data name="DisplayNameSize" inType="win:UInt32"/>
|
|
<data name="DisplayName" inType="win:UnicodeString"/>
|
|
<data name="FullImagePathSize" inType="win:UInt32"/>
|
|
<data name="FullImagePath" inType="win:UnicodeString"/>
|
|
<data name="SessionId" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="task_015Args">
|
|
<data name="TokenDataSize" inType="win:UInt32"/>
|
|
<data name="TokenData" inType="win:Binary" length="TokenDataSize"/>
|
|
</template>
|
|
<template tid="task_016Args">
|
|
<data name="ExePath" inType="win:UnicodeString"/>
|
|
<data name="ResolverMap" inType="win:UInt64"/>
|
|
<data name="DialogType" inType="win:UInt32"/>
|
|
</template>
|
|
<template tid="task_017Args">
|
|
<data name="ExePath" inType="win:UnicodeString"/>
|
|
<data name="ResolverName" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_030Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ApplicationVersion" inType="win:UnicodeString"/>
|
|
<data name="ExecutablePath" inType="win:UnicodeString"/>
|
|
<data name="ScenarioId" inType="win:UnicodeString"/>
|
|
<data name="UserAction" inType="win:UnicodeString"/>
|
|
<data name="CompatibilityLayer" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_031Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ApplicationVersion" inType="win:UnicodeString"/>
|
|
<data name="ExecutablePath" inType="win:UnicodeString"/>
|
|
<data name="ScenarioId" inType="win:UnicodeString"/>
|
|
<data name="UserAction" inType="win:UnicodeString"/>
|
|
<data name="CompatibilityLayer" inType="win:UnicodeString"/>
|
|
<data name="DeprecatedComponent" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_032Args">
|
|
<data name="DriverName" inType="win:UnicodeString"/>
|
|
<data name="ServiceName" inType="win:UnicodeString"/>
|
|
<data name="PublisherName" inType="win:UnicodeString"/>
|
|
<data name="DriverPath" inType="win:UnicodeString"/>
|
|
<data name="DriverVersion" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_01200Args">
|
|
<data name="TriggerID" inType="win:UInt32"/>
|
|
<data name="ExtraDataSize" inType="win:UInt32"/>
|
|
<data name="ExtraData" inType="win:Binary" length="ExtraDataSize"/>
|
|
</template>
|
|
<template tid="task_01234Args">
|
|
<data name="ApplicationID" inType="win:UnicodeString"/>
|
|
<data name="Uptime" inType="win:UInt32"/>
|
|
</template>
|
|
</templates>
|
|
</provider>
|
|
</events>
|
|
</instrumentation>
|
|
<localization>
|
|
<resources culture="en-US">
|
|
<stringTable>
|
|
<string id="keyword_WDI" value="WDI"/>
|
|
<string id="keyword_keyword_200000000000" value="keyword_200000000000"/>
|
|
<string id="task_task_0" value="task_0"/>
|
|
<string id="task_PCA_ServiceStartup" value="PCA_ServiceStartup"/>
|
|
<string id="task_PCA_MonitorProcess" value="PCA_MonitorProcess"/>
|
|
<string id="task_PCA_ServiceInitialize" value="PCA_ServiceInitialize"/>
|
|
<string id="task_PCA_ServiceShutdown" value="PCA_ServiceShutdown"/>
|
|
</stringTable>
|
|
</resources>
|
|
</localization>
|
|
</instrumentationManifest>
|