ASP.NET Events
65 events across 1 channel
Event ID 1: Start
#Event ID 7: AppDomainEnter
#Event ID 8: StartHandler
#Event ID 10: PipelineModuleEnter
#Event ID 11: PipelineModuleLeave
#Event ID 17: CompileLeave
#Message #
Fields #
| Name | Description |
|---|---|
ConnID mof:UInt64 | |
ContextId mof:Object | |
Files mof:String | |
Status mof:String | NTSTATUS reference |
Event ID 20: SessionStatePartitionStart
#Event ID 21: SessionStatePartitionEnd
#Event ID 26: PageLoadViewstateEnter
#Event ID 27: PageLoadViewstateLeave
#Event ID 28: PageLoadPostDataEnter
#Event ID 29: PageLoadPostDataLeave
#Event ID 32: PagePostDataChangedEnter
#Event ID 33: PagePostDataChangedLeave
#Event ID 34: PageRaisePostbackEnter
#Event ID 35: PageRaisePostbackLeave
#Event ID 36: PagePreRenderEnter
#Event ID 37: PagePreRenderLeave
#Event ID 38: PageSaveViewstateEnter
#Event ID 39: PageSaveViewstateLeave
#Event ID 45: ProfileEnd
#Event ID 46: RoleManagerIsUserInRole
#Message #
Fields #
| Name | Description |
|---|---|
ConnID mof:UInt64 | |
ContextId mof:Object | |
provider mof:String | |
User mof:String | |
Role mof:String | |
Status mof:String | NTSTATUS reference |
Event ID 47: RoleManagerGetUserRoles
#Event ID 49: RoleManagerEnd
#Event ID 50: WebEventRaiseStart
#Event ID 52: WebEventDeliverStart
#Event ID 53: WebEventDeliverEnd
#Event ID 59: TraceContext Warning Trace
#Event ID 60: TraceContext Write Trace
#Event ID 61: Diagnostic Trace Critical
#Event ID 62: Diagnostic Trace Error
#Event ID 63: Diagnostic Trace Warning
#Event ID 64: Diagnostic Trace Info
#Event ID 65: Diagnostic Trace Verbose
#Event ID 66: Diagnostic Trace Start
#Event ID 67: Diagnostic Trace Stop
#Event ID 68: Diagnostic Trace Suspend
#Event ID 69: Diagnostic Trace Resume
#Event ID 70: Diagnostic Trace Transfer
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID {AFF081FE-0247-4275-9C4E-021F3DC1DA35}
Observed on:
- WS2025-26100.0 · schema read from the WMI MOF class · captured 2026-02-26
Taken from Windows installation media (build 26100.1), not a patched system, so the exact update level is unknown.
- WS2022-20348.4893 · schema read from the WMI MOF class · captured 2026-06-02
MOF class: AspNetTrace