MacriumImageGuardian

16 events across 1 channel

Event ID	Title	Channel
3	Blocked unauthorised process (%1) from deleting file (%2).	Unknown
4	Blocked unauthorised process (%1) from renaming file (%2).	Unknown
5	Blocked unauthorised process (%1) accessing file (%2).	Unknown
90	MIG protection enabled	Unknown
91	MIG protection disabled	Unknown
92	MIG protection disabled until the next reboot	Unknown
100	Driver Loaded %1.	Unknown
200	Driver Unloaded	Unknown
320	Blocked unauthorised process (%1) accessing file (%2).	Unknown
330	User has enabled Image Guardian on volume (%1).	Unknown
340	User has disabled Image Guardian on volume (%1).	Unknown
510	Error protecting volume. Error code	Unknown
520	Error unprotecting volume. Error code	Unknown
600	Attribute error %1 %2.	Unknown
601	A cryptographic function failed with status %1.	Unknown
602	Blocked Operation Stack Trace:%1.	Unknown

Event ID 3 — Blocked unauthorised process (%1) from deleting file (%2).

Provider: MacriumImageGuardian
Channel: Unknown

Message

Blocked unauthorised process (%1) from deleting file (%2)

Fields

Name	Description
`processName`	—
`fileName`	—

Event ID 4 — Blocked unauthorised process (%1) from renaming file (%2).

Provider: MacriumImageGuardian
Channel: Unknown

Message

Blocked unauthorised process (%1) from renaming file (%2)

Fields

Name	Description
`processName`	—
`fileName`	—

Event ID 5 — Blocked unauthorised process (%1) accessing file (%2).

Provider: MacriumImageGuardian
Channel: Unknown

Message

Blocked unauthorised process (%1) accessing file (%2). The thread starting address could not be verified.

Fields

Name	Description
`processName`	—
`fileName`	—

Event ID 90 — MIG protection enabled

Provider: MacriumImageGuardian
Channel: Unknown

Message

MIG protection enabled

Event ID 91 — MIG protection disabled

Provider: MacriumImageGuardian
Channel: Unknown

Message

MIG protection disabled

Event ID 92 — MIG protection disabled until the next reboot

Provider: MacriumImageGuardian
Channel: Unknown

Message

MIG protection disabled until the next reboot

Event ID 100 — Driver Loaded %1.

Provider: MacriumImageGuardian
Channel: Unknown

Message

Driver Loaded %1

Fields

Name	Description
`version`	—

Event ID 200 — Driver Unloaded

Provider: MacriumImageGuardian
Channel: Unknown

Message

Driver Unloaded

Event ID 320 — Blocked unauthorised process (%1) accessing file (%2).

Provider: MacriumImageGuardian
Channel: Unknown

Message

Blocked unauthorised process (%1) accessing file (%2)

Fields

Name	Description
`processName`	—
`fileName`	—

Event ID 330 — User has enabled Image Guardian on volume (%1).

Provider: MacriumImageGuardian
Channel: Unknown

Message

User has enabled Image Guardian on volume (%1)

Fields

Name	Description
`volumePath`	—

Event ID 340 — User has disabled Image Guardian on volume (%1).

Provider: MacriumImageGuardian
Channel: Unknown

Message

User has disabled Image Guardian on volume (%1).

Fields

Name	Description
`volumePath`	—

Event ID 510 — Error protecting volume. Error code

Provider: MacriumImageGuardian
Channel: Unknown

Message

Error protecting volume (%1). Error code = %2

Fields

Name	Description
`volumePath`	—
`errorCode`	—

Event ID 520 — Error unprotecting volume. Error code

Provider: MacriumImageGuardian
Channel: Unknown

Message

Error unprotecting volume (%1). Error code = %2.

Fields

Name	Description
`volumePath`	—
`errorCode`	—

Event ID 600 — Attribute error %1 %2.

Provider: MacriumImageGuardian
Channel: Unknown

Message

Attribute error %1 %2

Fields

Name	Description
`sourceFile`	—
`sourceLine`	—

Event ID 601 — A cryptographic function failed with status %1.

Provider: MacriumImageGuardian
Channel: Unknown

Message

A cryptographic function failed with status %1

Fields

Name	Description
`status`	—
`sourceFile`	—
`sourceLine`	—

Event ID 602 — Blocked Operation Stack Trace:%1.

Provider: MacriumImageGuardian
Channel: Unknown

Message

Blocked Operation Stack Trace:%1

Fields

Name	Description
`stackBackTrace`	—