Microsoft-Antimalware-AMFilter
11 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 1 | Application | |
| 2 | Application | |
| 3 | Application | |
| 4 | Application | |
| 5 | Application | |
| 6 | Application | |
| 7 | Application | |
| 8 | Application | |
| 9 | Application | |
| 10 | Application | |
| 11 | Application |
Event ID 1 —
Event ID 2 —
Fields #
| Name | Description |
|---|---|
File_ID UInt64 | — |
Event ID 3 —
Fields #
| Name | Description |
|---|---|
File_ID UInt64 | — |
Event ID 4 —
Fields #
| Name | Description |
|---|---|
File_ID UInt64 | — |
Event ID 5 —
Fields #
| Name | Description |
|---|---|
File_ID UInt64 | — |
Event ID 6 —
Event ID 7 —
Fields #
| Name | Description |
|---|---|
Pid UInt32 | — |
Reason UnicodeString | — |
Trusted UInt32 | — |
TotalTrusted UInt32 | — |
TotalUntrusted UInt32 | — |
Path UnicodeString | — |
Event ID 8 —
Fields #
| Name | Description |
|---|---|
Pid UInt32 | — |
Reason UnicodeString | — |
Flags UInt32 | — |
ProcessFilterFlags UInt32 | — |
ProcessName UnicodeString | — |
VmHardenType UInt64 | — |
ExemptVmHardenedTypes UInt64 | — |
Event ID 9 —
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | — |
Reason UnicodeString | — |
IoStatusBlockForNewFile UInt64 | — |
Event ID 10 —
Fields #
| Name | Description |
|---|---|
File_ID UInt64 | — |
Event ID 11 —
Fields #
| Name | Description |
|---|---|
FileName UnicodeString | — |
Reason UInt32 | — |
ScanStatus UInt32 | — |
State UInt32 | — |
ScanAttributes UInt32 | — |
FileId UInt64 | — |
USN UInt64 | — |