Microsoft-Office-Word
886 events across 1 channel
Event ID 0 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ipgd Int32 | — |
GoodClient Boolean | — |
PageReuse Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "0",
"version": "0",
"level": "4",
"task": "2",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ipgd": "0",
"GoodClient": "false",
"PageReuse": "false"
},
"message": ""
}
Event ID 1 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1",
"version": "0",
"level": "4",
"task": "2",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cpFirst Int32 | — |
cpLim Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2",
"version": "1",
"level": "4",
"task": "2",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 3 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3",
"version": "0",
"level": "4",
"task": "2",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cpFirst Int32 | — |
cpLim Int32 | — |
itap Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4",
"version": "1",
"level": "4",
"task": "2",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"cpLim": "0",
"itap": "0"
},
"message": ""
}
Event ID 5 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "5",
"version": "0",
"level": "4",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 6 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cp Int32 | — |
GoodClient Boolean | — |
GivenCp Boolean | — |
ParaClient Boolean | — |
FormatLineCaller UnicodeString | — |
FormatLineCallerOldestAncestor UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "6",
"version": "2",
"level": "5",
"task": "3",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cp": "0",
"GoodClient": "false",
"GivenCp": "false",
"ParaClient": "false",
"FormatLineCaller": "",
"FormatLineCallerOldestAncestor": ""
},
"message": ""
}
Event ID 7 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cp Int32 | — |
cpLim Int32 | — |
panic Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "7",
"version": "1",
"level": "5",
"task": "3",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"cpLim": "0",
"panic": "false"
},
"message": ""
}
Event ID 8 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ipgd Int32 | — |
cp (approx.) Int32 | — |
GoodClient Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "8",
"version": "0",
"level": "4",
"task": "2",
"opcode": "16",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ipgd": "0",
"cp (approx.)": "0",
"GoodClient": "false"
},
"message": ""
}
Event ID 9 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "9",
"version": "0",
"level": "4",
"task": "2",
"opcode": "17",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 10 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
abdk UnicodeString | — |
cpFirst Int32 | — |
cpLimIfAcex Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "10",
"version": "1",
"level": "4",
"task": "2",
"opcode": "18",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"abdk": "",
"cpFirst": "0",
"cpLimIfAcex": "0"
},
"message": ""
}
Event ID 11 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
pmwd Pointer | — |
pwwd Pointer | — |
hwnd Pointer | — |
View Type UnicodeString | — |
Pct Zoom Int32 | — |
RM View Boolean | — |
rcwDisp.xp Int32 | — |
rcwDisp.yp Int32 | — |
rcwDisp.dxp Int32 | — |
rcwDisp.dyp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "11",
"version": "2",
"level": "4",
"task": "4",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:48.870569500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"Doc Kind": "Doc",
"pmwd": "0x1FF3C5DD4A0",
"pwwd": "0x1FF3BF2B670",
"hwnd": "0x1B042C",
"View Type": "Page",
"Pct Zoom": "100",
"RM View": "true",
"rcwDisp.xp": "0",
"rcwDisp.yp": "0",
"rcwDisp.dxp": "461",
"rcwDisp.dyp": "528"
},
"message": ""
}
Event ID 12 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "12",
"version": "0",
"level": "4",
"task": "4",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 13 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pwwd Pointer | — |
ipgd Int32 | — |
Layer Handle Int64 | — |
Texture Handle Int64 | — |
rcePage.xe Int32 | — |
rcePage.ye Int32 | — |
rcePage.dxe Int32 | — |
rcePage.dye Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "13",
"version": "3",
"level": "4",
"task": "4",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471027300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"pwwd": "0x1FF3BF2B670",
"ipgd": "0",
"Layer Handle": "685",
"Texture Handle": "0",
"rcePage.xe": "-72",
"rcePage.ye": "17",
"rcePage.dxe": "816",
"rcePage.dye": "1056"
},
"message": ""
}
Event ID 14 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "14",
"version": "0",
"level": "4",
"task": "4",
"opcode": "13",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 15 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pwwd Pointer | — |
ipgd Int32 | — |
Layer Handle Int64 | — |
Texture Handle Int64 | — |
rcePage.xe Int32 | — |
rcePage.ye Int32 | — |
rcePage.dxe Int32 | — |
rcePage.dye Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "15",
"version": "3",
"level": "4",
"task": "4",
"opcode": "14",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pwwd": "0x0",
"ipgd": "0",
"Layer Handle": "0",
"Texture Handle": "0",
"rcePage.xe": "0",
"rcePage.ye": "0",
"rcePage.dxe": "0",
"rcePage.dye": "0"
},
"message": ""
}
Event ID 16 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "16",
"version": "0",
"level": "4",
"task": "4",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 17 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "17",
"version": "1",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 18 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cpFirst Int32 | — |
cpLim Int32 | — |
drk UnicodeString | — |
Subtype UnicodeString | — |
drc.xp Int32 | — |
drc.yp Int32 | — |
drc.dxp Int32 | — |
drc.dyp Int32 | — |
Layer Handle Int64 | — |
Texture Handle Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "18",
"version": "2",
"level": "5",
"task": "4",
"opcode": "16",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:52:26.372527500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "Nil Pdod",
"cpFirst": "-1",
"cpLim": "-1",
"drk": "Generic DR",
"Subtype": "Comment Margin Entry Point",
"drc.xp": "780",
"drc.yp": "93",
"drc.dxp": "24",
"drc.dyp": "24",
"Layer Handle": "2355",
"Texture Handle": "2356"
},
"message": ""
}
Event ID 19 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "19",
"version": "0",
"level": "5",
"task": "4",
"opcode": "17",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 20 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cpFirst Int32 | — |
pwwd Pointer | — |
View Type UnicodeString | — |
First Loop Char Boolean | — |
SqmDocId GUID | — |
DocumentId UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "20",
"version": "3",
"level": "4",
"task": "5",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469441600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"Doc Kind": "Doc",
"cpFirst": "71",
"pwwd": "0x1FF3BF2B670",
"View Type": "Page",
"First Loop Char": "true",
"SqmDocId": "{b4541f5c-1e9a-4fef-95d1-6c3c3b192773}",
"DocumentId": "1346715326"
},
"message": ""
}
Event ID 21 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "21",
"version": "0",
"level": "4",
"task": "5",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.466500000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 22 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cpFirst Int32 | — |
ccp Int32 | — |
Evt Mntr Name UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "22",
"version": "1",
"level": "4",
"task": "5",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"ccp": "0",
"Evt Mntr Name": ""
},
"message": ""
}
Event ID 23 —
Fields #
| Name | Description |
|---|---|
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "23",
"version": "1",
"level": "4",
"task": "5",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.466460600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "EvalXch"
},
"message": ""
}
Event ID 24 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "24",
"version": "0",
"level": "4",
"task": "5",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 25 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "25",
"version": "0",
"level": "4",
"task": "5",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 26 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cpFirst Int32 | — |
cpLim Int32 | — |
InInsertLoop Boolean | — |
fEnd Boolean | — |
UpdateWwd Boolean | — |
Reason UnicodeString | — |
wm UInt32 | — |
hwnd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "26",
"version": "2",
"level": "4",
"task": "5",
"opcode": "16",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cpFirst": "0",
"cpLim": "0",
"InInsertLoop": "false",
"fEnd": "false",
"UpdateWwd": "false",
"Reason": "",
"wm": "0",
"hwnd": "0x0"
},
"message": ""
}
Event ID 27 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
View Type UnicodeString | — |
Wwd Update Duration (msec) UInt64 | — |
Chunking Update Threshold (msec) UInt64 | — |
Wwd Update Delay (msec) UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "27",
"version": "2",
"level": "4",
"task": "5",
"opcode": "17",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Wwd Update Duration (msec)": "0",
"Chunking Update Threshold (msec)": "0",
"Wwd Update Delay (msec)": "0"
},
"message": ""
}
Event ID 28 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
View Type UnicodeString | — |
Wwd Update Duration (msec) UInt64 | — |
Chunking Update Threshold (msec) UInt64 | — |
Reason UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "28",
"version": "2",
"level": "4",
"task": "5",
"opcode": "18",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Wwd Update Duration (msec)": "0",
"Chunking Update Threshold (msec)": "0",
"Reason": ""
},
"message": ""
}
Event ID 29 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
View Type UnicodeString | — |
Time since last wwd update (msec) UInt64 | — |
Wwd Update Delay (msec) UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "29",
"version": "2",
"level": "4",
"task": "5",
"opcode": "19",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Time since last wwd update (msec)": "0",
"Wwd Update Delay (msec)": "0"
},
"message": ""
}
Event ID 30 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30",
"version": "0",
"level": "5",
"task": "2",
"opcode": "22",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 31 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "31",
"version": "0",
"level": "5",
"task": "2",
"opcode": "23",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 32 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "32",
"version": "0",
"level": "5",
"task": "2",
"opcode": "24",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 33 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "33",
"version": "0",
"level": "5",
"task": "2",
"opcode": "25",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 34 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "34",
"version": "0",
"level": "5",
"task": "4",
"opcode": "28",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471108100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 35 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "35",
"version": "0",
"level": "5",
"task": "4",
"opcode": "29",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471392300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 36 —
Fields #
| Name | Description |
|---|---|
drk UInt32 | — |
fDirty Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "36",
"version": "0",
"level": "5",
"task": "4",
"opcode": "30",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"fDirty": "false"
},
"message": ""
}
Event ID 37 —
Fields #
| Name | Description |
|---|---|
fInTable Boolean | — |
fTxbx Boolean | — |
fGEPresent Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "37",
"version": "0",
"level": "5",
"task": "4",
"opcode": "32",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fInTable": "false",
"fTxbx": "false",
"fGEPresent": "false"
},
"message": ""
}
Event ID 38 —
Fields #
| Name | Description |
|---|---|
drselk UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "38",
"version": "0",
"level": "5",
"task": "4",
"opcode": "31",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drselk": "0"
},
"message": ""
}
Event ID 39 —
Fields #
| Name | Description |
|---|---|
grfdrdo UInt32 | — |
cTxbx UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "39",
"version": "0",
"level": "5",
"task": "4",
"opcode": "33",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"grfdrdo": "0",
"cTxbx": "0"
},
"message": ""
}
Event ID 40 —
Fields #
| Name | Description |
|---|---|
drkx UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "40",
"version": "0",
"level": "5",
"task": "4",
"opcode": "34",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drkx": "0"
},
"message": ""
}
Event ID 41 —
Fields #
| Name | Description |
|---|---|
DmsecInIdle UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "41",
"version": "0",
"level": "5",
"task": "33",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DmsecInIdle": "0"
},
"message": ""
}
Event ID 42 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "42",
"version": "0",
"level": "5",
"task": "33",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 46 —
Fields #
| Name | Description |
|---|---|
filename UnicodeString | — |
fSuccess Boolean | — |
fCancelledByUser Boolean | — |
Content info UInt32 | — |
extension UnicodeString | — |
size UInt64 | — |
fIsRetryOpenViaBcs Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "46",
"version": "4",
"level": "4",
"task": "7",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"filename": "",
"fSuccess": "false",
"fCancelledByUser": "false",
"Content info": "0",
"extension": "",
"size": "0",
"fIsRetryOpenViaBcs": "false"
},
"message": ""
}
Event ID 53 —
Fields #
| Name | Description |
|---|---|
ipgd Int32 | — |
pdodMain Pointer | — |
drk UnicodeString | — |
Ideal Pixel Count UInt64 | — |
Bounding Box Pixel Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "53",
"version": "1",
"level": "4",
"task": "4",
"opcode": "18",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"pdodMain": "0x0",
"drk": "",
"Ideal Pixel Count": "0",
"Bounding Box Pixel Count": "0"
},
"message": ""
}
Event ID 67 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "67",
"version": "0",
"level": "4",
"task": "12",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 68 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "68",
"version": "0",
"level": "4",
"task": "12",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 69 —
Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | — |
pdodSrc0 Pointer | — |
pdodSrc1 Pointer | — |
pdodBase Pointer | — |
cpMac0 Int32 | — |
cpMac1 Int32 | — |
cpMacBase Int32 | — |
grfdc UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "69",
"version": "2",
"level": "4",
"task": "39",
"opcode": "46",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"pdodSrc0": "0x0",
"pdodSrc1": "0x0",
"pdodBase": "0x0",
"cpMac0": "0",
"cpMac1": "0",
"cpMacBase": "0",
"grfdc": "0"
},
"message": ""
}
Event ID 70 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
ElapsedTimeMicroseconds UInt64 | — |
cmdRet Int32 | — |
fConflict Boolean | — |
fTwoWayMerge Boolean | — |
Autofit0Microseconds UInt64 | — |
Autofit1Microseconds UInt64 | — |
AutofitBaseMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "70",
"version": "4",
"level": "4",
"task": "39",
"opcode": "47",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"ElapsedTimeMicroseconds": "0",
"cmdRet": "0",
"fConflict": "false",
"fTwoWayMerge": "false",
"Autofit0Microseconds": "0",
"Autofit1Microseconds": "0",
"AutofitBaseMicroseconds": "0"
},
"message": ""
}
Event ID 71 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "71",
"version": "0",
"level": "5",
"task": "39",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 72 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "72",
"version": "0",
"level": "5",
"task": "39",
"opcode": "13",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 73 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "73",
"version": "0",
"level": "5",
"task": "39",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 74 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "74",
"version": "0",
"level": "5",
"task": "39",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 75 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "75",
"version": "0",
"level": "5",
"task": "39",
"opcode": "14",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 76 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "76",
"version": "0",
"level": "5",
"task": "39",
"opcode": "15",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 77 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "77",
"version": "0",
"level": "5",
"task": "39",
"opcode": "16",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 78 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "78",
"version": "0",
"level": "5",
"task": "39",
"opcode": "17",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 79 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "79",
"version": "0",
"level": "5",
"task": "39",
"opcode": "18",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 80 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "80",
"version": "0",
"level": "5",
"task": "39",
"opcode": "19",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 81 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "81",
"version": "0",
"level": "5",
"task": "39",
"opcode": "20",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 82 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "82",
"version": "0",
"level": "5",
"task": "39",
"opcode": "21",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 83 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "83",
"version": "0",
"level": "5",
"task": "39",
"opcode": "22",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 84 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "84",
"version": "0",
"level": "5",
"task": "39",
"opcode": "23",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 85 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "85",
"version": "0",
"level": "5",
"task": "39",
"opcode": "24",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 86 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "86",
"version": "0",
"level": "5",
"task": "39",
"opcode": "25",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 87 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "87",
"version": "0",
"level": "5",
"task": "39",
"opcode": "26",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 88 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "88",
"version": "0",
"level": "5",
"task": "39",
"opcode": "27",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 89 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "89",
"version": "0",
"level": "5",
"task": "39",
"opcode": "28",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 90 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "90",
"version": "0",
"level": "5",
"task": "39",
"opcode": "29",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 91 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "91",
"version": "0",
"level": "5",
"task": "39",
"opcode": "30",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 92 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "92",
"version": "0",
"level": "5",
"task": "39",
"opcode": "31",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 93 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "93",
"version": "0",
"level": "5",
"task": "39",
"opcode": "32",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 94 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "94",
"version": "0",
"level": "5",
"task": "39",
"opcode": "33",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 95 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "95",
"version": "0",
"level": "5",
"task": "39",
"opcode": "34",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 96 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "96",
"version": "0",
"level": "5",
"task": "39",
"opcode": "35",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 97 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "97",
"version": "0",
"level": "5",
"task": "39",
"opcode": "36",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 98 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "98",
"version": "0",
"level": "5",
"task": "39",
"opcode": "37",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 99 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "99",
"version": "0",
"level": "5",
"task": "39",
"opcode": "38",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 100 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "100",
"version": "0",
"level": "5",
"task": "39",
"opcode": "39",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 101 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "101",
"version": "0",
"level": "5",
"task": "39",
"opcode": "40",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 102 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "102",
"version": "0",
"level": "5",
"task": "39",
"opcode": "41",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 103 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "103",
"version": "0",
"level": "5",
"task": "39",
"opcode": "42",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 104 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "104",
"version": "0",
"level": "5",
"task": "39",
"opcode": "43",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 105 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "105",
"version": "0",
"level": "5",
"task": "39",
"opcode": "44",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 106 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "106",
"version": "0",
"level": "5",
"task": "39",
"opcode": "45",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 107 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "107",
"version": "0",
"level": "5",
"task": "12",
"opcode": "50",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 108 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "108",
"version": "0",
"level": "5",
"task": "12",
"opcode": "51",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 109 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "109",
"version": "0",
"level": "5",
"task": "12",
"opcode": "52",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 110 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "110",
"version": "0",
"level": "5",
"task": "12",
"opcode": "53",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 111 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "111",
"version": "0",
"level": "4",
"task": "12",
"opcode": "54",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045903900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 112 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "112",
"version": "0",
"level": "4",
"task": "12",
"opcode": "55",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045911600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "10"
},
"message": ""
}
Event ID 113 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "113",
"version": "0",
"level": "4",
"task": "12",
"opcode": "56",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 114 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "114",
"version": "0",
"level": "4",
"task": "12",
"opcode": "57",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 115 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "115",
"version": "0",
"level": "4",
"task": "12",
"opcode": "58",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 116 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "116",
"version": "0",
"level": "4",
"task": "12",
"opcode": "59",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 117 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "117",
"version": "0",
"level": "4",
"task": "12",
"opcode": "60",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 118 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "118",
"version": "0",
"level": "4",
"task": "12",
"opcode": "61",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 119 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "119",
"version": "0",
"level": "4",
"task": "12",
"opcode": "62",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045906600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 120 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "120",
"version": "0",
"level": "4",
"task": "12",
"opcode": "63",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045909200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "3"
},
"message": ""
}
Event ID 121 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "121",
"version": "0",
"level": "4",
"task": "12",
"opcode": "64",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 122 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "122",
"version": "0",
"level": "4",
"task": "12",
"opcode": "65",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 123 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pdodClone Pointer | — |
fBackground Boolean | — |
Format UnicodeString | — |
SQMDocID GUID | — |
recurseCount Int32 | — |
SaveActionId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
SqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fCoAuthorable Boolean | — |
fMergeRequired Boolean | — |
saveDwTag UInt32 | — |
saveInitiateKind Int32 | — |
rtcEnabledState Int32 | — |
alwaysSaveEnabledState Int32 | — |
BkgSaveDisallowReason UInt32 | — |
AlwaysSaveDisableReason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "123",
"version": "4",
"level": "4",
"task": "13",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.711853500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x1FF3A8B6000",
"pdodClone": "0x1FFDAFA4A90",
"fBackground": "true",
"Format": "asd",
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"recurseCount": "0",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"ftyp": "14",
"fSaveAs": "false",
"SqmDocLocation": "14",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"saveDwTag": "20485325",
"saveInitiateKind": "2",
"rtcEnabledState": "0",
"alwaysSaveEnabledState": "0",
"BkgSaveDisallowReason": " 0",
"AlwaysSaveDisableReason": " 6292524"
},
"message": ""
}
Event ID 124 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pdodClone Pointer | — |
fSuccess Boolean | — |
eid Int32 | — |
recurseCount Int32 | — |
ElapsedTimeMicroseconds UInt64 | — |
SaveActionId GUID | — |
EditToSaveTimeMicroseconds UInt64 | — |
FirstEditId GUID | — |
EdpiType UInt32 | — |
CurrentEditId GUID | — |
RtcBrkEditToSaveTimeMicroseconds UInt64 | — |
FirstRtcBrkEditId GUID | — |
CurrentRtcBrkEditId GUID | — |
IdleDelayedAutoSaveTimeMicroseconds UInt64 | — |
AutoSaveIdleToSaveTimeMicroseconds UInt64 | — |
AutoSaveIdleDurationTimeMicroseconds UInt64 | — |
AutoSaveIdleCooldownTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "124",
"version": "8",
"level": "4",
"task": "13",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.766445300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x1FF3A8B6000",
"pdodClone": "0x1FFDAFA4A90",
"fSuccess": "true",
"eid": "-1",
"recurseCount": "0",
"ElapsedTimeMicroseconds": "54590",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"EditToSaveTimeMicroseconds": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"EdpiType": " 2",
"CurrentEditId": "{00000000-0000-0000-0000-000000000000}",
"RtcBrkEditToSaveTimeMicroseconds": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"CurrentRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"IdleDelayedAutoSaveTimeMicroseconds": "0",
"AutoSaveIdleToSaveTimeMicroseconds": "0",
"AutoSaveIdleDurationTimeMicroseconds": "0",
"AutoSaveIdleCooldownTimeMicroseconds": "0"
},
"message": ""
}
Event ID 125 —
Fields #
| Name | Description |
|---|---|
SQMDocID GUID | — |
Source UnicodeString | — |
saveInitiateKind Int32 | — |
Pdod Pointer | — |
SqmDocLocation Int32 | — |
FCoAuthorable Boolean | — |
SaveActionId GUID | — |
DusecFirstEditToSaveInit UInt64 | — |
FirstEditId GUID | — |
DusecFirstRtcBrkEditToSaveInit UInt64 | — |
FirstRtcBrkEditId GUID | — |
CsiErrorCode UInt32 | — |
DynamicSaveAdjustedReason Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "125",
"version": "2",
"level": "4",
"task": "13",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.701292500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"Source": "UserRequested",
"saveInitiateKind": "2",
"Pdod": "0x1FF3A8B6000",
"SqmDocLocation": "14",
"FCoAuthorable": "false",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"DusecFirstEditToSaveInit": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"DusecFirstRtcBrkEditToSaveInit": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"CsiErrorCode": " 1",
"DynamicSaveAdjustedReason": "0"
},
"message": ""
}
Event ID 132 —
Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | — |
SuspensionID GUID | — |
fpInitialTimeAvailableMilliseconds Float | — |
SessionID GUID | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "132",
"version": "2",
"level": "4",
"task": "15",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fpInitialTimeAvailableMilliseconds": "0.0",
"SessionID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 133 —
Fields #
| Name | Description |
|---|---|
SuspensionID GUID | — |
fIsDocOpen Boolean | — |
SQMDocID GUID | — |
pdodCurrent Pointer | — |
fIsDocDirty Boolean | — |
fIsSaveInProgress Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "133",
"version": "0",
"level": "4",
"task": "15",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fIsDocOpen": "false",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodCurrent": "0x0",
"fIsDocDirty": "false",
"fIsSaveInProgress": "false"
},
"message": ""
}
Event ID 134 —
Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | — |
SuspensionID GUID | — |
fpTimeRemainingMilliseconds Float | — |
fpElapsedTimeMilliseconds Float | — |
HResult Int32 | — |
ErrorDescription UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "134",
"version": "1",
"level": "4",
"task": "15",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fpTimeRemainingMilliseconds": "0.0",
"fpElapsedTimeMilliseconds": "0.0",
"HResult": "0",
"ErrorDescription": ""
},
"message": ""
}
Event ID 135 —
Fields #
| Name | Description |
|---|---|
SessionID GUID | — |
SQMDocID GUID | — |
pdod Pointer | — |
dataLossType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "135",
"version": "1",
"level": "4",
"task": "15",
"opcode": "13",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SessionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"dataLossType": "0"
},
"message": ""
}
Event ID 136 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pwwd Pointer | — |
device id UInt32 | — |
layer name UnicodeString | — |
layer id Pointer | — |
airspace layer handle Int64 | — |
bootQuit state UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "136",
"version": "5",
"level": "3",
"task": "4",
"opcode": "19",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pwwd": "0x0",
"device id": "0",
"layer name": "",
"layer id": "0x0",
"airspace layer handle": "0",
"bootQuit state": "0"
},
"message": ""
}
Event ID 137 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "137",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 141 —
Fields #
| Name | Description |
|---|---|
SQMDocID GUID | — |
Reason UnicodeString | — |
Details1 Int32 | — |
Details2 UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "141",
"version": "0",
"level": "4",
"task": "13",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"Reason": "",
"Details1": "0",
"Details2": "0"
},
"message": ""
}
Event ID 148 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
SqmDocId GUID | — |
Format UnicodeString | — |
fSaveDuringSuspendOrClose Boolean | — |
cIntervals UInt32 | — |
Bucket1-Min-Msec UInt64 | — |
Bucket2-Min-Msec UInt64 | — |
Bucket3-Min-Msec UInt64 | — |
Bucket4-Min-Msec UInt64 | — |
Bucket5-Min-Msec UInt64 | — |
Bucket6-Min-Msec UInt64 | — |
Bucket7-Min-Msec UInt64 | — |
Bucket8-Min-Msec UInt64 | — |
Bucket9-Min-Msec UInt64 | — |
Bucket10-Min-Msec UInt64 | — |
Bucket1-Count UInt64 | — |
Bucket2-Count UInt64 | — |
Bucket3-Count UInt64 | — |
Bucket4-Count UInt64 | — |
Bucket5-Count UInt64 | — |
Bucket6-Count UInt64 | — |
Bucket7-Count UInt64 | — |
Bucket8-Count UInt64 | — |
Bucket9-Count UInt64 | — |
Bucket10-Count UInt64 | — |
TopUnresponsiveDuration1-Msec UInt64 | — |
TopUnresponsiveDuration2-Msec UInt64 | — |
TopUnresponsiveDuration3-Msec UInt64 | — |
TopUnresponsiveDuration4-Msec UInt64 | — |
TopUnresponsiveDuration5-Msec UInt64 | — |
SaveActionId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
SqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fCoAuthorable Boolean | — |
fMergeRequired Boolean | — |
fOnBackgroundThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "148",
"version": "2",
"level": "4",
"task": "13",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"Format": "",
"fSaveDuringSuspendOrClose": "false",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0",
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"SqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 149 —
Fields #
| Name | Description |
|---|---|
SuspensionID GUID | — |
SQMDocID GUID | — |
Disposition UnicodeString | — |
Error UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "149",
"version": "0",
"level": "4",
"task": "15",
"opcode": "14",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"Disposition": "",
"Error": ""
},
"message": ""
}
Event ID 150 —
Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | — |
MillisecondsSuspended UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "150",
"version": "0",
"level": "4",
"task": "15",
"opcode": "15",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"MillisecondsSuspended": "0"
},
"message": ""
}
Event ID 151 —
Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | — |
fpElapsedTimeMilliseconds Float | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "151",
"version": "1",
"level": "4",
"task": "15",
"opcode": "16",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"fpElapsedTimeMilliseconds": "0.0"
},
"message": ""
}
Event ID 152 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "152",
"version": "0",
"level": "4",
"task": "15",
"opcode": "17",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 153 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "153",
"version": "0",
"level": "4",
"task": "15",
"opcode": "18",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 154 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "154",
"version": "0",
"level": "4",
"task": "15",
"opcode": "19",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 155 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "155",
"version": "0",
"level": "4",
"task": "15",
"opcode": "20",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 156 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "156",
"version": "1",
"level": "4",
"task": "20",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 157 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "157",
"version": "1",
"level": "4",
"task": "20",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 158 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cmvBeforeUpgrade Int32 | — |
cmvToUpgrade Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "158",
"version": "1",
"level": "4",
"task": "22",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cmvBeforeUpgrade": "0",
"cmvToUpgrade": "0"
},
"message": ""
}
Event ID 159 —
Fields #
| Name | Description |
|---|---|
upgradeCmdStatus Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "159",
"version": "1",
"level": "4",
"task": "22",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"upgradeCmdStatus": "0"
},
"message": ""
}
Event ID 162 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
IdleCoreTime UInt64 | — |
ActiveTime UInt64 | — |
DeepSleepTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "162",
"version": "1",
"level": "4",
"task": "23",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleCoreTime": "0",
"ActiveTime": "0",
"DeepSleepTime": "0"
},
"message": ""
}
Event ID 163 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
Bucket-0-50-Count UInt64 | — |
Bucket-50-100-Count UInt64 | — |
Bucket-100-150-Count UInt64 | — |
Bucket-150-200-Count UInt64 | — |
Bucket-200-350-Count UInt64 | — |
Bucket-350-500-Count UInt64 | — |
Bucket-500-1000-Count UInt64 | — |
Bucket-1000-2000-Count UInt64 | — |
Bucket-2000-5000-Count UInt64 | — |
Bucket-5000-Max-Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "163",
"version": "1",
"level": "4",
"task": "23",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 164 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
IdleTaskName UnicodeString | — |
fRtcGroupIdle Boolean | — |
IdleTimeForTask UInt64 | — |
Count UInt64 | — |
MsgPresentCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "164",
"version": "2",
"level": "4",
"task": "23",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"IdleTimeForTask": "0",
"Count": "0",
"MsgPresentCount": "0"
},
"message": ""
}
Event ID 165 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "165",
"version": "0",
"level": "4",
"task": "15",
"opcode": "21",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 166 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "166",
"version": "0",
"level": "4",
"task": "15",
"opcode": "22",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 167 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "167",
"version": "0",
"level": "4",
"task": "15",
"opcode": "23",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 168 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "168",
"version": "0",
"level": "4",
"task": "15",
"opcode": "24",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 169 —
Fields #
| Name | Description |
|---|---|
SessionID GUID | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "169",
"version": "1",
"level": "4",
"task": "15",
"opcode": "25",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SessionID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 172 —
Fields #
| Name | Description |
|---|---|
fn Int32 | — |
Ext UnicodeString | — |
ftyp Int32 | — |
pioldoc Pointer | — |
Caller UnicodeString | — |
fAutosaveDoc Boolean | — |
fFnStrmWrapped Boolean | — |
dof UInt32 | — |
dof2 UInt64 | — |
recurseCount Int32 | — |
currentScopeId UInt32 | — |
parentScopeId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "172",
"version": "2",
"level": "4",
"task": "7",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T22:34:52.754312100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fn": "18",
"Ext": "dotm",
"ftyp": "-1",
"pioldoc": "0x2D835490210",
"Caller": "OpenGlobalDot",
"fAutosaveDoc": "false",
"fFnStrmWrapped": "false",
"dof": "0x4210000",
"dof2": "0x200024000201",
"recurseCount": "0",
"currentScopeId": "0x0",
"parentScopeId": "0x0"
},
"message": ""
}
Event ID 173 —
Fields #
| Name | Description |
|---|---|
Failed Boolean | — |
Canceled Boolean | — |
pdod Pointer | — |
diReason UInt16 | — |
ftyp Int32 | — |
FtypExt UnicodeString | — |
SqmDocId GUID | — |
recurseCount Int32 | — |
sdv Int32 | — |
EdpiType UInt32 | — |
nFib UInt16 | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "173",
"version": "6",
"level": "4",
"task": "7",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T22:34:52.793373700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Failed": "false",
"Canceled": "false",
"pdod": "0x2D8354AA030",
"diReason": "0",
"ftyp": "11",
"FtypExt": "dotm",
"SqmDocId": "{6fd9e7eb-191b-436f-9877-96790d494e3b}",
"recurseCount": "0",
"sdv": "7",
"EdpiType": " 2",
"nFib": "0",
"ElapsedTimeMicroseconds": "39080"
},
"message": ""
}
Event ID 174 —
Fields #
| Name | Description |
|---|---|
recurseCount Int32 | — |
SaveActionId GUID | — |
SqmDocId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
SqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fOnBackgroundThread Boolean | — |
currentScopeId UInt32 | — |
parentScopeId UInt32 | — |
pioldoc Pointer | — |
saveInitiateKind Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "174",
"version": "6",
"level": "4",
"task": "13",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"recurseCount": "0",
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"SqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fOnBackgroundThread": "false",
"currentScopeId": "0",
"parentScopeId": "0",
"pioldoc": "0x0",
"saveInitiateKind": "0"
},
"message": ""
}
Event ID 175 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
cmdRet Int32 | — |
recurseCount Int32 | — |
SaveActionId GUID | — |
fCoAuthorable Boolean | — |
fMergeRequired Boolean | — |
currentScopeId UInt32 | — |
parentScopeId UInt32 | — |
QueueStatus UInt16 | — |
fInCoherencyRetry Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "175",
"version": "5",
"level": "4",
"task": "13",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.706973800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "5623",
"cmdRet": "0",
"recurseCount": "0",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"currentScopeId": "0x0",
"parentScopeId": "0x0",
"QueueStatus": "0x0",
"fInCoherencyRetry": "false"
},
"message": ""
}
Event ID 176 —
Fields #
| Name | Description |
|---|---|
lserr Int32 | — |
dk UInt32 | — |
fGoodClientDoc Boolean | — |
wk UInt32 | — |
fWwdLayout Boolean | — |
fWwdVBA Boolean | — |
sqmDocID GUID | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "176",
"version": "1",
"level": "2",
"task": "3",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lserr": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 177 —
Fields #
| Name | Description |
|---|---|
fserr Int32 | — |
ipgd Int32 | — |
dk UInt32 | — |
fGoodClientDoc Boolean | — |
wk UInt32 | — |
fWwdLayout Boolean | — |
fWwdVBA Boolean | — |
sqmDocID GUID | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "177",
"version": "1",
"level": "2",
"task": "2",
"opcode": "19",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fserr": "0",
"ipgd": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 178 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
fInterrupt Boolean | — |
sqmDocID GUID | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "178",
"version": "2",
"level": "3",
"task": "2",
"opcode": "20",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fInterrupt": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 179 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "179",
"version": "0",
"level": "4",
"task": "4",
"opcode": "21",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 180 —
Fields #
| Name | Description |
|---|---|
SuspensionID GUID | — |
SQMDocID GUID | — |
pdod Pointer | — |
fn Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "180",
"version": "0",
"level": "4",
"task": "15",
"opcode": "26",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fn": "0"
},
"message": ""
}
Event ID 181 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "181",
"version": "0",
"level": "4",
"task": "4",
"opcode": "22",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 182 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "182",
"version": "0",
"level": "4",
"task": "15",
"opcode": "27",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 183 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "183",
"version": "0",
"level": "4",
"task": "15",
"opcode": "28",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 184 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "184",
"version": "0",
"level": "4",
"task": "15",
"opcode": "29",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 185 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "185",
"version": "0",
"level": "4",
"task": "15",
"opcode": "30",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 186 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "186",
"version": "0",
"level": "4",
"task": "15",
"opcode": "31",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 187 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "187",
"version": "0",
"level": "4",
"task": "15",
"opcode": "32",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 188 —
Fields #
| Name | Description |
|---|---|
fserr Int32 | — |
ipgd Int32 | — |
dk UInt32 | — |
fGoodClientDoc Boolean | — |
wk UInt32 | — |
fWwdLayout Boolean | — |
fWwdVBA Boolean | — |
sqmDocID GUID | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "188",
"version": "1",
"level": "4",
"task": "2",
"opcode": "21",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fserr": "0",
"ipgd": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 189 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
pdodMain Pointer | — |
pmwd Pointer | — |
pwwd Pointer | — |
Old View Type UnicodeString | — |
New View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "189",
"version": "2",
"level": "4",
"task": "1",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-14T22:34:54.334628700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{d73f5340-b345-000c-cfaf-40d745b3dc01}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "CmdPageViewOnCpSee",
"pdodMain": "0x2D835A758F0",
"pmwd": "0x2D8359F5FF0",
"pwwd": "0x2D8BAE2AD70",
"Old View Type": "Draft",
"New View Type": "Page"
},
"message": ""
}
Event ID 190 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
pmwd Pointer | — |
pwwd Pointer | — |
hwnd Pointer | — |
View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "190",
"version": "1",
"level": "4",
"task": "1",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 191 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
pmwd Pointer | — |
pwwd Pointer | — |
hwnd Pointer | — |
View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "191",
"version": "1",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 192 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
pmwdOld Pointer | — |
pwwdOld Pointer | — |
Old Wwd View Type UnicodeString | — |
pmwdNew Pointer | — |
pwwdNew Pointer | — |
New Wwd View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "192",
"version": "1",
"level": "4",
"task": "1",
"opcode": "13",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwdOld": "0x0",
"pwwdOld": "0x0",
"Old Wwd View Type": "",
"pmwdNew": "0x0",
"pwwdNew": "0x0",
"New Wwd View Type": ""
},
"message": ""
}
Event ID 193 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
Wwd View Type UnicodeString | — |
x Scroll Int32 | — |
y Scroll Int32 | — |
Canvas Width Int32 | — |
Canvas Height Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "193",
"version": "1",
"level": "4",
"task": "4",
"opcode": "23",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471022700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"Wwd View Type": "Page",
"x Scroll": "92",
"y Scroll": "0",
"Canvas Width": "856",
"Canvas Height": "1090"
},
"message": ""
}
Event ID 194 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "194",
"version": "0",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 195 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "195",
"version": "0",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 196 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
IdleTaskName UnicodeString | — |
fRtcGroupIdle Boolean | — |
Bucket-0-50-Count UInt64 | — |
Bucket-50-100-Count UInt64 | — |
Bucket-100-150-Count UInt64 | — |
Bucket-150-200-Count UInt64 | — |
Bucket-200-350-Count UInt64 | — |
Bucket-350-500-Count UInt64 | — |
Bucket-500-1000-Count UInt64 | — |
Bucket-1000-2000-Count UInt64 | — |
Bucket-2000-5000-Count UInt64 | — |
Bucket-5000-Max-Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "196",
"version": "2",
"level": "4",
"task": "23",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 197 —
Fields #
| Name | Description |
|---|---|
mbit UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "197",
"version": "0",
"level": "4",
"task": "32",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mbit": "0"
},
"message": ""
}
Event ID 198 —
Fields #
| Name | Description |
|---|---|
mbit UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "198",
"version": "0",
"level": "4",
"task": "32",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mbit": "0"
},
"message": ""
}
Event ID 220 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "220",
"version": "0",
"level": "4",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 221 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "221",
"version": "0",
"level": "4",
"task": "7",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 222 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
Allowed Boolean | — |
Reason UnicodeString | — |
ExtraInfo UnicodeString | — |
ReasonInt UInt32 | — |
ContextTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "222",
"version": "2",
"level": "4",
"task": "13",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.701428700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x0",
"pdod": "0x1FF3A8B6000",
"Allowed": "true",
"Reason": "",
"ExtraInfo": "",
"ReasonInt": " 0",
"ContextTag": "0x13894CD"
},
"message": ""
}
Event ID 223 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cp Int32 | — |
E1oType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "223",
"version": "0",
"level": "4",
"task": "4",
"opcode": "24",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"E1oType": "0"
},
"message": ""
}
Event ID 224 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cp Int32 | — |
E2oType UInt32 | — |
fAccessibilityRunning Boolean | — |
wkWwd UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "224",
"version": "1",
"level": "4",
"task": "4",
"opcode": "25",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"E2oType": "0",
"fAccessibilityRunning": "false",
"wkWwd": "0"
},
"message": ""
}
Event ID 225 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cpStart Int32 | — |
cpEnd Int32 | — |
iTap Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "225",
"version": "0",
"level": "4",
"task": "4",
"opcode": "26",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cpStart": "0",
"cpEnd": "0",
"iTap": "0"
},
"message": ""
}
Event ID 226 —
Fields #
| Name | Description |
|---|---|
facekind UnicodeString | — |
faceLeft Int32 | — |
faceTop Int32 | — |
faceRight Int32 | — |
faceBottom Int32 | — |
layerHandle Int32 | — |
tE2oSelected Int32 | — |
fVisible Boolean | — |
cChildren Int32 | — |
fHitTestChildrenOnly Boolean | — |
fPinToScreen Boolean | — |
fIgnoreFace Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "226",
"version": "4",
"level": "4",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 227 —
Fields #
| Name | Description |
|---|---|
facekind UnicodeString | — |
faceLeft Int32 | — |
faceTop Int32 | — |
faceRight Int32 | — |
faceBottom Int32 | — |
layerHandle Int32 | — |
tE2oSelected Int32 | — |
fVisible Boolean | — |
cChildren Int32 | — |
fHitTestChildrenOnly Boolean | — |
fPinToScreen Boolean | — |
fIgnoreFace Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "227",
"version": "4",
"level": "100",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 228 —
Fields #
| Name | Description |
|---|---|
facekind UnicodeString | — |
faceLeft Int32 | — |
faceTop Int32 | — |
faceRight Int32 | — |
faceBottom Int32 | — |
layerHandle Int32 | — |
tE2oSelected Int32 | — |
fVisible Boolean | — |
cChildren Int32 | — |
fHitTestChildrenOnly Boolean | — |
fPinToScreen Boolean | — |
fIgnoreFace Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "228",
"version": "4",
"level": "200",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 229 —
Fields #
| Name | Description |
|---|---|
ptX Int32 | — |
ptY Int32 | — |
fZoomMatches Boolean | — |
dxeScroll Int32 | — |
dyeScroll Int32 | — |
tapLeft Int32 | — |
tapTop Int32 | — |
tapRight Int32 | — |
tapBottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "229",
"version": "1",
"level": "4",
"task": "30",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"fZoomMatches": "false",
"dxeScroll": "0",
"dyeScroll": "0",
"tapLeft": "0",
"tapTop": "0",
"tapRight": "0",
"tapBottom": "0"
},
"message": ""
}
Event ID 230 —
Fields #
| Name | Description |
|---|---|
usec UInt64 | — |
iPagesTested Int32 | — |
iFacesTested Int32 | — |
cChildrenTree Int32 | — |
cChildrenHitPage Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "230",
"version": "0",
"level": "4",
"task": "30",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usec": "0",
"iPagesTested": "0",
"iFacesTested": "0",
"cChildrenTree": "0",
"cChildrenHitPage": "0"
},
"message": ""
}
Event ID 231 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
Interrupt Boolean | — |
Reason UnicodeString | — |
ExtraInfo UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "231",
"version": "0",
"level": "50",
"task": "13",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715463700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x49819C",
"Interrupt": "false",
"Reason": "ContIdleCheck",
"ExtraInfo": "No Msg"
},
"message": ""
}
Event ID 232 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "232",
"version": "0",
"level": "50",
"task": "13",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.709846200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": " 0"
},
"message": ""
}
Event ID 233 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "233",
"version": "0",
"level": "50",
"task": "13",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715459700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": " 0"
},
"message": ""
}
Event ID 234 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
Bucket-0-500-Count UInt64 | — |
Bucket-500-1000-Count UInt64 | — |
Bucket-1000-2000-Count UInt64 | — |
Bucket-2000-5000-Count UInt64 | — |
Bucket-5000-10000-Count UInt64 | — |
Bucket-10000-20000-Count UInt64 | — |
Bucket-20000-50000-Count UInt64 | — |
Bucket-50000-100000-Count UInt64 | — |
Bucket-100000-300000-Count UInt64 | — |
Bucket-300000-Max-Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "234",
"version": "1",
"level": "4",
"task": "23",
"opcode": "14",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"Bucket-0-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-10000-Count": "0",
"Bucket-10000-20000-Count": "0",
"Bucket-20000-50000-Count": "0",
"Bucket-50000-100000-Count": "0",
"Bucket-100000-300000-Count": "0",
"Bucket-300000-Max-Count": "0"
},
"message": ""
}
Event ID 235 —
Fields #
| Name | Description |
|---|---|
E2oTotalCount Int32 | — |
E2oChartCount Int32 | — |
E2oSmartArtCount Int32 | — |
E2oPictureCount Int32 | — |
E2oGroupCount Int32 | — |
E2oTextBoxCount Int32 | — |
E2oOLECount Int32 | — |
E2oOthersCount Int32 | — |
E1oTotalCount Int32 | — |
E1oPictureCount Int32 | — |
E1oGroupCount Int32 | — |
E1oTextBoxCount Int32 | — |
E1oOthersCount Int32 | — |
FootNotesCount Int32 | — |
EndNotesCount Int32 | — |
CommentsCount Int32 | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "235",
"version": "1",
"level": "4",
"task": "7",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E2oTotalCount": "0",
"E2oChartCount": "0",
"E2oSmartArtCount": "0",
"E2oPictureCount": "0",
"E2oGroupCount": "0",
"E2oTextBoxCount": "0",
"E2oOLECount": "0",
"E2oOthersCount": "0",
"E1oTotalCount": "0",
"E1oPictureCount": "0",
"E1oGroupCount": "0",
"E1oTextBoxCount": "0",
"E1oOthersCount": "0",
"FootNotesCount": "0",
"EndNotesCount": "0",
"CommentsCount": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 236 —
Fields #
| Name | Description |
|---|---|
EvalFunc UnicodeString | — |
RuleType UnicodeString | — |
Rule Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "236",
"version": "1",
"level": "4",
"task": "31",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"EvalFunc": "",
"RuleType": "",
"Rule": "0"
},
"message": ""
}
Event ID 237 —
Fields #
| Name | Description |
|---|---|
editorsCount Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "237",
"version": "0",
"level": "4",
"task": "12",
"opcode": "66",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"editorsCount": "0"
},
"message": ""
}
Event ID 238 —
Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | — |
Issue UnicodeString | — |
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "238",
"version": "1",
"level": "4",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"Issue": "",
"HResult": "0"
},
"message": ""
}
Event ID 239 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
CorruptionReason UnicodeString | — |
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "239",
"version": "2",
"level": "3",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"CorruptionReason": "",
"HResult": "0"
},
"message": ""
}
Event ID 241 —
Fields #
| Name | Description |
|---|---|
SQMDocID GUID | — |
pdod Pointer | — |
pdodSrc Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "241",
"version": "0",
"level": "100",
"task": "13",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.776406600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"pdod": "0x1FFDAFA4A90",
"pdodSrc": "0x1FF3A8B6000"
},
"message": ""
}
Event ID 242 —
Fields #
| Name | Description |
|---|---|
SQMDocID GUID | — |
pdodSrc Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "242",
"version": "0",
"level": "100",
"task": "13",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodSrc": "0x0"
},
"message": ""
}
Event ID 243 —
Fields #
| Name | Description |
|---|---|
Issue UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "243",
"version": "0",
"level": "4",
"task": "13",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Issue": ""
},
"message": ""
}
Event ID 244 —
Fields #
| Name | Description |
|---|---|
ftyp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "244",
"version": "0",
"level": "4",
"task": "13",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ftyp": "0"
},
"message": ""
}
Event ID 245 —
Fields #
| Name | Description |
|---|---|
SectionsCount Int32 | — |
E2oIvyChartCount Int32 | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "245",
"version": "2",
"level": "4",
"task": "7",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SectionsCount": "0",
"E2oIvyChartCount": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 246 —
Fields #
| Name | Description |
|---|---|
Current Section Int32 | — |
HeaderFooter Type Int32 | — |
Has PAGE Field Boolean | — |
Has NUMPAGES Field Boolean | — |
Has Lego Boolean | — |
PN Start On UInt64 | — |
PN Format UInt8 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "246",
"version": "0",
"level": "4",
"task": "7",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Current Section": "0",
"HeaderFooter Type": "0",
"Has PAGE Field": "false",
"Has NUMPAGES Field": "false",
"Has Lego": "false",
"PN Start On": "0",
"PN Format": "0"
},
"message": ""
}
Event ID 247 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "247",
"version": "0",
"level": "4",
"task": "7",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 248 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "248",
"version": "0",
"level": "4",
"task": "13",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 249 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "249",
"version": "0",
"level": "4",
"task": "13",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 250 —
Fields #
| Name | Description |
|---|---|
dxaLeftBefore UInt64 | — |
dxaRightBefore UInt64 | — |
dyaTopBefore Int64 | — |
dyaBottomBefore Int64 | — |
dzaGutterBefore UInt64 | — |
dxaLeftAfter UInt64 | — |
dxaRightAfter UInt64 | — |
dyaTopAfter Int64 | — |
dyaBottomAfter Int64 | — |
dzaGutterAfter UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "250",
"version": "0",
"level": "4",
"task": "2",
"opcode": "26",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxaLeftBefore": "0",
"dxaRightBefore": "0",
"dyaTopBefore": "0",
"dyaBottomBefore": "0",
"dzaGutterBefore": "0",
"dxaLeftAfter": "0",
"dxaRightAfter": "0",
"dyaTopAfter": "0",
"dyaBottomAfter": "0",
"dzaGutterAfter": "0"
},
"message": ""
}
Event ID 251 —
Fields #
| Name | Description |
|---|---|
dmPaperBefore Int32 | — |
dmPaperAfter Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "2",
"opcode": "27",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmPaperBefore": "0",
"dmPaperAfter": "0"
},
"message": ""
}
Event ID 252 —
Fields #
| Name | Description |
|---|---|
iColumnPresetBefore Int32 | — |
iColumnPresetAfter Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "252",
"version": "0",
"level": "4",
"task": "2",
"opcode": "28",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iColumnPresetBefore": "0",
"iColumnPresetAfter": "0"
},
"message": ""
}
Event ID 253 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Doc Kind UnicodeString | — |
cp Int32 | — |
GoodClient Boolean | — |
FormatLineCallerStack UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "253",
"version": "1",
"level": "200",
"task": "3",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cp": "0",
"GoodClient": "false",
"FormatLineCallerStack": ""
},
"message": ""
}
Event ID 254 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fStart Boolean | — |
Reason UInt32 | — |
csiErrorCode UInt32 | — |
rtcState Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "254",
"version": "2",
"level": "4",
"task": "13",
"opcode": "27",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fStart": "false",
"Reason": "0",
"csiErrorCode": "0",
"rtcState": "0"
},
"message": ""
}
Event ID 255 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Allowed Boolean | — |
Reason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "255",
"version": "2",
"level": "4",
"task": "13",
"opcode": "28",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Allowed": "false",
"Reason": "0"
},
"message": ""
}
Event ID 256 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fStart Boolean | — |
Reason UInt32 | — |
csiErrorCode UInt32 | — |
rtcState Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "256",
"version": "2",
"level": "4",
"task": "13",
"opcode": "29",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fStart": "false",
"Reason": "0",
"csiErrorCode": "0",
"rtcState": "0"
},
"message": ""
}
Event ID 257 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
MergeAllowed Boolean | — |
NoMergeReason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "257",
"version": "0",
"level": "5",
"task": "12",
"opcode": "77",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:30.231514300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"MergeAllowed": "true",
"NoMergeReason": " 0"
},
"message": ""
}
Event ID 258 —
Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | — |
currentScopeId UInt32 | — |
parentScopeId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "258",
"version": "0",
"level": "4",
"task": "7",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"currentScopeId": "0",
"parentScopeId": "0"
},
"message": ""
}
Event ID 259 —
Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | — |
currentScopeId UInt32 | — |
parentScopeId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "259",
"version": "0",
"level": "4",
"task": "7",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"currentScopeId": "0",
"parentScopeId": "0"
},
"message": ""
}
Event ID 260 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "260",
"version": "0",
"level": "4",
"task": "15",
"opcode": "33",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 261 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "261",
"version": "0",
"level": "4",
"task": "15",
"opcode": "34",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 262 —
Fields #
| Name | Description |
|---|---|
reason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "262",
"version": "0",
"level": "4",
"task": "15",
"opcode": "35",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": "0"
},
"message": ""
}
Event ID 263 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cSavesToMonitorForMovingAvg UInt16 | — |
MovingAvgThreshold UInt32 | — |
SaveSpike UInt32 | — |
SaveSpikeElapsedTimeThreshold UInt32 | — |
cGoodSavesToMonitor UInt16 | — |
GoodSaveTimeThreshold UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "263",
"version": "0",
"level": "4",
"task": "13",
"opcode": "30",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cSavesToMonitorForMovingAvg": "0",
"MovingAvgThreshold": "0",
"SaveSpike": "0",
"SaveSpikeElapsedTimeThreshold": "0",
"cGoodSavesToMonitor": "0",
"GoodSaveTimeThreshold": "0"
},
"message": ""
}
Event ID 264 —
Fields #
| Name | Description |
|---|---|
fDeepSleep Boolean | — |
TimeSinceLastInput-Msec UInt64 | — |
cMouse Int32 | — |
cTouch Int32 | — |
cKeyboard Int32 | — |
cIME Int32 | — |
cCommand Int32 | — |
cZoom Int32 | — |
cScroll Int32 | — |
cDM Int32 | — |
cPen Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "264",
"version": "1",
"level": "4",
"task": "33",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDeepSleep": "false",
"TimeSinceLastInput-Msec": "0",
"cMouse": "0",
"cTouch": "0",
"cKeyboard": "0",
"cIME": "0",
"cCommand": "0",
"cZoom": "0",
"cScroll": "0",
"cDM": "0",
"cPen": "0"
},
"message": ""
}
Event ID 265 —
Fields #
| Name | Description |
|---|---|
ReportID UInt64 | — |
IdleTaskName UnicodeString | — |
fRtcGroupIdle Boolean | — |
Bucket-0-50-Count UInt64 | — |
Bucket-50-100-Count UInt64 | — |
Bucket-100-150-Count UInt64 | — |
Bucket-150-200-Count UInt64 | — |
Bucket-200-350-Count UInt64 | — |
Bucket-350-500-Count UInt64 | — |
Bucket-500-1000-Count UInt64 | — |
Bucket-1000-2000-Count UInt64 | — |
Bucket-2000-5000-Count UInt64 | — |
Bucket-5000-Max-Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "265",
"version": "2",
"level": "4",
"task": "23",
"opcode": "15",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 266 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
FailureType UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "266",
"version": "1",
"level": "3",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"FailureType": ""
},
"message": ""
}
Event ID 267 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
FailureType UnicodeString | — |
cChildrenTree Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "267",
"version": "1",
"level": "3",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"FailureType": "",
"cChildrenTree": "0"
},
"message": ""
}
Event ID 268 —
Fields #
| Name | Description |
|---|---|
cbGzipUncompressed UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "268",
"version": "0",
"level": "4",
"task": "12",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cbGzipUncompressed": "0"
},
"message": ""
}
Event ID 269 —
Fields #
| Name | Description |
|---|---|
OpenId UInt32 | — |
nFib UInt16 | — |
nFibCurr UInt16 | — |
StreamName UnicodeString | — |
StreamSizeBytes Int64 | — |
fIsOCSB Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "269",
"version": "0",
"level": "4",
"task": "13",
"opcode": "31",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenId": "0",
"nFib": "0",
"nFibCurr": "0",
"StreamName": "",
"StreamSizeBytes": "0",
"fIsOCSB": "false"
},
"message": ""
}
Event ID 270 —
Fields #
| Name | Description |
|---|---|
OpenId UInt32 | — |
IndexIntoFibshared Int32 | — |
Cb UInt64 | — |
PercentOfTblStream Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "270",
"version": "1",
"level": "4",
"task": "13",
"opcode": "32",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenId": "0",
"IndexIntoFibshared": "0",
"Cb": "0",
"PercentOfTblStream": "0"
},
"message": ""
}
Event ID 271 —
Fields #
| Name | Description |
|---|---|
SaveInitiateTag UInt32 | — |
SqmDocId GUID | — |
SaveInitiateKind Int32 | — |
SaveAs Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "271",
"version": "0",
"level": "4",
"task": "13",
"opcode": "33",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveInitiateTag": "0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"SaveInitiateKind": "0",
"SaveAs": "false"
},
"message": ""
}
Event ID 272 —
Fields #
| Name | Description |
|---|---|
SaveInitiateKind Int32 | — |
SQMDocID GUID | — |
BkgndSaveLaunch Boolean | — |
FailureRetry Boolean | — |
HrCommitFileIO Int32 | — |
SaveOpResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "272",
"version": "0",
"level": "4",
"task": "13",
"opcode": "34",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveInitiateKind": "0",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"BkgndSaveLaunch": "false",
"FailureRetry": "false",
"HrCommitFileIO": "0",
"SaveOpResult": "0"
},
"message": ""
}
Event ID 273 —
Fields #
| Name | Description |
|---|---|
ContinueIdleReturn UnicodeString | — |
Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "273",
"version": "0",
"level": "4",
"task": "23",
"opcode": "16",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ContinueIdleReturn": "",
"Count": "0"
},
"message": ""
}
Event ID 274 —
Fields #
| Name | Description |
|---|---|
CancellationReason UnicodeString | — |
Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "274",
"version": "0",
"level": "4",
"task": "23",
"opcode": "17",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CancellationReason": "",
"Count": "0"
},
"message": ""
}
Event ID 275 —
Fields #
| Name | Description |
|---|---|
crsidBase UInt32 | — |
crsid0 UInt32 | — |
crsid1 UInt32 | — |
fBaseOver0 Boolean | — |
fBaseOver1 Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "275",
"version": "0",
"level": "4",
"task": "12",
"opcode": "79",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"crsidBase": "0",
"crsid0": "0",
"crsid1": "0",
"fBaseOver0": "false",
"fBaseOver1": "false"
},
"message": ""
}
Event ID 276 —
Fields #
| Name | Description |
|---|---|
Pdod UInt64 | — |
itcrr UInt64 | — |
citcrr UInt64 | — |
fit UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "276",
"version": "0",
"level": "4",
"task": "23",
"opcode": "18",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0",
"itcrr": "0",
"citcrr": "0",
"fit": "0"
},
"message": ""
}
Event ID 277 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pdod Pointer | — |
pct Int32 | — |
wkViewKind UInt32 | — |
fNoMargPgvw Boolean | — |
fAlwaysSaveEnabled Boolean | — |
edpiType UInt32 | — |
fTouch Boolean | — |
fIme Boolean | — |
msecUserInteractionTime UInt64 | — |
fTrackChanges Boolean | — |
pageCountBucket Int64 | — |
fPageCountInProgress Boolean | — |
wordCountBucket Int64 | — |
lineCountBucket Int64 | — |
paraCount Int64 | — |
charCountBucket Int64 | — |
charWsCountBucket Int64 | — |
rsidCount UInt32 | — |
lidEditMru UInt16 | — |
szEditLids UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "277",
"version": "5",
"level": "4",
"task": "38",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-14T21:57:27.600172200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0x140C002",
"pdod": "0x2CA3EA2C1D0",
"pct": "100",
"wkViewKind": " 2048",
"fNoMargPgvw": "false",
"fAlwaysSaveEnabled": "false",
"edpiType": " 2",
"fTouch": "false",
"fIme": "false",
"msecUserInteractionTime": "4175",
"fTrackChanges": "false",
"pageCountBucket": "3",
"fPageCountInProgress": "false",
"wordCountBucket": "79",
"lineCountBucket": "22",
"paraCount": "17",
"charCountBucket": "451",
"charWsCountBucket": "517",
"rsidCount": " 5",
"lidEditMru": "0x0",
"szEditLids": ""
},
"message": ""
}
Event ID 278 —
Fields #
| Name | Description |
|---|---|
extension UnicodeString | — |
ftyp Int32 | — |
fIsRetryOpen Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "278",
"version": "0",
"level": "4",
"task": "7",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"extension": "",
"ftyp": "0",
"fIsRetryOpen": "false"
},
"message": ""
}
Event ID 279 —
Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "279",
"version": "0",
"level": "4",
"task": "40",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0"
},
"message": ""
}
Event ID 280 —
Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "280",
"version": "0",
"level": "4",
"task": "40",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0"
},
"message": ""
}
Event ID 281 —
Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 | — |
ChangedEncoding Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "281",
"version": "0",
"level": "4",
"task": "40",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0",
"ChangedEncoding": "0"
},
"message": ""
}
Event ID 282 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "282",
"version": "0",
"level": "4",
"task": "40",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 283 —
Fields #
| Name | Description |
|---|---|
HROptional Int32 | — |
CodePage Int32 | — |
Confidence Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "283",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HROptional": "0",
"CodePage": "0",
"Confidence": "0"
},
"message": ""
}
Event ID 284 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "284",
"version": "0",
"level": "5",
"task": "3",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0"
},
"message": ""
}
Event ID 285 —
Fields #
| Name | Description |
|---|---|
hrResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "285",
"version": "0",
"level": "4",
"task": "7",
"opcode": "23",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hrResult": "0"
},
"message": ""
}
Event ID 286 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "286",
"version": "0",
"level": "5",
"task": "23",
"opcode": "19",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 287 —
Fields #
| Name | Description |
|---|---|
dusecInterval UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "287",
"version": "0",
"level": "5",
"task": "23",
"opcode": "20",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dusecInterval": "0"
},
"message": ""
}
Event ID 288 —
Fields #
| Name | Description |
|---|---|
xszName UnicodeString | — |
fRtcGroupIdle Boolean | — |
fResume Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "288",
"version": "0",
"level": "5",
"task": "23",
"opcode": "21",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"fResume": "false"
},
"message": ""
}
Event ID 289 —
Fields #
| Name | Description |
|---|---|
xszName UnicodeString | — |
fRtcGroupIdle Boolean | — |
fPause Boolean | — |
dusecTaskInterval UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "289",
"version": "0",
"level": "5",
"task": "23",
"opcode": "22",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"fPause": "false",
"dusecTaskInterval": "0"
},
"message": ""
}
Event ID 290 —
Fields #
| Name | Description |
|---|---|
xszName UnicodeString | — |
fRtcGroupIdle Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "290",
"version": "0",
"level": "5",
"task": "23",
"opcode": "23",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false"
},
"message": ""
}
Event ID 291 —
Fields #
| Name | Description |
|---|---|
xszName UnicodeString | — |
fRtcGroupIdle Boolean | — |
dusecTaskInterval UInt64 | — |
fMsgPresent Boolean | — |
dusecMsg UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "291",
"version": "0",
"level": "5",
"task": "23",
"opcode": "24",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"dusecTaskInterval": "0",
"fMsgPresent": "false",
"dusecMsg": "0"
},
"message": ""
}
Event ID 292 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "292",
"version": "0",
"level": "5",
"task": "23",
"opcode": "25",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 293 —
Fields #
| Name | Description |
|---|---|
fPause Boolean | — |
dusecTaskInterval UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "293",
"version": "0",
"level": "5",
"task": "23",
"opcode": "26",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPause": "false",
"dusecTaskInterval": "0"
},
"message": ""
}
Event ID 294 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
m_cInBatch Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "294",
"version": "1",
"level": "5",
"task": "4",
"opcode": "35",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"m_cInBatch": "0"
},
"message": ""
}
Event ID 295 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
m_cInBatch Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "295",
"version": "1",
"level": "5",
"task": "4",
"opcode": "36",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"m_cInBatch": "0"
},
"message": ""
}
Event ID 296 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "296",
"version": "0",
"level": "5",
"task": "4",
"opcode": "37",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 297 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "297",
"version": "0",
"level": "5",
"task": "4",
"opcode": "38",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 298 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "298",
"version": "1",
"level": "5",
"task": "4",
"opcode": "39",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0"
},
"message": ""
}
Event ID 299 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "299",
"version": "1",
"level": "5",
"task": "4",
"opcode": "40",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0"
},
"message": ""
}
Event ID 300 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "13",
"opcode": "35",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715344100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 301 —
Fields #
| Name | Description |
|---|---|
insloopID UInt32 | — |
pdod Pointer | — |
docKind UnicodeString | — |
cpFirst Int32 | — |
stateFrom UInt32 | — |
stateTo UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "301",
"version": "1",
"level": "4",
"task": "5",
"opcode": "20",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"insloopID": "0",
"pdod": "0x0",
"docKind": "",
"cpFirst": "0",
"stateFrom": "0",
"stateTo": "0"
},
"message": ""
}
Event ID 302 —
Fields #
| Name | Description |
|---|---|
WM UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "5",
"opcode": "21",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"WM": "0"
},
"message": ""
}
Event ID 303 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fDefaultViewSetting Boolean | — |
fViewStateSavingLogicUsed Boolean | — |
UserType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "1",
"opcode": "14",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fDefaultViewSetting": "false",
"fViewStateSavingLogicUsed": "false",
"UserType": "0"
},
"message": ""
}
Event ID 304 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "13",
"opcode": "36",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 305 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pcoa Pointer | — |
OptedIn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "13",
"opcode": "37",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcoa": "0x0",
"OptedIn": "false"
},
"message": ""
}
Event ID 306 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
diReason UInt16 | — |
AutoSaveState UInt32 | — |
AutoCreateEventHandler UInt32 | — |
idReturn Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "13",
"opcode": "38",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"diReason": "0",
"AutoSaveState": "0",
"AutoCreateEventHandler": "0",
"idReturn": "0"
},
"message": ""
}
Event ID 307 —
Fields #
| Name | Description |
|---|---|
fStart Boolean | — |
pioldoc Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "307",
"version": "0",
"level": "4",
"task": "12",
"opcode": "80",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 308 —
Fields #
| Name | Description |
|---|---|
AutorecoveryConfiguration UInt32 | — |
AutorecoveryInterval UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "13",
"opcode": "39",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AutorecoveryConfiguration": "0",
"AutorecoveryInterval": "0"
},
"message": ""
}
Event ID 309 —
Fields #
| Name | Description |
|---|---|
fDelayUpdateWwdToEndInsert Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "5",
"opcode": "22",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDelayUpdateWwdToEndInsert": "false"
},
"message": ""
}
Event ID 310 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "5",
"opcode": "23",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 311 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
fFallback Boolean | — |
saveActionId GUID | — |
pdod Pointer | — |
ftyp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "311",
"version": "1",
"level": "4",
"task": "13",
"opcode": "40",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.776402300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0x159F695",
"fFallback": "false",
"saveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"pdod": "0x1FF3A8B6000",
"ftyp": "14"
},
"message": ""
}
Event ID 312 —
Fields #
| Name | Description |
|---|---|
cmd Int32 | — |
saveActionIdOrig GUID | — |
fSaveAsAttempted Boolean | — |
fEmergencySave Boolean | — |
fBsiIsFirst Boolean | — |
pbsi Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "13",
"opcode": "41",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmd": "0",
"saveActionIdOrig": "{00000000-0000-0000-0000-000000000000}",
"fSaveAsAttempted": "false",
"fEmergencySave": "false",
"fBsiIsFirst": "false",
"pbsi": "0x0"
},
"message": ""
}
Event ID 313 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
DocumentSessionId UInt32 | — |
AutoSaveActive Boolean | — |
RtcActive Boolean | — |
AutoSaveEnabled Boolean | — |
RtcEnablementState UInt32 | — |
FlowEnabled Boolean | — |
AutoSaveDisallowReason UInt32 | — |
AutoSaveBlockingReason UInt32 | — |
CsiStatusOk Boolean | — |
CsiErrorCode UInt32 | — |
UserWantsAutoSave Boolean | — |
GroupPolicyPermitsAutoSave Boolean | — |
UpdateFlowDisabledReason UInt32 | — |
FEnableAutosaveWin32ODSP Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "313",
"version": "5",
"level": "4",
"task": "13",
"opcode": "42",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DocumentSessionId": "0",
"AutoSaveActive": "false",
"RtcActive": "false",
"AutoSaveEnabled": "false",
"RtcEnablementState": "0",
"FlowEnabled": "false",
"AutoSaveDisallowReason": "0",
"AutoSaveBlockingReason": "0",
"CsiStatusOk": "false",
"CsiErrorCode": "0",
"UserWantsAutoSave": "false",
"GroupPolicyPermitsAutoSave": "false",
"UpdateFlowDisabledReason": "0",
"FEnableAutosaveWin32ODSP": "false"
},
"message": ""
}
Event ID 314 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
message UInt32 | — |
TAppWndProcCloseReturn Int32 | — |
fInFreezeDryClose Boolean | — |
fInForceEndSession Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "314",
"version": "0",
"level": "4",
"task": "13",
"opcode": "43",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"message": "0",
"TAppWndProcCloseReturn": "0",
"fInFreezeDryClose": "false",
"fInForceEndSession": "false"
},
"message": ""
}
Event ID 315 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
ForegroundSave Boolean | — |
saveActionId GUID | — |
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "315",
"version": "0",
"level": "4",
"task": "13",
"opcode": "44",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"ForegroundSave": "false",
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0"
},
"message": ""
}
Event ID 316 —
Fields #
| Name | Description |
|---|---|
dmsecLastRenderedSinceEpoch UInt64 | — |
dmsecLastCharacterTurnAround UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "316",
"version": "0",
"level": "4",
"task": "5",
"opcode": "24",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecLastRenderedSinceEpoch": "0",
"dmsecLastCharacterTurnAround": "0"
},
"message": ""
}
Event ID 317 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pdim Pointer | — |
fEquation Boolean | — |
fTable Boolean | — |
selcurCpFirst Int64 | — |
selcurCpLim Int64 | — |
caParaCpFirst Int64 | — |
caParaCpLim Int64 | — |
m_cpInsert Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "317",
"version": "0",
"level": "4",
"task": "5",
"opcode": "25",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pdim": "0x0",
"fEquation": "false",
"fTable": "false",
"selcurCpFirst": "0",
"selcurCpLim": "0",
"caParaCpFirst": "0",
"caParaCpLim": "0",
"m_cpInsert": "0"
},
"message": ""
}
Event ID 318 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
drk UInt32 | — |
drkx_drck UInt32 | — |
pdodDk UInt32 | — |
fTxbx Boolean | — |
fMtxi Boolean | — |
fTable Boolean | — |
wkHwwd UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "318",
"version": "0",
"level": "2",
"task": "42",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"drk": "0",
"drkx_drck": "0",
"pdodDk": "0",
"fTxbx": "false",
"fMtxi": "false",
"fTable": "false",
"wkHwwd": "0"
},
"message": ""
}
Event ID 319 —
Fields #
| Name | Description |
|---|---|
pmwd Pointer | — |
dpiSys Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "319",
"version": "0",
"level": "4",
"task": "4",
"opcode": "41",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"dpiSys": "0"
},
"message": ""
}
Event ID 320 —
Fields #
| Name | Description |
|---|---|
pmwd Pointer | — |
dpiPerMonitor Int32 | — |
fAlreadySeen Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "320",
"version": "0",
"level": "4",
"task": "4",
"opcode": "42",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"dpiPerMonitor": "0",
"fAlreadySeen": "false"
},
"message": ""
}
Event ID 321 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pIPersisterTrans Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "321",
"version": "0",
"level": "4",
"task": "13",
"opcode": "45",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 322 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pIPersisterTrans Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "322",
"version": "0",
"level": "4",
"task": "13",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 323 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pIPersisterTrans Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "323",
"version": "0",
"level": "4",
"task": "13",
"opcode": "47",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 324 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
saveActionGuid GUID | — |
dwSrcTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "324",
"version": "0",
"level": "4",
"task": "13",
"opcode": "48",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"dwSrcTag": "0"
},
"message": ""
}
Event ID 325 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "325",
"version": "0",
"level": "4",
"task": "13",
"opcode": "49",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 326 —
Fields #
| Name | Description |
|---|---|
pDod Pointer | — |
runTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "326",
"version": "0",
"level": "5",
"task": "38",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0"
},
"message": ""
}
Event ID 327 —
Fields #
| Name | Description |
|---|---|
pDod Pointer | — |
runTime Int64 | — |
aggType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "327",
"version": "0",
"level": "5",
"task": "38",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0",
"aggType": "0"
},
"message": ""
}
Event ID 328 —
Fields #
| Name | Description |
|---|---|
pDod Pointer | — |
runTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "328",
"version": "0",
"level": "4",
"task": "38",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0"
},
"message": ""
}
Event ID 329 —
Fields #
| Name | Description |
|---|---|
runTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "329",
"version": "0",
"level": "4",
"task": "38",
"opcode": "14",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"runTime": "0"
},
"message": ""
}
Event ID 330 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "330",
"version": "0",
"level": "4",
"task": "13",
"opcode": "50",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 331 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "331",
"version": "0",
"level": "4",
"task": "13",
"opcode": "51",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 332 —
Fields #
| Name | Description |
|---|---|
fCompatCheckSuccess Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "332",
"version": "0",
"level": "4",
"task": "13",
"opcode": "52",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fCompatCheckSuccess": "false"
},
"message": ""
}
Event ID 333 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "333",
"version": "0",
"level": "4",
"task": "13",
"opcode": "53",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 334 —
Fields #
| Name | Description |
|---|---|
dypViewport UInt32 | — |
dypCard UInt32 | — |
pctRatioCardToViewport UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "334",
"version": "0",
"level": "4",
"task": "4",
"opcode": "43",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dypViewport": "0",
"dypCard": "0",
"pctRatioCardToViewport": "0"
},
"message": ""
}
Event ID 335 —
Fields #
| Name | Description |
|---|---|
formatDesc UnicodeString | — |
fIsEjectable Boolean | — |
fIsReadOnly Boolean | — |
fIsEncrypted Boolean | — |
fIsDirectory Boolean | — |
fIsSymbolicLink Boolean | — |
fileSaveType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "335",
"version": "0",
"level": "4",
"task": "13",
"opcode": "57",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"formatDesc": "",
"fIsEjectable": "false",
"fIsReadOnly": "false",
"fIsEncrypted": "false",
"fIsDirectory": "false",
"fIsSymbolicLink": "false",
"fileSaveType": "0"
},
"message": ""
}
Event ID 336 —
Fields #
| Name | Description |
|---|---|
picCount Int64 | — |
tocCount Int64 | — |
fBibliography Boolean | — |
pageNumberFieldCount Int64 | — |
citationCount Int64 | — |
chartCount Int64 | — |
ivyChartCount Int64 | — |
bkmkRefCount Int64 | — |
fHeader Boolean | — |
fUserHasEdited Boolean | — |
heading1Count Int64 | — |
heading2Count Int64 | — |
heading3Count Int64 | — |
fIsReadOnly Boolean | — |
smartArtCount Int64 | — |
heading1Length Int64 | — |
heading2Length Int64 | — |
heading3Length Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "336",
"version": "1",
"level": "4",
"task": "44",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"picCount": "0",
"tocCount": "0",
"fBibliography": "false",
"pageNumberFieldCount": "0",
"citationCount": "0",
"chartCount": "0",
"ivyChartCount": "0",
"bkmkRefCount": "0",
"fHeader": "false",
"fUserHasEdited": "false",
"heading1Count": "0",
"heading2Count": "0",
"heading3Count": "0",
"fIsReadOnly": "false",
"smartArtCount": "0",
"heading1Length": "0",
"heading2Length": "0",
"heading3Length": "0"
},
"message": ""
}
Event ID 337 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
piErrorOut Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "337",
"version": "0",
"level": "4",
"task": "46",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"piErrorOut": "0"
},
"message": ""
}
Event ID 338 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
fPidim0 UInt32 | — |
fPidim1 UInt32 | — |
fPidimB UInt32 | — |
fPidim0A UInt32 | — |
fPidim1A UInt32 | — |
fPidimBA UInt32 | — |
did0BEns UInt64 | — |
did1BEns UInt64 | — |
didBBEns UInt64 | — |
did0AEns UInt64 | — |
did1AEns UInt64 | — |
didBAEns UInt64 | — |
did0AAgr UInt64 | — |
did1AAgr UInt64 | — |
didBAAgr UInt64 | — |
fObjIn0 Boolean | — |
fObjIn1 Boolean | — |
fObjInB Boolean | — |
fVclok Boolean | — |
fBAncestOf0 Boolean | — |
fBAncestOf1 Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "338",
"version": "1",
"level": "2",
"task": "39",
"opcode": "48",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fPidim0": "0",
"fPidim1": "0",
"fPidimB": "0",
"fPidim0A": "0",
"fPidim1A": "0",
"fPidimBA": "0",
"did0BEns": "0",
"did1BEns": "0",
"didBBEns": "0",
"did0AEns": "0",
"did1AEns": "0",
"didBAEns": "0",
"did0AAgr": "0",
"did1AAgr": "0",
"didBAAgr": "0",
"fObjIn0": "false",
"fObjIn1": "false",
"fObjInB": "false",
"fVclok": "false",
"fBAncestOf0": "false",
"fBAncestOf1": "false"
},
"message": ""
}
Event ID 339 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
fPidim0 UInt32 | — |
fPidim1 UInt32 | — |
fPidimB UInt32 | — |
fPidim0A UInt32 | — |
fPidim1A UInt32 | — |
fPidimBA UInt32 | — |
did0BEns UInt64 | — |
did1BEns UInt64 | — |
didBBEns UInt64 | — |
did0AEns UInt64 | — |
did1AEns UInt64 | — |
didBAEns UInt64 | — |
did0AAgr UInt64 | — |
did1AAgr UInt64 | — |
didBAAgr UInt64 | — |
fObjIn0 Boolean | — |
fObjIn1 Boolean | — |
fObjInB Boolean | — |
fVclok Boolean | — |
fBAncestOf0 Boolean | — |
fBAncestOf1 Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "339",
"version": "1",
"level": "3",
"task": "39",
"opcode": "49",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fPidim0": "0",
"fPidim1": "0",
"fPidimB": "0",
"fPidim0A": "0",
"fPidim1A": "0",
"fPidimBA": "0",
"did0BEns": "0",
"did1BEns": "0",
"didBBEns": "0",
"did0AEns": "0",
"did1AEns": "0",
"didBAEns": "0",
"did0AAgr": "0",
"did1AAgr": "0",
"didBAAgr": "0",
"fObjIn0": "false",
"fObjIn1": "false",
"fObjInB": "false",
"fVclok": "false",
"fBAncestOf0": "false",
"fBAncestOf1": "false"
},
"message": ""
}
Event ID 340 —
Fields #
| Name | Description |
|---|---|
dirulEval Int32 | — |
lidKbd UInt16 | — |
lidInstall UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "340",
"version": "0",
"level": "4",
"task": "31",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dirulEval": "0",
"lidKbd": "0",
"lidInstall": "0"
},
"message": ""
}
Event ID 341 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fPrintMet Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "341",
"version": "0",
"level": "4",
"task": "7",
"opcode": "26",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fPrintMet": "false"
},
"message": ""
}
Event ID 342 —
Fields #
| Name | Description |
|---|---|
expectedJpnEraYear UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "342",
"version": "0",
"level": "4",
"task": "31",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"expectedJpnEraYear": "0"
},
"message": ""
}
Event ID 343 —
Fields #
| Name | Description |
|---|---|
actualJpnEraYear UInt32 | — |
gregorianYear UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "343",
"version": "0",
"level": "4",
"task": "31",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"actualJpnEraYear": "0",
"gregorianYear": "0"
},
"message": ""
}
Event ID 344 —
Fields #
| Name | Description |
|---|---|
FRet Boolean | — |
Pdod Pointer | — |
CersBefore UInt32 | — |
CersAfter UInt32 | — |
Cerdr UInt32 | — |
Cerwr UInt32 | — |
Cerfr UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "344",
"version": "0",
"level": "4",
"task": "13",
"opcode": "59",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FRet": "false",
"Pdod": "0x0",
"CersBefore": "0",
"CersAfter": "0",
"Cerdr": "0",
"Cerwr": "0",
"Cerfr": "0"
},
"message": ""
}
Event ID 345 —
Fields #
| Name | Description |
|---|---|
FSuccess Boolean | — |
Pdod Pointer | — |
ElapsedTimeMs UInt64 | — |
CsiErrorCode UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "345",
"version": "0",
"level": "4",
"task": "13",
"opcode": "60",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FSuccess": "false",
"Pdod": "0x0",
"ElapsedTimeMs": "0",
"CsiErrorCode": "0"
},
"message": ""
}
Event ID 346 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
CersBefore UInt32 | — |
CersAfter UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "346",
"version": "0",
"level": "4",
"task": "13",
"opcode": "61",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"CersBefore": "0",
"CersAfter": "0"
},
"message": ""
}
Event ID 347 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "347",
"version": "0",
"level": "4",
"task": "13",
"opcode": "62",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0"
},
"message": ""
}
Event ID 348 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "348",
"version": "0",
"level": "4",
"task": "13",
"opcode": "63",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0"
},
"message": ""
}
Event ID 349 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
fMergeExecuted Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "349",
"version": "0",
"level": "4",
"task": "13",
"opcode": "64",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"fMergeExecuted": "false"
},
"message": ""
}
Event ID 350 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "350",
"version": "0",
"level": "4",
"task": "7",
"opcode": "27",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 351 —
Fields #
| Name | Description |
|---|---|
fAccessibilityRunning Boolean | — |
wkWwd UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "4",
"opcode": "44",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAccessibilityRunning": "false",
"wkWwd": "0"
},
"message": ""
}
Event ID 352 —
Fields #
| Name | Description |
|---|---|
saveActionGuid GUID | — |
pdod Pointer | — |
fIgnore Boolean | — |
fBeginBatchDone Boolean | — |
fAttachKposDone Boolean | — |
fRevertDone Boolean | — |
fDoDestroy Boolean | — |
usecExecTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "49",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fIgnore": "false",
"fBeginBatchDone": "false",
"fAttachKposDone": "false",
"fRevertDone": "false",
"fDoDestroy": "false",
"usecExecTime": "0"
},
"message": ""
}
Event ID 353 —
Fields #
| Name | Description |
|---|---|
saveActionGuid GUID | — |
pdod Pointer | — |
fEndBatchDone Boolean | — |
fInvokeKposDone Boolean | — |
fReplayDone Boolean | — |
fDoDestroy Boolean | — |
fSubDocDeleted Boolean | — |
usecCreateTime Int64 | — |
usecDestroyTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "353",
"version": "0",
"level": "4",
"task": "49",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fEndBatchDone": "false",
"fInvokeKposDone": "false",
"fReplayDone": "false",
"fDoDestroy": "false",
"fSubDocDeleted": "false",
"usecCreateTime": "0",
"usecDestroyTime": "0"
},
"message": ""
}
Event ID 354 —
Fields #
| Name | Description |
|---|---|
usecNextSaveTime UInt64 | — |
usecMostRecentSaveEvent UInt64 | — |
m_dusecDynamicSaveCooldownInterval UInt64 | — |
usecNow UInt64 | — |
m_grfdysgLastAdjustedReason Int32 | — |
fOcsMode Boolean | — |
m_dusecDefaultSaveCooldownInterval UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "354",
"version": "0",
"level": "3",
"task": "51",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usecNextSaveTime": "0",
"usecMostRecentSaveEvent": "0",
"m_dusecDynamicSaveCooldownInterval": "0",
"usecNow": "0",
"m_grfdysgLastAdjustedReason": "0",
"fOcsMode": "false",
"m_dusecDefaultSaveCooldownInterval": "0"
},
"message": ""
}
Event ID 355 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "355",
"version": "0",
"level": "4",
"task": "7",
"opcode": "28",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1400 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1400",
"version": "0",
"level": "4",
"task": "21",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1401 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
cmdRet Int32 | — |
fDidSave Boolean | — |
fDidAutosave Boolean | — |
fConflict Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1401",
"version": "0",
"level": "4",
"task": "21",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0",
"cmdRet": "0",
"fDidSave": "false",
"fDidAutosave": "false",
"fConflict": "false"
},
"message": ""
}
Event ID 1402 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1402",
"version": "0",
"level": "4",
"task": "21",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1403 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1403",
"version": "0",
"level": "4",
"task": "21",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1404 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1404",
"version": "0",
"level": "4",
"task": "21",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1405 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1405",
"version": "0",
"level": "4",
"task": "21",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1406 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1406",
"version": "0",
"level": "4",
"task": "21",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1407 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1407",
"version": "0",
"level": "4",
"task": "21",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1408 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1408",
"version": "0",
"level": "4",
"task": "21",
"opcode": "18",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1409 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1409",
"version": "0",
"level": "4",
"task": "21",
"opcode": "19",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1410 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1410",
"version": "0",
"level": "4",
"task": "21",
"opcode": "20",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1411 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1411",
"version": "0",
"level": "4",
"task": "21",
"opcode": "21",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1412 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
sqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fCoAuthorable Boolean | — |
fOnBackgroundThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1412",
"version": "1",
"level": "4",
"task": "21",
"opcode": "22",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1413 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
fMergeRequired Boolean | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1413",
"version": "1",
"level": "4",
"task": "21",
"opcode": "23",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1414 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1414",
"version": "0",
"level": "4",
"task": "21",
"opcode": "24",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1415 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1415",
"version": "0",
"level": "4",
"task": "21",
"opcode": "25",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1416 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1416",
"version": "1",
"level": "4",
"task": "21",
"opcode": "26",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1417 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1417",
"version": "1",
"level": "4",
"task": "21",
"opcode": "28",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1418 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
PersisterType UInt32 | — |
fIsMerge Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1418",
"version": "2",
"level": "5",
"task": "21",
"opcode": "27",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0",
"PersisterType": "0",
"fIsMerge": "false"
},
"message": ""
}
Event ID 1419 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1419",
"version": "2",
"level": "4",
"task": "12",
"opcode": "67",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1420 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1420",
"version": "0",
"level": "4",
"task": "12",
"opcode": "68",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1421 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1421",
"version": "1",
"level": "4",
"task": "21",
"opcode": "31",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1422 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1422",
"version": "1",
"level": "4",
"task": "21",
"opcode": "32",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1423 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1423",
"version": "1",
"level": "4",
"task": "12",
"opcode": "73",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1424 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1424",
"version": "0",
"level": "5",
"task": "12",
"opcode": "69",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1425 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1425",
"version": "0",
"level": "5",
"task": "12",
"opcode": "70",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1426 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1426",
"version": "0",
"level": "4",
"task": "12",
"opcode": "74",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1427 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1427",
"version": "0",
"level": "4",
"task": "21",
"opcode": "37",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1428 —
Fields #
| Name | Description |
|---|---|
SaveActionId GUID | — |
Caller UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1428",
"version": "0",
"level": "4",
"task": "34",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"Caller": ""
},
"message": ""
}
Event ID 1429 —
Fields #
| Name | Description |
|---|---|
SaveActionId GUID | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1429",
"version": "0",
"level": "4",
"task": "34",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1430 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
sqmDocID GUID | — |
SqmDocLocation Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1430",
"version": "0",
"level": "4",
"task": "21",
"opcode": "46",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"SqmDocLocation": "0"
},
"message": ""
}
Event ID 1431 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pioldoc Pointer | — |
GuidFileId GUID | — |
sqmDocID GUID | — |
SqmDocLocation Int32 | — |
FirstEditId GUID | — |
CsiErrorCode UInt32 | — |
EditToUploadTimeMicroseconds UInt64 | — |
FirstRtcBrkEditId GUID | — |
RtcBrkEditToUploadTimeMicroseconds UInt64 | — |
fRtcEnabled Boolean | — |
fAutoSaveEnabled Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1431",
"version": "2",
"level": "4",
"task": "21",
"opcode": "47",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pioldoc": "0x0",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"SqmDocLocation": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"CsiErrorCode": "0",
"EditToUploadTimeMicroseconds": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"RtcBrkEditToUploadTimeMicroseconds": "0",
"fRtcEnabled": "false",
"fAutoSaveEnabled": "false"
},
"message": ""
}
Event ID 1432 —
Fields #
| Name | Description |
|---|---|
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1432",
"version": "0",
"level": "4",
"task": "12",
"opcode": "67",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1433 —
Fields #
| Name | Description |
|---|---|
result Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1433",
"version": "0",
"level": "4",
"task": "12",
"opcode": "78",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"result": "false"
},
"message": ""
}
Event ID 1434 —
Fields #
| Name | Description |
|---|---|
PropertyType UnicodeString | — |
fChoose0 Boolean | — |
fComparedWithBase Boolean | — |
Endpoint UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1434",
"version": "0",
"level": "4",
"task": "12",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PropertyType": "",
"fChoose0": "false",
"fComparedWithBase": "false",
"Endpoint": "0"
},
"message": ""
}
Event ID 1435 —
Fields #
| Name | Description |
|---|---|
dmsecSinceLastScheduleLoad UInt64 | — |
fPendingLoad Boolean | — |
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1435",
"version": "0",
"level": "4",
"task": "21",
"opcode": "58",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecSinceLastScheduleLoad": "0",
"fPendingLoad": "false",
"pdod": "0x0"
},
"message": ""
}
Event ID 1436 —
Fields #
| Name | Description |
|---|---|
IsSubscribed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1436",
"version": "0",
"level": "4",
"task": "21",
"opcode": "59",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsSubscribed": "false"
},
"message": ""
}
Event ID 1437 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
dk UInt32 | — |
iCmdDoDiffTag UInt32 | — |
ITap UInt32 | — |
TMI UInt8 | — |
fCancelDel Boolean | — |
itc UInt32 | — |
fMarkIns Boolean | — |
fMarkDel Boolean | — |
parid0CpCell UInt32 | — |
cpFirst UInt32 | — |
cpLim UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1437",
"version": "0",
"level": "4",
"task": "12",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": "0",
"iCmdDoDiffTag": "0",
"ITap": "0",
"TMI": "0",
"fCancelDel": "false",
"itc": "0",
"fMarkIns": "false",
"fMarkDel": "false",
"parid0CpCell": "0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1438 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dk UInt32 | — |
cpFirst UInt32 | — |
cpLim UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1438",
"version": "0",
"level": "4",
"task": "12",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dk": "0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1439 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
dk UInt32 | — |
parid UInt32 | — |
cpFirst UInt32 | — |
cpLim UInt32 | — |
isGroup Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1439",
"version": "0",
"level": "4",
"task": "12",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"dk": "0",
"parid": "0",
"cpFirst": "0",
"cpLim": "0",
"isGroup": "false"
},
"message": ""
}
Event ID 1440 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1440",
"version": "0",
"level": "4",
"task": "12",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1441 —
Fields #
| Name | Description |
|---|---|
ContentElement UInt32 | — |
CoauthUserAction UInt32 | — |
EditToSaveTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1441",
"version": "0",
"level": "4",
"task": "21",
"opcode": "63",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ContentElement": "0",
"CoauthUserAction": "0",
"EditToSaveTime": "0"
},
"message": ""
}
Event ID 1442 —
Fields #
| Name | Description |
|---|---|
iCmdDoDiffTag UInt32 | — |
scenarioType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1442",
"version": "0",
"level": "4",
"task": "12",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iCmdDoDiffTag": "0",
"scenarioType": "0"
},
"message": ""
}
Event ID 1456 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1456",
"version": "0",
"level": "5",
"task": "12",
"opcode": "71",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1457 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1457",
"version": "0",
"level": "5",
"task": "12",
"opcode": "72",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1458 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1458",
"version": "0",
"level": "5",
"task": "21",
"opcode": "29",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1459 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1459",
"version": "0",
"level": "5",
"task": "21",
"opcode": "30",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1460 —
Fields #
| Name | Description |
|---|---|
fStart Boolean | — |
fIsAlwaysSave Boolean | — |
SqmDocId GUID | — |
DocumentId UInt64 | — |
pioldoc Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1460",
"version": "2",
"level": "4",
"task": "21",
"opcode": "33",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"fIsAlwaysSave": "false",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"DocumentId": "0",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 1461 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
sqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fCoAuthorable Boolean | — |
fOnBackgroundThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1461",
"version": "2",
"level": "4",
"task": "21",
"opcode": "35",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1462 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
fMergeRequired Boolean | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1462",
"version": "2",
"level": "4",
"task": "21",
"opcode": "36",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1463 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
ftyp Int32 | — |
fSaveAs Boolean | — |
sqmDocLocation Int32 | — |
AuthorsCount Int32 | — |
fMultipleAuthors Boolean | — |
fCoAuthorable Boolean | — |
fOnBackgroundThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1463",
"version": "2",
"level": "4",
"task": "12",
"opcode": "75",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1464 —
Fields #
| Name | Description |
|---|---|
saveActionId GUID | — |
sqmDocId GUID | — |
fMergeRequired Boolean | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1464",
"version": "2",
"level": "4",
"task": "12",
"opcode": "76",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1465 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1465",
"version": "0",
"level": "4",
"task": "21",
"opcode": "38",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1466 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1466",
"version": "0",
"level": "4",
"task": "21",
"opcode": "39",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1467 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1467",
"version": "0",
"level": "4",
"task": "21",
"opcode": "40",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1468 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1468",
"version": "0",
"level": "4",
"task": "21",
"opcode": "41",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1469 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1469",
"version": "0",
"level": "4",
"task": "21",
"opcode": "42",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1470 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1470",
"version": "0",
"level": "4",
"task": "21",
"opcode": "43",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1471 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1471",
"version": "0",
"level": "4",
"task": "21",
"opcode": "44",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T22:56:23.802012800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "2584",
"thread_id": "9480"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1472 —
Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1472",
"version": "0",
"level": "4",
"task": "21",
"opcode": "45",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T22:56:23.802299500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "2584",
"thread_id": "9480"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "283"
},
"message": ""
}
Event ID 1473 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1473",
"version": "0",
"level": "4",
"task": "34",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 1474 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
Type Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1474",
"version": "0",
"level": "4",
"task": "34",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"Type": "0"
},
"message": ""
}
Event ID 1475 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
Type Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1475",
"version": "0",
"level": "4",
"task": "34",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"Type": "0"
},
"message": ""
}
Event ID 1476 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
SqmDocId GUID | — |
cIntervals UInt32 | — |
Bucket1-Min-Msec UInt64 | — |
Bucket2-Min-Msec UInt64 | — |
Bucket3-Min-Msec UInt64 | — |
Bucket4-Min-Msec UInt64 | — |
Bucket5-Min-Msec UInt64 | — |
Bucket6-Min-Msec UInt64 | — |
Bucket7-Min-Msec UInt64 | — |
Bucket8-Min-Msec UInt64 | — |
Bucket9-Min-Msec UInt64 | — |
Bucket10-Min-Msec UInt64 | — |
Bucket1-Count UInt64 | — |
Bucket2-Count UInt64 | — |
Bucket3-Count UInt64 | — |
Bucket4-Count UInt64 | — |
Bucket5-Count UInt64 | — |
Bucket6-Count UInt64 | — |
Bucket7-Count UInt64 | — |
Bucket8-Count UInt64 | — |
Bucket9-Count UInt64 | — |
Bucket10-Count UInt64 | — |
TopUnresponsiveDuration1-Msec UInt64 | — |
TopUnresponsiveDuration2-Msec UInt64 | — |
TopUnresponsiveDuration3-Msec UInt64 | — |
TopUnresponsiveDuration4-Msec UInt64 | — |
TopUnresponsiveDuration5-Msec UInt64 | — |
IStm UInt32 | — |
SqmDocLocation UInt32 | — |
AuthorCount UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1476",
"version": "1",
"level": "4",
"task": "34",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0",
"IStm": "0",
"SqmDocLocation": "0",
"AuthorCount": "0"
},
"message": ""
}
Event ID 1477 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1477",
"version": "0",
"level": "50",
"task": "34",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1478 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1478",
"version": "0",
"level": "50",
"task": "34",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1479 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pIOTransaction Pointer | — |
iotType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1479",
"version": "1",
"level": "4",
"task": "21",
"opcode": "48",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIOTransaction": "0x0",
"iotType": "0"
},
"message": ""
}
Event ID 1480 —
Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | — |
pIOTransaction Pointer | — |
iotType UInt32 | — |
iotFinalState UInt32 | — |
fMergeSucceeded Boolean | — |
fConflict Boolean | — |
fLoad Boolean | — |
fCoroutineLoadDone Boolean | — |
fCoroutineSaveDone Boolean | — |
fDelayedLoadOnCoroutine Boolean | — |
ElapsedTimeMicroseconds UInt64 | — |
persisterTransactionType UInt32 | — |
persisterType UInt32 | — |
strMeasurement UnicodeString | — |
fDocmCoauthEnabled Boolean | — |
ftyp UInt32 | — |
coauthDisableReason UInt32 | — |
exclusiveLockReason UInt32 | — |
saveInitiateKind | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1480",
"version": "7",
"level": "4",
"task": "21",
"opcode": "49",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIOTransaction": "0x0",
"iotType": "0",
"iotFinalState": "0",
"fMergeSucceeded": "false",
"fConflict": "false",
"fLoad": "false",
"fCoroutineLoadDone": "false",
"fCoroutineSaveDone": "false",
"fDelayedLoadOnCoroutine": "false",
"ElapsedTimeMicroseconds": "0",
"persisterTransactionType": "0",
"persisterType": "0",
"strMeasurement": "",
"fDocmCoauthEnabled": "false",
"ftyp": "0",
"coauthDisableReason": "0",
"exclusiveLockReason": "0",
"saveInitiateKind": "0"
},
"message": ""
}
Event ID 1481 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
docKind UInt32 | — |
pcoctxt Pointer | — |
iCmdDoDiffTag UInt32 | — |
parid0OfCpFirst UInt32 | — |
parid0OfCpLast UInt32 | — |
parid1OfCpFirst UInt32 | — |
parid1OfCpLast UInt32 | — |
pcob Pointer | — |
fChangeIn0 Boolean | — |
fChangeIn1 Boolean | — |
fInserted0 Boolean | — |
fInserted1 Boolean | — |
fDeleted0 Boolean | — |
fDeleted1 Boolean | — |
fDeletedPara0 Boolean | — |
fDeletedPara1 Boolean | — |
dcpChange0 UInt32 | — |
dcpChange1 UInt32 | — |
fConflictVisible Boolean | — |
cpFirst Int32 | — |
cpLim Int32 | — |
cpFirst1 Int32 | — |
cpLim1 Int32 | — |
cpLim0ForChange0 Int32 | — |
cpLim0ForChange1 Int32 | — |
parid0ForChange0 UInt32 | — |
parid0ForChange1 UInt32 | — |
dcpConflict Int32 | — |
cEntriesInResolvePane UInt32 | — |
cxchPara0 UInt32 | — |
elapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1481",
"version": "1",
"level": "4",
"task": "21",
"opcode": "50",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"docKind": "0",
"pcoctxt": "0x0",
"iCmdDoDiffTag": "0",
"parid0OfCpFirst": "0",
"parid0OfCpLast": "0",
"parid1OfCpFirst": "0",
"parid1OfCpLast": "0",
"pcob": "0x0",
"fChangeIn0": "false",
"fChangeIn1": "false",
"fInserted0": "false",
"fInserted1": "false",
"fDeleted0": "false",
"fDeleted1": "false",
"fDeletedPara0": "false",
"fDeletedPara1": "false",
"dcpChange0": "0",
"dcpChange1": "0",
"fConflictVisible": "false",
"cpFirst": "0",
"cpLim": "0",
"cpFirst1": "0",
"cpLim1": "0",
"cpLim0ForChange0": "0",
"cpLim0ForChange1": "0",
"parid0ForChange0": "0",
"parid0ForChange1": "0",
"dcpConflict": "0",
"cEntriesInResolvePane": "0",
"cxchPara0": "0",
"elapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1482 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
docKind UInt32 | — |
pcoctxt Pointer | — |
fChangeInLocalDoc Boolean | — |
dcpChange Int32 | — |
elapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1482",
"version": "0",
"level": "4",
"task": "21",
"opcode": "51",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"docKind": "0",
"pcoctxt": "0x0",
"fChangeInLocalDoc": "false",
"dcpChange": "0",
"elapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1483 —
Fields #
| Name | Description |
|---|---|
iotType UInt32 | — |
iotStatePrev UInt32 | — |
iotStateNext UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1483",
"version": "0",
"level": "5",
"task": "21",
"opcode": "52",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iotType": "0",
"iotStatePrev": "0",
"iotStateNext": "0"
},
"message": ""
}
Event ID 1484 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pioldoc Pointer | — |
fReadOnly Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1484",
"version": "0",
"level": "4",
"task": "21",
"opcode": "53",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pioldoc": "0x0",
"fReadOnly": "false"
},
"message": ""
}
Event ID 1485 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1485",
"version": "0",
"level": "4",
"task": "21",
"opcode": "54",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0"
},
"message": ""
}
Event ID 1486 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
guidSqmDocId GUID | — |
cpMac Int32 | — |
fAutoSaveOff Boolean | — |
fUserRequestedSave Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1486",
"version": "1",
"level": "4",
"task": "21",
"opcode": "55",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0",
"fAutoSaveOff": "false",
"fUserRequestedSave": "false"
},
"message": ""
}
Event ID 1487 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
guidSqmDocId GUID | — |
cpMac Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1487",
"version": "0",
"level": "4",
"task": "21",
"opcode": "56",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0"
},
"message": ""
}
Event ID 1488 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
guidSqmDocId GUID | — |
cpMac Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1488",
"version": "0",
"level": "4",
"task": "21",
"opcode": "57",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0"
},
"message": ""
}
Event ID 1489 —
Fields #
| Name | Description |
|---|---|
pioldoc Pointer | — |
pioldocOther Pointer | — |
iolcmd UInt32 | — |
iolcmdPrev UInt32 | — |
dwCallsite UInt32 | — |
fOnMainThread Boolean | — |
fValidThread Boolean | — |
hrBeginCmd Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1489",
"version": "0",
"level": "4",
"task": "21",
"opcode": "60",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pioldoc": "0x0",
"pioldocOther": "0x0",
"iolcmd": "0",
"iolcmdPrev": "0",
"dwCallsite": "0",
"fOnMainThread": "false",
"fValidThread": "false",
"hrBeginCmd": "0"
},
"message": ""
}
Event ID 1490 —
Fields #
| Name | Description |
|---|---|
pioldoc Pointer | — |
iolcmd UInt32 | — |
iolcmdPrev UInt32 | — |
dwCallsite UInt32 | — |
fOnMainThread Boolean | — |
fValidThread Boolean | — |
hrMisc Int32 | — |
hrRecordEvent Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1490",
"version": "0",
"level": "4",
"task": "21",
"opcode": "61",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pioldoc": "0x0",
"iolcmd": "0",
"iolcmdPrev": "0",
"dwCallsite": "0",
"fOnMainThread": "false",
"fValidThread": "false",
"hrMisc": "0",
"hrRecordEvent": "0"
},
"message": ""
}
Event ID 1491 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
iotType UInt32 | — |
persisterTransactionType UInt32 | — |
persisterType UInt32 | — |
iotState UInt32 | — |
fFocusLost Boolean | — |
saveInitiateKind Int32 | — |
ElapsedTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1491",
"version": "0",
"level": "4",
"task": "21",
"opcode": "62",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"iotType": "0",
"persisterTransactionType": "0",
"persisterType": "0",
"iotState": "0",
"fFocusLost": "false",
"saveInitiateKind": "0",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1492 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1492",
"version": "0",
"level": "5",
"task": "12",
"opcode": "82",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1493 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1493",
"version": "0",
"level": "5",
"task": "12",
"opcode": "81",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1494 —
Fields #
| Name | Description |
|---|---|
lcrTransitionIn Int32 → int | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1494",
"version": "0",
"level": "4",
"task": "21",
"opcode": "64",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lcrTransitionIn": "0"
},
"message": ""
}
Event ID 1495 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1495",
"version": "0",
"level": "5",
"task": "12",
"opcode": "83",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1496 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1496",
"version": "0",
"level": "5",
"task": "12",
"opcode": "84",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1497 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1497",
"version": "0",
"level": "5",
"task": "12",
"opcode": "85",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1498 —
Fields #
| Name | Description |
|---|---|
BrickTransitionType UInt32 → unsignedInt | — |
BrickSaveResult UInt32 → unsignedInt | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1498",
"version": "0",
"level": "5",
"task": "12",
"opcode": "86",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"BrickTransitionType": "0",
"BrickSaveResult": "0"
},
"message": ""
}
Event ID 1500 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1500",
"version": "0",
"level": "4",
"task": "25",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1501 —
Fields #
| Name | Description |
|---|---|
fSuccess Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1501",
"version": "0",
"level": "4",
"task": "25",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSuccess": "false"
},
"message": ""
}
Event ID 1502 —
Fields #
| Name | Description |
|---|---|
MainThread Boolean | — |
NumFontsInTable Int32 | — |
Reason UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1502",
"version": "1",
"level": "4",
"task": "25",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MainThread": "false",
"NumFontsInTable": "0",
"Reason": ""
},
"message": ""
}
Event ID 1503 —
Fields #
| Name | Description |
|---|---|
NumFontsInTable Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1503",
"version": "0",
"level": "4",
"task": "25",
"opcode": "13",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NumFontsInTable": "0"
},
"message": ""
}
Event ID 1504 —
Fields #
| Name | Description |
|---|---|
FontNameRequested UnicodeString | — |
CharSetRequested UInt32 | — |
FTCResolved Int32 | — |
FontNameResolved UnicodeString | — |
CharSetResolved UInt32 | — |
FTCResolvedFrom UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1504",
"version": "0",
"level": "4",
"task": "25",
"opcode": "14",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontNameRequested": "",
"CharSetRequested": "0",
"FTCResolved": "0",
"FontNameResolved": "",
"CharSetResolved": "0",
"FTCResolvedFrom": ""
},
"message": ""
}
Event ID 1505 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
CharSet UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1505",
"version": "0",
"level": "4",
"task": "25",
"opcode": "15",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"CharSet": "0"
},
"message": ""
}
Event ID 1506 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
CharSet UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1506",
"version": "0",
"level": "4",
"task": "25",
"opcode": "16",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"CharSet": "0"
},
"message": ""
}
Event ID 1507 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
pdodMain Pointer | — |
dk UInt32 | — |
cpStart Int64 | — |
cpLim Int64 | — |
CpMacPdod Int64 | — |
Lid UInt16 | — |
Style UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1507",
"version": "1",
"level": "4",
"task": "25",
"opcode": "17",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1508 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1508",
"version": "0",
"level": "4",
"task": "25",
"opcode": "18",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": ""
},
"message": ""
}
Event ID 1509 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1509",
"version": "0",
"level": "4",
"task": "25",
"opcode": "19",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1510 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
Fticm Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1510",
"version": "0",
"level": "5",
"task": "25",
"opcode": "20",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"Fticm": "0"
},
"message": ""
}
Event ID 1511 —
Fields #
| Name | Description |
|---|---|
NameFromLogfont UnicodeString | — |
FaceNameLoaded UnicodeString | — |
Fticm Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1511",
"version": "0",
"level": "4",
"task": "25",
"opcode": "21",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NameFromLogfont": "",
"FaceNameLoaded": "",
"Fticm": "0"
},
"message": ""
}
Event ID 1512 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1512",
"version": "0",
"level": "4",
"task": "25",
"opcode": "22",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1513 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
FontSize UInt32 | — |
pdodMain Pointer | — |
dk UInt32 | — |
cpStart Int64 | — |
cpLim Int64 | — |
CpMacPdod Int64 | — |
Lid UInt16 | — |
Style UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1513",
"version": "0",
"level": "4",
"task": "25",
"opcode": "23",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"FontSize": "0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1514 —
Fields #
| Name | Description |
|---|---|
FontSize Float | — |
pdodMain Pointer | — |
dk UInt32 | — |
cpStart Int64 | — |
cpLim Int64 | — |
CpMacPdod Int64 | — |
Lid UInt16 | — |
Style UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1514",
"version": "0",
"level": "4",
"task": "25",
"opcode": "24",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontSize": "0.0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1515 —
Fields #
| Name | Description |
|---|---|
FontNameAscii UnicodeString | — |
FontNameFE UnicodeString | — |
FontNameOther UnicodeString | — |
FontNameBi UnicodeString | — |
FontSizeAscii Float | — |
FontSizeBi Float | — |
pdodMain Pointer | — |
dk UInt32 | — |
cpStart Int64 | — |
cpLim Int64 | — |
CpMacPdod Int64 | — |
Lid UInt16 | — |
Style UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1515",
"version": "0",
"level": "4",
"task": "25",
"opcode": "25",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontNameAscii": "",
"FontNameFE": "",
"FontNameOther": "",
"FontNameBi": "",
"FontSizeAscii": "0.0",
"FontSizeBi": "0.0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1516 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1516",
"version": "0",
"level": "4",
"task": "25",
"opcode": "26",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 1517 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
FontSize Float | — |
pdodMain Pointer | — |
CharacterCount Int64 | — |
WordCount Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1517",
"version": "0",
"level": "4",
"task": "25",
"opcode": "27",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"FontSize": "0.0",
"pdodMain": "0x0",
"CharacterCount": "0",
"WordCount": "0"
},
"message": ""
}
Event ID 1518 —
Fields #
| Name | Description |
|---|---|
EmbedLicenseType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1518",
"version": "0",
"level": "4",
"task": "25",
"opcode": "28",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"EmbedLicenseType": "0"
},
"message": ""
}
Event ID 1519 —
Fields #
| Name | Description |
|---|---|
NameFromLogfont UnicodeString | — |
FaceNameLoaded UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1519",
"version": "0",
"level": "5",
"task": "25",
"opcode": "29",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NameFromLogfont": "",
"FaceNameLoaded": ""
},
"message": ""
}
Event ID 1520 —
Fields #
| Name | Description |
|---|---|
FontName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1520",
"version": "0",
"level": "5",
"task": "25",
"opcode": "30",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": ""
},
"message": ""
}
Event ID 1521 —
Fields #
| Name | Description |
|---|---|
ErrorKind UInt16 | — |
GetLastError UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1521",
"version": "0",
"level": "5",
"task": "25",
"opcode": "32",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ErrorKind": "0",
"GetLastError": "0"
},
"message": ""
}
Event ID 1522 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1522",
"version": "0",
"level": "5",
"task": "25",
"opcode": "33",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1600 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1600",
"version": "1",
"level": "4",
"task": "24",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1601 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1601",
"version": "1",
"level": "4",
"task": "24",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1602 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1602",
"version": "0",
"level": "4",
"task": "24",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1603 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1603",
"version": "0",
"level": "4",
"task": "24",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1604 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1604",
"version": "0",
"level": "4",
"task": "24",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1605 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1605",
"version": "0",
"level": "4",
"task": "24",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1606 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1606",
"version": "1",
"level": "4",
"task": "24",
"opcode": "16",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1607 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1607",
"version": "1",
"level": "4",
"task": "24",
"opcode": "17",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1608 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1608",
"version": "0",
"level": "4",
"task": "24",
"opcode": "18",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1609 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1609",
"version": "0",
"level": "4",
"task": "24",
"opcode": "19",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1610 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1610",
"version": "0",
"level": "4",
"task": "24",
"opcode": "20",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1611 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1611",
"version": "0",
"level": "4",
"task": "24",
"opcode": "21",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1612 —
Fields #
| Name | Description |
|---|---|
correlationId Int32 | — |
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1612",
"version": "1",
"level": "4",
"task": "24",
"opcode": "22",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469343100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationId": "72",
"logId": " 0"
},
"message": ""
}
Event ID 1613 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
correlationId Int32 | — |
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1613",
"version": "1",
"level": "4",
"task": "24",
"opcode": "23",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0",
"correlationId": "0",
"logId": "0"
},
"message": ""
}
Event ID 1614 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1614",
"version": "0",
"level": "4",
"task": "24",
"opcode": "24",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1615 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1615",
"version": "0",
"level": "4",
"task": "24",
"opcode": "25",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1616 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1616",
"version": "0",
"level": "4",
"task": "24",
"opcode": "26",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1617 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1617",
"version": "0",
"level": "4",
"task": "24",
"opcode": "27",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1618 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1618",
"version": "0",
"level": "4",
"task": "24",
"opcode": "28",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1619 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1619",
"version": "0",
"level": "4",
"task": "24",
"opcode": "29",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1620 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1620",
"version": "0",
"level": "4",
"task": "24",
"opcode": "30",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1621 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1621",
"version": "0",
"level": "4",
"task": "24",
"opcode": "31",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1622 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1622",
"version": "0",
"level": "4",
"task": "24",
"opcode": "32",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1623 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
kmcHandled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1623",
"version": "0",
"level": "4",
"task": "24",
"opcode": "33",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1624 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
correlationIdStart Int32 | — |
correlationIdEnd Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1624",
"version": "1",
"level": "4",
"task": "24",
"opcode": "34",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:49.773274900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "3080"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x7D345E",
"correlationIdStart": "32",
"correlationIdEnd": "32"
},
"message": ""
}
Event ID 1625 —
Fields #
| Name | Description |
|---|---|
messagePostDelayMs Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1625",
"version": "0",
"level": "4",
"task": "24",
"opcode": "35",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469189800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"messagePostDelayMs": "0"
},
"message": ""
}
Event ID 1626 —
Fields #
| Name | Description |
|---|---|
correlationIdStart Int32 | — |
correlationIdEnd Int32 | — |
fAlwaysSaveEnabledAndOn Boolean | — |
fWetChangesInDocument Boolean | — |
fDuringOrAfterRecentAutoSave Boolean | — |
fInOcsMode Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1626",
"version": "2",
"level": "4",
"task": "24",
"opcode": "36",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.473815900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationIdStart": "72",
"correlationIdEnd": "72",
"fAlwaysSaveEnabledAndOn": "false",
"fWetChangesInDocument": "false",
"fDuringOrAfterRecentAutoSave": "false",
"fInOcsMode": "false"
},
"message": ""
}
Event ID 1627 —
Fields #
| Name | Description |
|---|---|
dmsecTypingTime UInt64 | — |
dmsecMessagePostDelay UInt64 | — |
dmsecTypedChar UInt64 | — |
dmsecAirspaceRender UInt64 | — |
DocumentId UInt64 | — |
SqmDocId GUID | — |
DocKind UnicodeString | — |
SrcDocKind UnicodeString | — |
fAlwaysSaveEnabledAndOn Boolean | — |
fWetChangesInDocument Boolean | — |
fDuringOrAfterRecentAutoSave Boolean | — |
fInOcsMode Boolean | — |
fInWPM | — |
fChunking Boolean | — |
fUIMCharacter Boolean | — |
Pdod Pointer | — |
Lid UInt16 | — |
fShaping Boolean | — |
fAcetate Boolean | — |
fAbdkRMAtn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1627",
"version": "4",
"level": "4",
"task": "5",
"opcode": "26",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:49.773288200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "3080"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecTypingTime": "16",
"dmsecMessagePostDelay": "0",
"dmsecTypedChar": "10",
"dmsecAirspaceRender": "8",
"DocumentId": "1346715326",
"SqmDocId": "{b4541f5c-1e9a-4fef-95d1-6c3c3b192773}",
"DocKind": "Doc",
"SrcDocKind": "Nil Pdod",
"fAlwaysSaveEnabledAndOn": "false",
"fWetChangesInDocument": "false",
"fDuringOrAfterRecentAutoSave": "false",
"fInOcsMode": "false",
"fInWPM": "false",
"fChunking": "false",
"fUIMCharacter": "false",
"Pdod": "0x1FF3C67AD60",
"Lid": "1033",
"fShaping": "true",
"fAcetate": "false",
"fAbdkRMAtn": "false"
},
"message": ""
}
Event ID 1700 —
Fields #
| Name | Description |
|---|---|
softKeyboardIsLocked Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1700",
"version": "0",
"level": "4",
"task": "26",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"softKeyboardIsLocked": "false"
},
"message": ""
}
Event ID 1701 —
Fields #
| Name | Description |
|---|---|
touchX Int32 | — |
touchY Int32 | — |
grippyX Int32 | — |
grippyY Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1701",
"version": "0",
"level": "4",
"task": "27",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"touchX": "0",
"touchY": "0",
"grippyX": "0",
"grippyY": "0"
},
"message": ""
}
Event ID 1702 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1702",
"version": "0",
"level": "4",
"task": "27",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1703 —
Fields #
| Name | Description |
|---|---|
distance Double | — |
newTouchX Int32 | — |
newTouchY Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1703",
"version": "0",
"level": "4",
"task": "27",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"distance": "0.0",
"newTouchX": "0",
"newTouchY": "0"
},
"message": ""
}
Event ID 1704 —
Fields #
| Name | Description |
|---|---|
cpStart Int64 | — |
cpLim Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1704",
"version": "0",
"level": "5",
"task": "27",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpStart": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1705 —
Fields #
| Name | Description |
|---|---|
CP Int32 | — |
Double Tap Boolean | — |
Nested Level (itap) Int32 | — |
Max Rows Int32 | — |
Max Columns Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1705",
"version": "1",
"level": "4",
"task": "29",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0",
"Double Tap": "false",
"Nested Level (itap)": "0",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1706 —
Fields #
| Name | Description |
|---|---|
Index Int32 | — |
Valid Row Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1706",
"version": "0",
"level": "4",
"task": "29",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0",
"Valid Row": "false"
},
"message": ""
}
Event ID 1707 —
Fields #
| Name | Description |
|---|---|
CP Int32 | — |
Double Tap Boolean | — |
Nested Level (itap) Int32 | — |
Max Rows Int32 | — |
Max Columns Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1707",
"version": "1",
"level": "4",
"task": "29",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0",
"Double Tap": "false",
"Nested Level (itap)": "0",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1708 —
Fields #
| Name | Description |
|---|---|
Index Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1708",
"version": "0",
"level": "4",
"task": "29",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0"
},
"message": ""
}
Event ID 1709 —
Fields #
| Name | Description |
|---|---|
Double Tap Boolean | — |
Max Rows Int32 | — |
Max Columns Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1709",
"version": "1",
"level": "4",
"task": "29",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Double Tap": "false",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1710 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1710",
"version": "0",
"level": "4",
"task": "29",
"opcode": "15",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1711 —
Fields #
| Name | Description |
|---|---|
PointerId UInt32 | — |
CanDM Int32 | — |
UITEH Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1711",
"version": "0",
"level": "4",
"task": "36",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PointerId": "0",
"CanDM": "0",
"UITEH": "0"
},
"message": ""
}
Event ID 1712 —
Fields #
| Name | Description |
|---|---|
Gesture Int32 | — |
PointerId UInt32 | — |
InteractionState UInt32 | — |
PointX Int32 | — |
PointY Int32 | — |
DeltaX Int32 | — |
DeltaY Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1712",
"version": "0",
"level": "4",
"task": "36",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Gesture": "0",
"PointerId": "0",
"InteractionState": "0",
"PointX": "0",
"PointY": "0",
"DeltaX": "0",
"DeltaY": "0"
},
"message": ""
}
Event ID 1713 —
Fields #
| Name | Description |
|---|---|
Gesture Int32 | — |
PointerId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1713",
"version": "1",
"level": "4",
"task": "36",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Gesture": "0",
"PointerId": "0"
},
"message": ""
}
Event ID 1714 —
Fields #
| Name | Description |
|---|---|
InputType UInt32 | — |
PointerId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1714",
"version": "0",
"level": "4",
"task": "36",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InputType": "0",
"PointerId": "0"
},
"message": ""
}
Event ID 1715 —
Fields #
| Name | Description |
|---|---|
teh UInt32 | — |
InputType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1715",
"version": "0",
"level": "4",
"task": "36",
"opcode": "15",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"teh": "0",
"InputType": "0"
},
"message": ""
}
Event ID 1716 —
Fields #
| Name | Description |
|---|---|
uiteh UInt32 | — |
InputType UInt32 | — |
PointerId UInt32 | — |
CanDM Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1716",
"version": "0",
"level": "4",
"task": "36",
"opcode": "16",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"uiteh": "0",
"InputType": "0",
"PointerId": "0",
"CanDM": "0"
},
"message": ""
}
Event ID 1800 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1800",
"version": "0",
"level": "4",
"task": "28",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1801 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1801",
"version": "0",
"level": "4",
"task": "28",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1900 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1900",
"version": "0",
"level": "5",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1901 —
Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | — |
m_sppts Boolean | — |
m_sppts.bstrText UnicodeString | — |
m_spptcc Boolean | — |
m_spptcc.segid UInt32 | — |
m_spptcc.iseg UInt32 | — |
m_spptcc.dcpRelative UInt64 | — |
m_spptcc.dcpSegmentStart UInt64 | — |
m_spptcc.dcpSegmentEnd UInt64 | — |
m_spptcc.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1901",
"version": "0",
"level": "5",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1902 —
Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | — |
m_sppts Boolean | — |
m_sppts.bstrText UnicodeString | — |
m_spptcc Boolean | — |
m_spptcc.segid UInt32 | — |
m_spptcc.iseg UInt32 | — |
m_spptcc.dcpRelative UInt64 | — |
m_spptcc.dcpSegmentStart UInt64 | — |
m_spptcc.dcpSegmentEnd UInt64 | — |
m_spptcc.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1902",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1903 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
dcpShift UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1903",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1904 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
dcpShift UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1904",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1905 —
Fields #
| Name | Description |
|---|---|
ulRelativeOffset UInt64 | — |
lShift Int64 | — |
ulSegmentStart UInt64 | — |
ulSegmentEnd UInt64 | — |
fClearCache Boolean | — |
bstrText UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1905",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ulRelativeOffset": "0",
"lShift": "0",
"ulSegmentStart": "0",
"ulSegmentEnd": "0",
"fClearCache": "false",
"bstrText": ""
},
"message": ""
}
Event ID 1906 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1906",
"version": "0",
"level": "5",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1907 —
Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | — |
m_sppts Boolean | — |
m_sppts.bstrText UnicodeString | — |
m_spptcc Boolean | — |
m_spptcc.segid UInt32 | — |
m_spptcc.iseg UInt32 | — |
m_spptcc.dcpRelative UInt64 | — |
m_spptcc.dcpSegmentStart UInt64 | — |
m_spptcc.dcpSegmentEnd UInt64 | — |
m_spptcc.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1907",
"version": "0",
"level": "5",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1908 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
spSegment.segid UInt32 | — |
spSegment.iseg UInt32 | — |
spSegment.dcpRelative UInt64 | — |
spSegment.dcpSegmentStart UInt64 | — |
spSegment.dcpSegmentEnd UInt64 | — |
spSegment.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1908",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1909 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
m_vecsegmentSize UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1909",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1910 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1910",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1911 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
spSegment.segid UInt32 | — |
spSegment.iseg UInt32 | — |
spSegment.dcpRelative UInt64 | — |
spSegment.dcpSegmentStart UInt64 | — |
spSegment.dcpSegmentEnd UInt64 | — |
spSegment.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1911",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1912 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
m_vecsegmentSize UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1912",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1913 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1913",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1914 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
spSegment.segid UInt32 | — |
spSegment.iseg UInt32 | — |
spSegment.dcpRelative UInt64 | — |
spSegment.dcpSegmentStart UInt64 | — |
spSegment.dcpSegmentEnd UInt64 | — |
spSegment.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1914",
"version": "0",
"level": "5",
"task": "35",
"opcode": "15",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1915 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1915",
"version": "0",
"level": "5",
"task": "35",
"opcode": "15",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1916 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
spSegment.segid UInt32 | — |
spSegment.iseg UInt32 | — |
spSegment.dcpRelative UInt64 | — |
spSegment.dcpSegmentStart UInt64 | — |
spSegment.dcpSegmentEnd UInt64 | — |
spSegment.dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1916",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1917 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
m_vecsegmentSize UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1917",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1918 —
Fields #
| Name | Description |
|---|---|
segid UInt32 | — |
iseg UInt32 | — |
dcpRelative UInt64 | — |
dcpSegmentStart UInt64 | — |
dcpSegmentEnd UInt64 | — |
dcpShift Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1918",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1919 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1919",
"version": "0",
"level": "5",
"task": "35",
"opcode": "17",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0"
},
"message": ""
}
Event ID 1920 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
m_vecsegmentSize UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1920",
"version": "0",
"level": "5",
"task": "35",
"opcode": "17",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1921 —
Fields #
| Name | Description |
|---|---|
index UInt32 | — |
segid UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1921",
"version": "0",
"level": "5",
"task": "35",
"opcode": "18",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"index": "0",
"segid": "0"
},
"message": ""
}
Event ID 1922 —
Fields #
| Name | Description |
|---|---|
iseg UInt32 | — |
spSegment.segid UInt32 | — |
spSegment.iseg UInt32 | — |
spSegment.dcpRelative UInt64 | — |
spSegment.dcpSegmentStart UInt64 | — |
spSegment.dcpSegmentEnd UInt64 | — |
spSegment.dcpShift Int64 | — |
dcpShift UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1922",
"version": "0",
"level": "5",
"task": "35",
"opcode": "19",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1923 —
Fields #
| Name | Description |
|---|---|
ullBmkId UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1923",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ullBmkId": "0"
},
"message": ""
}
Event ID 1924 —
Fields #
| Name | Description |
|---|---|
count Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1924",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1925 —
Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | — |
cpBmkEnd Int32 | — |
ibkf Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1925",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1926 —
Fields #
| Name | Description |
|---|---|
tempUullSegmentId UInt64 | — |
ullSegmentId UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1926",
"version": "0",
"level": "5",
"task": "35",
"opcode": "21",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tempUullSegmentId": "0",
"ullSegmentId": "0"
},
"message": ""
}
Event ID 1927 —
Fields #
| Name | Description |
|---|---|
count Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1927",
"version": "0",
"level": "5",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1928 —
Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | — |
cpBmkEnd Int32 | — |
ibkf Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1928",
"version": "0",
"level": "100",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1929 —
Fields #
| Name | Description |
|---|---|
count Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1929",
"version": "0",
"level": "5",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1930 —
Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | — |
cpBmkEnd Int32 | — |
ibkf Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1930",
"version": "0",
"level": "100",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1931 —
Fields #
| Name | Description |
|---|---|
count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1931",
"version": "0",
"level": "5",
"task": "35",
"opcode": "23",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1932 —
Fields #
| Name | Description |
|---|---|
timeSpent UInt64 | — |
loopIterations UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1932",
"version": "1",
"level": "5",
"task": "35",
"opcode": "24",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"timeSpent": "0",
"loopIterations": "0"
},
"message": ""
}
Event ID 1933 —
Fields #
| Name | Description |
|---|---|
context UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1933",
"version": "0",
"level": "5",
"task": "35",
"opcode": "25",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"context": ""
},
"message": ""
}
Event ID 1934 —
Fields #
| Name | Description |
|---|---|
context UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1934",
"version": "0",
"level": "5",
"task": "35",
"opcode": "25",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"context": ""
},
"message": ""
}
Event ID 2000 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2028",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2029 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2029",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2030 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2030",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2031 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2031",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2032 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2060",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2061 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2061",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2062 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2062",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2063 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2063",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2064 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2092",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2093 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2093",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2094 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2094",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2095 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2095",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2500 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2500",
"version": "0",
"level": "4",
"task": "4",
"opcode": "27",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2501 —
Fields #
| Name | Description |
|---|---|
ReRegisterSucceeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2501",
"version": "0",
"level": "4",
"task": "7",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReRegisterSucceeded": "false"
},
"message": ""
}
Event ID 2502 —
Fields #
| Name | Description |
|---|---|
NumDocs Int32 | — |
Virtual desktop GUID UnicodeString | — |
Instance UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2502",
"version": "0",
"level": "5",
"task": "37",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NumDocs": "0",
"Virtual desktop GUID": "",
"Instance": ""
},
"message": ""
}
Event ID 3500 —
Fields #
| Name | Description |
|---|---|
pidim Pointer | — |
fMother Boolean | — |
docParidsStateOpen UInt32 | — |
docParidsStateEnsureParids UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3500",
"version": "1",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pidim": "0x0",
"fMother": "false",
"docParidsStateOpen": "0",
"docParidsStateEnsureParids": "0"
},
"message": ""
}
Event ID 3501 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pcaso Pointer | — |
pcoa Pointer | — |
fIsInCsiTransactedStreamMode Boolean | — |
fIsSaveAs Boolean | — |
fSourceIsServer Boolean | — |
fTargetIsServer Boolean | — |
fListenerRegistrationFailed Boolean | — |
fDocumentContentWasNull Boolean | — |
persisterTypeReplaced UInt32 | — |
persisterTypeConstructed UInt32 | — |
dwTagCaller UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3501",
"version": "0",
"level": "4",
"task": "13",
"opcode": "54",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcaso": "0x0",
"pcoa": "0x0",
"fIsInCsiTransactedStreamMode": "false",
"fIsSaveAs": "false",
"fSourceIsServer": "false",
"fTargetIsServer": "false",
"fListenerRegistrationFailed": "false",
"fDocumentContentWasNull": "false",
"persisterTypeReplaced": "0",
"persisterTypeConstructed": "0",
"dwTagCaller": "0"
},
"message": ""
}
Event ID 3502 —
Fields #
| Name | Description |
|---|---|
Lid UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3502",
"version": "0",
"level": "4",
"task": "43",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Lid": "0"
},
"message": ""
}
Event ID 3503 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pioldoc Pointer | — |
previousSupportedLocations UInt32 | — |
newSupportedLocations UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3503",
"version": "0",
"level": "4",
"task": "7",
"opcode": "24",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pioldoc": "0x0",
"previousSupportedLocations": "0",
"newSupportedLocations": "0"
},
"message": ""
}
Event ID 3504 —
Fields #
| Name | Description |
|---|---|
fOnMainThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3504",
"version": "0",
"level": "4",
"task": "13",
"opcode": "55",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fOnMainThread": "false"
},
"message": ""
}
Event ID 3505 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pmwd Pointer | — |
ac Int32 | — |
fAutosaveActiveAfterFailure Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3505",
"version": "0",
"level": "3",
"task": "13",
"opcode": "56",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pmwd": "0x0",
"ac": "0",
"fAutosaveActiveAfterFailure": "false"
},
"message": ""
}
Event ID 3506 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
csierrOnRetry UInt32 | — |
fOnFreeRunningThread Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3506",
"version": "0",
"level": "4",
"task": "13",
"opcode": "58",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"csierrOnRetry": "0",
"fOnFreeRunningThread": "false"
},
"message": ""
}
Event ID 3507 —
Fields #
| Name | Description |
|---|---|
dwtag UInt32 | — |
dwtagLast UInt32 | — |
dullDirtyToolbarsMs UInt64 | — |
fToolbarsDirty Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3507",
"version": "0",
"level": "5",
"task": "33",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwtag": "0",
"dwtagLast": "0",
"dullDirtyToolbarsMs": "0",
"fToolbarsDirty": "false"
},
"message": ""
}
Event ID 3508 —
Fields #
| Name | Description |
|---|---|
JsonData UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3508",
"version": "0",
"level": "4",
"task": "23",
"opcode": "27",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"JsonData": ""
},
"message": ""
}
Event ID 3509 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pioldoc Pointer | — |
previousDisableTempFileLocations UInt32 | — |
newDisableTempFileLocations UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3509",
"version": "0",
"level": "4",
"task": "7",
"opcode": "25",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pioldoc": "0x0",
"previousDisableTempFileLocations": "0",
"newDisableTempFileLocations": "0"
},
"message": ""
}
Event ID 3581 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3581",
"version": "0",
"level": "4",
"task": "48",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4001 —
Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4001",
"version": "0",
"level": "4",
"task": "50",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0"
},
"message": ""
}
Event ID 4002 —
Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 | — |
EventName UnicodeString | — |
SamplingPolicy UInt32 | — |
DiagnosticLevel UInt32 | — |
DataCategories UInt32 | — |
AggregationMode UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4002",
"version": "0",
"level": "4",
"task": "50",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0",
"EventName": "",
"SamplingPolicy": "0",
"DiagnosticLevel": "0",
"DataCategories": "0",
"AggregationMode": "0"
},
"message": ""
}
Event ID 4003 —
Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 | — |
LogEventResultEndState UnicodeString | — |
ErrorCode Int32 | — |
ResultType UnicodeString | — |
IsExpected Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4003",
"version": "0",
"level": "4",
"task": "50",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0",
"LogEventResultEndState": "",
"ErrorCode": "0",
"ResultType": "",
"IsExpected": "false"
},
"message": ""
}
Event ID 4004 —
Fields #
| Name | Description |
|---|---|
DataPayloadTarget UnicodeString | — |
Name UnicodeString | — |
Value UnicodeString | — |
DataClassification UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4004",
"version": "0",
"level": "4",
"task": "50",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DataPayloadTarget": "",
"Name": "",
"Value": "",
"DataClassification": "0"
},
"message": ""
}
Event ID 30003 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30003",
"version": "1",
"level": "1",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30004 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30004",
"version": "1",
"level": "2",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30005 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30005",
"version": "1",
"level": "3",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30006 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30006",
"version": "1",
"level": "4",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30007 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30007",
"version": "1",
"level": "5",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30008 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30008",
"version": "1",
"level": "16",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30009 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30009",
"version": "1",
"level": "50",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30010 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30010",
"version": "1",
"level": "100",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30011 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30011",
"version": "1",
"level": "200",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30012 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30012",
"version": "1",
"level": "1",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30013 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30013",
"version": "1",
"level": "2",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30014 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30014",
"version": "1",
"level": "3",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30015 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30015",
"version": "1",
"level": "4",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30016 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30016",
"version": "1",
"level": "5",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30017 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30017",
"version": "1",
"level": "16",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30018 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30018",
"version": "1",
"level": "50",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30019 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30019",
"version": "1",
"level": "100",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30020 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30020",
"version": "1",
"level": "200",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30021 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30021",
"version": "1",
"level": "1",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30022 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30022",
"version": "1",
"level": "2",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30023 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30023",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30024 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30024",
"version": "1",
"level": "4",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30025 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30025",
"version": "1",
"level": "5",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30026 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30026",
"version": "1",
"level": "16",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30027 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30027",
"version": "1",
"level": "50",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30028 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30028",
"version": "1",
"level": "100",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30029 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30029",
"version": "1",
"level": "200",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30030 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30030",
"version": "1",
"level": "1",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30031 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30031",
"version": "1",
"level": "2",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30032 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30032",
"version": "1",
"level": "3",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30033 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30033",
"version": "1",
"level": "4",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30034 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30034",
"version": "1",
"level": "5",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30035 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30035",
"version": "1",
"level": "16",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30036 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30036",
"version": "1",
"level": "50",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30037 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30037",
"version": "1",
"level": "100",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30038 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30038",
"version": "1",
"level": "200",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30039 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30039",
"version": "1",
"level": "1",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30040 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30040",
"version": "1",
"level": "2",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30041 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30041",
"version": "1",
"level": "3",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30042 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30042",
"version": "1",
"level": "4",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30043 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30043",
"version": "1",
"level": "5",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30044 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30044",
"version": "1",
"level": "16",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30045 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30045",
"version": "1",
"level": "50",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30046 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30046",
"version": "1",
"level": "100",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30047 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30047",
"version": "1",
"level": "200",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30048 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30048",
"version": "1",
"level": "1",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30049 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30049",
"version": "1",
"level": "2",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30050 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30050",
"version": "1",
"level": "3",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30051 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30051",
"version": "1",
"level": "4",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30052 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30052",
"version": "1",
"level": "5",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30053 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30053",
"version": "1",
"level": "16",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30054 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30054",
"version": "1",
"level": "50",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30055 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30055",
"version": "1",
"level": "100",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30056 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30056",
"version": "1",
"level": "200",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30057 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30057",
"version": "1",
"level": "1",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30058 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30058",
"version": "1",
"level": "2",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30059 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30059",
"version": "1",
"level": "3",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30060 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30060",
"version": "1",
"level": "4",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30061 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30061",
"version": "1",
"level": "5",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30062 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30062",
"version": "1",
"level": "16",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30063 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30063",
"version": "1",
"level": "50",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30064 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30064",
"version": "1",
"level": "100",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30065 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30065",
"version": "1",
"level": "200",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30066 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30066",
"version": "1",
"level": "1",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30067 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30067",
"version": "1",
"level": "2",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30068 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30068",
"version": "1",
"level": "3",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30069 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30069",
"version": "1",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30070 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30070",
"version": "1",
"level": "5",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30071 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30071",
"version": "1",
"level": "16",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30072 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30072",
"version": "1",
"level": "50",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30073 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30073",
"version": "1",
"level": "100",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30074 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30074",
"version": "1",
"level": "200",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30075 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30075",
"version": "1",
"level": "1",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30076 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30076",
"version": "1",
"level": "2",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30077 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30077",
"version": "1",
"level": "3",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30078 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30078",
"version": "1",
"level": "4",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30079 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30079",
"version": "1",
"level": "5",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30080 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30080",
"version": "1",
"level": "16",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30081 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30081",
"version": "1",
"level": "50",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30082 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30082",
"version": "1",
"level": "100",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30083 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30083",
"version": "1",
"level": "200",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30084 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30084",
"version": "1",
"level": "1",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30085 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30085",
"version": "1",
"level": "2",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30086 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30086",
"version": "1",
"level": "3",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30087 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30087",
"version": "1",
"level": "4",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30088 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30088",
"version": "1",
"level": "5",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30089 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30089",
"version": "1",
"level": "16",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30090 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30090",
"version": "1",
"level": "50",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30091 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30091",
"version": "1",
"level": "100",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30092 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30092",
"version": "1",
"level": "200",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30093 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30093",
"version": "1",
"level": "1",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30094 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30094",
"version": "1",
"level": "2",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30095 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30095",
"version": "1",
"level": "3",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30096 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30096",
"version": "1",
"level": "4",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30097 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30097",
"version": "1",
"level": "5",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30098 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30098",
"version": "1",
"level": "16",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30099 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30099",
"version": "1",
"level": "50",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30100 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30100",
"version": "1",
"level": "100",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30101 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30101",
"version": "1",
"level": "200",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30102 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30102",
"version": "1",
"level": "1",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30103 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30103",
"version": "1",
"level": "2",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30104 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30104",
"version": "1",
"level": "3",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30105 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30105",
"version": "1",
"level": "4",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30106 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30106",
"version": "1",
"level": "5",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30107 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30107",
"version": "1",
"level": "16",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30108 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30108",
"version": "1",
"level": "50",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30109 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30109",
"version": "1",
"level": "100",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30110 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30110",
"version": "1",
"level": "200",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30111 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30111",
"version": "1",
"level": "1",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30112 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30112",
"version": "1",
"level": "2",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30113 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30113",
"version": "1",
"level": "3",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30114 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30114",
"version": "1",
"level": "4",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30115 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30115",
"version": "1",
"level": "5",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30116 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30116",
"version": "1",
"level": "16",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30117 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30117",
"version": "1",
"level": "50",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30118 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30118",
"version": "1",
"level": "100",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30119 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30119",
"version": "1",
"level": "200",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30120 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30120",
"version": "1",
"level": "1",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30121 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30121",
"version": "1",
"level": "2",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30122 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30122",
"version": "1",
"level": "3",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30123 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30123",
"version": "1",
"level": "4",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30124 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30124",
"version": "1",
"level": "5",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30125 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30125",
"version": "1",
"level": "16",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30126 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30126",
"version": "1",
"level": "50",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30127 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30127",
"version": "1",
"level": "100",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30128 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30128",
"version": "1",
"level": "200",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30129 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30129",
"version": "1",
"level": "1",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30130 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30130",
"version": "1",
"level": "2",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30131 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30131",
"version": "1",
"level": "3",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30132 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30132",
"version": "1",
"level": "4",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30133 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30133",
"version": "1",
"level": "5",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30134 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30134",
"version": "1",
"level": "16",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30135 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30135",
"version": "1",
"level": "50",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30136 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30136",
"version": "1",
"level": "100",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30137 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30137",
"version": "1",
"level": "200",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30138 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30138",
"version": "1",
"level": "1",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30139 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30139",
"version": "1",
"level": "2",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30140 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30140",
"version": "1",
"level": "3",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30141 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30141",
"version": "1",
"level": "4",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30142 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30142",
"version": "1",
"level": "5",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30143 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30143",
"version": "1",
"level": "16",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30144 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30144",
"version": "1",
"level": "50",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30145 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30145",
"version": "1",
"level": "100",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30146 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30146",
"version": "1",
"level": "200",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30147 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30147",
"version": "1",
"level": "1",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30148 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30148",
"version": "1",
"level": "2",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30149 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30149",
"version": "1",
"level": "3",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30150 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30150",
"version": "1",
"level": "4",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30151 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30151",
"version": "1",
"level": "5",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30152 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30152",
"version": "1",
"level": "16",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30153 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30153",
"version": "1",
"level": "50",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30154 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30154",
"version": "1",
"level": "100",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30155 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30155",
"version": "1",
"level": "200",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30156 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30156",
"version": "1",
"level": "1",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30157 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30157",
"version": "1",
"level": "2",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30158 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30158",
"version": "1",
"level": "3",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30159 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30159",
"version": "1",
"level": "4",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30160 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30160",
"version": "1",
"level": "5",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30161 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30161",
"version": "1",
"level": "16",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30162 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30162",
"version": "1",
"level": "50",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30163 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30163",
"version": "1",
"level": "100",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30164 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30164",
"version": "1",
"level": "200",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30165 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30165",
"version": "1",
"level": "1",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30166 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30166",
"version": "1",
"level": "2",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30167 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30167",
"version": "1",
"level": "3",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30168 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30168",
"version": "1",
"level": "4",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30169 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30169",
"version": "1",
"level": "5",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30170 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30170",
"version": "1",
"level": "16",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30171 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30171",
"version": "1",
"level": "50",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30172 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30172",
"version": "1",
"level": "100",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30173 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30173",
"version": "1",
"level": "200",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30174 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30174",
"version": "1",
"level": "1",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30175 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30175",
"version": "1",
"level": "2",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30176 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30176",
"version": "1",
"level": "3",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30177 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30177",
"version": "1",
"level": "4",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30178 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30178",
"version": "1",
"level": "5",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30179 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30179",
"version": "1",
"level": "16",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30180 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30180",
"version": "1",
"level": "50",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30181 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30181",
"version": "1",
"level": "100",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30182 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30182",
"version": "1",
"level": "200",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30183 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30183",
"version": "1",
"level": "1",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30184 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30184",
"version": "1",
"level": "2",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30185 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30185",
"version": "1",
"level": "3",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30186 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30186",
"version": "1",
"level": "4",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30187 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30187",
"version": "1",
"level": "5",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30188 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30188",
"version": "1",
"level": "16",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30189 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30189",
"version": "1",
"level": "50",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30190 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30190",
"version": "1",
"level": "100",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30191 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30191",
"version": "1",
"level": "200",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30192 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30192",
"version": "1",
"level": "1",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30193 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30193",
"version": "1",
"level": "2",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30194 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30194",
"version": "1",
"level": "3",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30195 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30195",
"version": "1",
"level": "4",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30196 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30196",
"version": "1",
"level": "5",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30197 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30197",
"version": "1",
"level": "16",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30198 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30198",
"version": "1",
"level": "50",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30199 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30199",
"version": "1",
"level": "100",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30200 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30200",
"version": "1",
"level": "200",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30201 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30201",
"version": "1",
"level": "1",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30202 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30202",
"version": "1",
"level": "2",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30203 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30203",
"version": "1",
"level": "3",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30204 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30204",
"version": "1",
"level": "4",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30205 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30205",
"version": "1",
"level": "5",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30206 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30206",
"version": "1",
"level": "16",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30207 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30207",
"version": "1",
"level": "50",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30208 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30208",
"version": "1",
"level": "100",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30209 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30209",
"version": "1",
"level": "200",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30210 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30210",
"version": "1",
"level": "1",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30211 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30211",
"version": "1",
"level": "2",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30212 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30212",
"version": "1",
"level": "3",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30213 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30213",
"version": "1",
"level": "4",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30214 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30214",
"version": "1",
"level": "5",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30215 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30215",
"version": "1",
"level": "16",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30216 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30216",
"version": "1",
"level": "50",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30217 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30217",
"version": "1",
"level": "100",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30218 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30218",
"version": "1",
"level": "200",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30219 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30219",
"version": "1",
"level": "1",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30220 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30220",
"version": "1",
"level": "2",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30221 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30221",
"version": "1",
"level": "3",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30222 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30222",
"version": "1",
"level": "4",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30223 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30223",
"version": "1",
"level": "5",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30224 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30224",
"version": "1",
"level": "16",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30225 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30225",
"version": "1",
"level": "50",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30226 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30226",
"version": "1",
"level": "100",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30227 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30227",
"version": "1",
"level": "200",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30228 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30228",
"version": "1",
"level": "1",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30229 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30229",
"version": "1",
"level": "2",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30230 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30230",
"version": "1",
"level": "3",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30231 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30231",
"version": "1",
"level": "4",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30232 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30232",
"version": "1",
"level": "5",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30233 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30233",
"version": "1",
"level": "16",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30234 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30234",
"version": "1",
"level": "50",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30235 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30235",
"version": "1",
"level": "100",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30236 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30236",
"version": "1",
"level": "200",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30237 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30237",
"version": "1",
"level": "1",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30238 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30238",
"version": "1",
"level": "2",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30239 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30239",
"version": "1",
"level": "3",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30240 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30240",
"version": "1",
"level": "4",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30241 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30241",
"version": "1",
"level": "5",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30242 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30242",
"version": "1",
"level": "16",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30243 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30243",
"version": "1",
"level": "50",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30244 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30244",
"version": "1",
"level": "100",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30245 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30245",
"version": "1",
"level": "200",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30246 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30246",
"version": "1",
"level": "1",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30247 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30247",
"version": "1",
"level": "2",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30248 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30248",
"version": "1",
"level": "3",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30249 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30249",
"version": "1",
"level": "4",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30250 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30250",
"version": "1",
"level": "5",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30251 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30251",
"version": "1",
"level": "16",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30252 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30252",
"version": "1",
"level": "50",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30253 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30253",
"version": "1",
"level": "100",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30254 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30254",
"version": "1",
"level": "200",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30255 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30255",
"version": "1",
"level": "1",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30256 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30256",
"version": "1",
"level": "2",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30257 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30257",
"version": "1",
"level": "3",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30258 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30258",
"version": "1",
"level": "4",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30259 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30259",
"version": "1",
"level": "5",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30260 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30260",
"version": "1",
"level": "16",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30261 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30261",
"version": "1",
"level": "50",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30262 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30262",
"version": "1",
"level": "100",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30263 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30263",
"version": "1",
"level": "200",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30264 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30264",
"version": "1",
"level": "1",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30265 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30265",
"version": "1",
"level": "2",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30266 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30266",
"version": "1",
"level": "3",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30267 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30267",
"version": "1",
"level": "4",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30268 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30268",
"version": "1",
"level": "5",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30269 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30269",
"version": "1",
"level": "16",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30270 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30270",
"version": "1",
"level": "50",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30271 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30271",
"version": "1",
"level": "100",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30272 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30272",
"version": "1",
"level": "200",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30273 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30273",
"version": "1",
"level": "1",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30274 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30274",
"version": "1",
"level": "2",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30275 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30275",
"version": "1",
"level": "3",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30276 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30276",
"version": "1",
"level": "4",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30277 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30277",
"version": "1",
"level": "5",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30278 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30278",
"version": "1",
"level": "16",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30279 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30279",
"version": "1",
"level": "50",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30280 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30280",
"version": "1",
"level": "100",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30281 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30281",
"version": "1",
"level": "200",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30282 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30282",
"version": "1",
"level": "1",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30283 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30283",
"version": "1",
"level": "2",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30284 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30284",
"version": "1",
"level": "3",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30285 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30285",
"version": "1",
"level": "4",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30286 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30286",
"version": "1",
"level": "5",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30287 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30287",
"version": "1",
"level": "16",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30288 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30288",
"version": "1",
"level": "50",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30289 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30289",
"version": "1",
"level": "100",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30290 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30290",
"version": "1",
"level": "200",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}