Microsoft-Office-Word
886 events across 1 channel
Event ID 0: tskPageLayoutStartPage
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ipgd Int32 | |
GoodClient Boolean | |
PageReuse Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "0",
"version": "0",
"level": "4",
"task": "2",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ipgd": "0",
"GoodClient": "false",
"PageReuse": "false"
},
"message": ""
}
Event ID 1: tskPageLayoutStopPage
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1",
"version": "0",
"level": "4",
"task": "2",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2: tskPageLayoutStartMathBrkSession_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cpFirst Int32 | |
cpLim Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2",
"version": "1",
"level": "4",
"task": "2",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 3: tskPageLayoutStopMathBrkSession
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3",
"version": "0",
"level": "4",
"task": "2",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4: tskPageLayoutStartTableAutofit_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cpFirst Int32 | |
cpLim Int32 | |
itap Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4",
"version": "1",
"level": "4",
"task": "2",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"cpLim": "0",
"itap": "0"
},
"message": ""
}
Event ID 5: tskPageLayoutStopTableAutofit
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "5",
"version": "0",
"level": "4",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 6: tskLineLayoutStartLineLayout_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cp Int32 | |
GoodClient Boolean | |
GivenCp Boolean | |
ParaClient Boolean | |
FormatLineCaller UnicodeString | |
FormatLineCallerOldestAncestor UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "6",
"version": "2",
"level": "5",
"task": "3",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cp": "0",
"GoodClient": "false",
"GivenCp": "false",
"ParaClient": "false",
"FormatLineCaller": "",
"FormatLineCallerOldestAncestor": ""
},
"message": ""
}
Event ID 7: tskLineLayoutStopLineLayout_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cp Int32 | |
cpLim Int32 | |
panic Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "7",
"version": "1",
"level": "5",
"task": "3",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"cpLim": "0",
"panic": "false"
},
"message": ""
}
Event ID 8: tskPageLayoutStartBuildPllrgPg
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ipgd Int32 | |
cp (approx.) Int32 | |
GoodClient Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "8",
"version": "0",
"level": "4",
"task": "2",
"opcode": "16",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ipgd": "0",
"cp (approx.)": "0",
"GoodClient": "false"
},
"message": ""
}
Event ID 9: tskPageLayoutStopBuildPllrgPg
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "9",
"version": "0",
"level": "4",
"task": "2",
"opcode": "17",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 10: tskPageLayoutCreateAbdRc_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
abdk UnicodeString | |
cpFirst Int32 | |
cpLimIfAcex Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "10",
"version": "1",
"level": "4",
"task": "2",
"opcode": "18",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"abdk": "",
"cpFirst": "0",
"cpLimIfAcex": "0"
},
"message": ""
}
Event ID 11: tskDisplayStartUpdateWwd_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
pmwd Pointer | |
pwwd Pointer | |
hwnd Pointer | |
View Type UnicodeString | |
Pct Zoom Int32 | |
RM View Boolean | |
rcwDisp.xp Int32 | |
rcwDisp.yp Int32 | |
rcwDisp.dxp Int32 | |
rcwDisp.dyp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "11",
"version": "2",
"level": "4",
"task": "4",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:48.870569500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"Doc Kind": "Doc",
"pmwd": "0x1FF3C5DD4A0",
"pwwd": "0x1FF3BF2B670",
"hwnd": "0x1B042C",
"View Type": "Page",
"Pct Zoom": "100",
"RM View": "true",
"rcwDisp.xp": "0",
"rcwDisp.yp": "0",
"rcwDisp.dxp": "461",
"rcwDisp.dyp": "528"
},
"message": ""
}
Event ID 12: tskDisplayStopUpdateWwd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "12",
"version": "0",
"level": "4",
"task": "4",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 13: tskDisplayStartUpdatePr_V3
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pwwd Pointer | |
ipgd Int32 | |
Layer Handle Int64 | |
Texture Handle Int64 | |
rcePage.xe Int32 | |
rcePage.ye Int32 | |
rcePage.dxe Int32 | |
rcePage.dye Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "13",
"version": "3",
"level": "4",
"task": "4",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471027300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"pwwd": "0x1FF3BF2B670",
"ipgd": "0",
"Layer Handle": "685",
"Texture Handle": "0",
"rcePage.xe": "-72",
"rcePage.ye": "17",
"rcePage.dxe": "816",
"rcePage.dye": "1056"
},
"message": ""
}
Event ID 14: tskDisplayStopUpdatePr
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "14",
"version": "0",
"level": "4",
"task": "4",
"opcode": "13",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 15: tskDisplayStartBuildDrus_V3
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pwwd Pointer | |
ipgd Int32 | |
Layer Handle Int64 | |
Texture Handle Int64 | |
rcePage.xe Int32 | |
rcePage.ye Int32 | |
rcePage.dxe Int32 | |
rcePage.dye Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "15",
"version": "3",
"level": "4",
"task": "4",
"opcode": "14",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pwwd": "0x0",
"ipgd": "0",
"Layer Handle": "0",
"Texture Handle": "0",
"rcePage.xe": "0",
"rcePage.ye": "0",
"rcePage.dxe": "0",
"rcePage.dye": "0"
},
"message": ""
}
Event ID 16: tskDisplayStopBuildDrus
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "16",
"version": "0",
"level": "4",
"task": "4",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 17: task_0_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "17",
"version": "1",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 18: tskDisplayStartDrawDru_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cpFirst Int32 | |
cpLim Int32 | |
drk UnicodeString | |
Subtype UnicodeString | |
drc.xp Int32 | |
drc.yp Int32 | |
drc.dxp Int32 | |
drc.dyp Int32 | |
Layer Handle Int64 | |
Texture Handle Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "18",
"version": "2",
"level": "5",
"task": "4",
"opcode": "16",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:52:26.372527500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "Nil Pdod",
"cpFirst": "-1",
"cpLim": "-1",
"drk": "Generic DR",
"Subtype": "Comment Margin Entry Point",
"drc.xp": "780",
"drc.yp": "93",
"drc.dxp": "24",
"drc.dyp": "24",
"Layer Handle": "2355",
"Texture Handle": "2356"
},
"message": ""
}
Event ID 19: tskDisplayStopDrawDru
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "19",
"version": "0",
"level": "5",
"task": "4",
"opcode": "17",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 20: tskTypingStartTypedChar_V3
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cpFirst Int32 | |
pwwd Pointer | |
View Type UnicodeString | |
First Loop Char Boolean | |
SqmDocId GUID | |
DocumentId UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "20",
"version": "3",
"level": "4",
"task": "5",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469441600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"Doc Kind": "Doc",
"cpFirst": "71",
"pwwd": "0x1FF3BF2B670",
"View Type": "Page",
"First Loop Char": "true",
"SqmDocId": "{b4541f5c-1e9a-4fef-95d1-6c3c3b192773}",
"DocumentId": "1346715326"
},
"message": ""
}
Event ID 21: tskTypingStopTypedChar
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "21",
"version": "0",
"level": "4",
"task": "5",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.466500000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 22: tskTypingStartTypingEvtMntr_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cpFirst Int32 | |
ccp Int32 | |
Evt Mntr Name UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "22",
"version": "1",
"level": "4",
"task": "5",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cpFirst": "0",
"ccp": "0",
"Evt Mntr Name": ""
},
"message": ""
}
Event ID 23: tskTypingStopTypingEvtMntr_V1
#Fields #
| Name | Description |
|---|---|
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "23",
"version": "1",
"level": "4",
"task": "5",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.466460600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "EvalXch"
},
"message": ""
}
Event ID 24: tskTypingStartTypingInvalInsert
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "24",
"version": "0",
"level": "4",
"task": "5",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 25: tskTypingStopTypingInvalInsert
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "25",
"version": "0",
"level": "4",
"task": "5",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 26: tskTypingEndInsertCalled_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cpFirst Int32 | |
cpLim Int32 | |
InInsertLoop Boolean | |
fEnd Boolean | |
UpdateWwd Boolean | |
Reason UnicodeString | |
wm UInt32 | |
hwnd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "26",
"version": "2",
"level": "4",
"task": "5",
"opcode": "16",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cpFirst": "0",
"cpLim": "0",
"InInsertLoop": "false",
"fEnd": "false",
"UpdateWwd": "false",
"Reason": "",
"wm": "0",
"hwnd": "0x0"
},
"message": ""
}
Event ID 27: tskTypingChunkingSwitchedOn_V2
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
View Type UnicodeString | |
Wwd Update Duration (msec) UInt64 | |
Chunking Update Threshold (msec) UInt64 | |
Wwd Update Delay (msec) UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "27",
"version": "2",
"level": "4",
"task": "5",
"opcode": "17",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Wwd Update Duration (msec)": "0",
"Chunking Update Threshold (msec)": "0",
"Wwd Update Delay (msec)": "0"
},
"message": ""
}
Event ID 28: tskTypingChunkingSwitchedOff_V2
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
View Type UnicodeString | |
Wwd Update Duration (msec) UInt64 | |
Chunking Update Threshold (msec) UInt64 | |
Reason UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "28",
"version": "2",
"level": "4",
"task": "5",
"opcode": "18",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Wwd Update Duration (msec)": "0",
"Chunking Update Threshold (msec)": "0",
"Reason": ""
},
"message": ""
}
Event ID 29: tskTypingChunkingSkippedWwdUpdate_V2
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
View Type UnicodeString | |
Time since last wwd update (msec) UInt64 | |
Wwd Update Delay (msec) UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "29",
"version": "2",
"level": "4",
"task": "5",
"opcode": "19",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"Time since last wwd update (msec)": "0",
"Wwd Update Delay (msec)": "0"
},
"message": ""
}
Event ID 30: tskPageLayoutLbcFormatPageAtnStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30",
"version": "0",
"level": "5",
"task": "2",
"opcode": "22",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 31: tskPageLayoutLbcFormatPageAtnEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "31",
"version": "0",
"level": "5",
"task": "2",
"opcode": "23",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 32: tskPageLayoutFserrBuildPllrgStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "32",
"version": "0",
"level": "5",
"task": "2",
"opcode": "24",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 33: tskPageLayoutFserrBuildPllrgEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "33",
"version": "0",
"level": "5",
"task": "2",
"opcode": "25",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 34: tskDisplayElaborateHprStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "34",
"version": "0",
"level": "5",
"task": "4",
"opcode": "28",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471108100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 35: tskDisplayElaborateHprEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "35",
"version": "0",
"level": "5",
"task": "4",
"opcode": "29",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471392300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 36: tskDisplayDRB
#Fields #
| Name | Description |
|---|---|
drk UInt32 | |
fDirty Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "36",
"version": "0",
"level": "5",
"task": "4",
"opcode": "30",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"fDirty": "false"
},
"message": ""
}
Event ID 37: tskDisplayDR
#Fields #
| Name | Description |
|---|---|
fInTable Boolean | |
fTxbx Boolean | |
fGEPresent Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "37",
"version": "0",
"level": "5",
"task": "4",
"opcode": "32",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fInTable": "false",
"fTxbx": "false",
"fGEPresent": "false"
},
"message": ""
}
Event ID 38: tskDisplayDRSEL
#Fields #
| Name | Description |
|---|---|
drselk UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "38",
"version": "0",
"level": "5",
"task": "4",
"opcode": "31",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drselk": "0"
},
"message": ""
}
Event ID 39: tskDisplayDRDO
#Fields #
| Name | Description |
|---|---|
grfdrdo UInt32 | |
cTxbx UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "39",
"version": "0",
"level": "5",
"task": "4",
"opcode": "33",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"grfdrdo": "0",
"cTxbx": "0"
},
"message": ""
}
Event ID 40: tskDisplayDRG
#Fields #
| Name | Description |
|---|---|
drkx UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "40",
"version": "0",
"level": "5",
"task": "4",
"opcode": "34",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drkx": "0"
},
"message": ""
}
Event ID 41: tskIdleIdleLoopPassBegin
#Fields #
| Name | Description |
|---|---|
DmsecInIdle UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "41",
"version": "0",
"level": "5",
"task": "33",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DmsecInIdle": "0"
},
"message": ""
}
Event ID 42: tskIdleIdleLoopPassEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "42",
"version": "0",
"level": "5",
"task": "33",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 46: tskFileOpenFileOpenStatus_V4
#Fields #
| Name | Description |
|---|---|
filename UnicodeString | |
fSuccess Boolean | |
fCancelledByUser Boolean | |
Content info UInt32 | |
extension UnicodeString | |
size UInt64 | |
fIsRetryOpenViaBcs Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "46",
"version": "4",
"level": "4",
"task": "7",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"filename": "",
"fSuccess": "false",
"fCancelledByUser": "false",
"Content info": "0",
"extension": "",
"size": "0",
"fIsRetryOpenViaBcs": "false"
},
"message": ""
}
Event ID 53: tskDisplayPageDirtyAreaReport_V1
#Fields #
| Name | Description |
|---|---|
ipgd Int32 | |
pdodMain Pointer | |
drk UnicodeString | |
Ideal Pixel Count UInt64 | |
Bounding Box Pixel Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "53",
"version": "1",
"level": "4",
"task": "4",
"opcode": "18",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"pdodMain": "0x0",
"drk": "",
"Ideal Pixel Count": "0",
"Bounding Box Pixel Count": "0"
},
"message": ""
}
Event ID 67: tskCoauthMergeCoauthCOAHrApplyContentStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "67",
"version": "0",
"level": "4",
"task": "12",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 68: tskCoauthMergeCoauthCOAHrApplyContentEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "68",
"version": "0",
"level": "4",
"task": "12",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 69: tskDocMergeCmdDoDiffStart_V2
#Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | |
pdodSrc0 Pointer | |
pdodSrc1 Pointer | |
pdodBase Pointer | |
cpMac0 Int32 | |
cpMac1 Int32 | |
cpMacBase Int32 | |
grfdc UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "69",
"version": "2",
"level": "4",
"task": "39",
"opcode": "46",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"pdodSrc0": "0x0",
"pdodSrc1": "0x0",
"pdodBase": "0x0",
"cpMac0": "0",
"cpMac1": "0",
"cpMacBase": "0",
"grfdc": "0"
},
"message": ""
}
Event ID 70: tskDocMergeCmdDoDiffEnd_V4
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
ElapsedTimeMicroseconds UInt64 | |
cmdRet Int32 | |
fConflict Boolean | |
fTwoWayMerge Boolean | |
Autofit0Microseconds UInt64 | |
Autofit1Microseconds UInt64 | |
AutofitBaseMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "70",
"version": "4",
"level": "4",
"task": "39",
"opcode": "47",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"ElapsedTimeMicroseconds": "0",
"cmdRet": "0",
"fConflict": "false",
"fTwoWayMerge": "false",
"Autofit0Microseconds": "0",
"Autofit1Microseconds": "0",
"AutofitBaseMicroseconds": "0"
},
"message": ""
}
Event ID 71: tskDocMergeDocPudMergeStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "71",
"version": "0",
"level": "5",
"task": "39",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 72: tskDocMergeDocMergePudMergeEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "72",
"version": "0",
"level": "5",
"task": "39",
"opcode": "13",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 73: tskDocMergeDocMergeFInitDocCompStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "73",
"version": "0",
"level": "5",
"task": "39",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 74: tskDocMergeDocMergeFInitDocCompEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "74",
"version": "0",
"level": "5",
"task": "39",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 75: tskDocMergeDocMergeFMergeLocksStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "75",
"version": "0",
"level": "5",
"task": "39",
"opcode": "14",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 76: tskDocMergeDocMergeFMergeLocksEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "76",
"version": "0",
"level": "5",
"task": "39",
"opcode": "15",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 77: tskDocMergeDocMergeFInitCoctxtStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "77",
"version": "0",
"level": "5",
"task": "39",
"opcode": "16",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 78: tskDocMergeDocMergeFInitCoctxtEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "78",
"version": "0",
"level": "5",
"task": "39",
"opcode": "17",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 79: tskDocMergeDocMergeFMatchWithBaseStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "79",
"version": "0",
"level": "5",
"task": "39",
"opcode": "18",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 80: tskDocMergeDocMergeFMatchWithBaseEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "80",
"version": "0",
"level": "5",
"task": "39",
"opcode": "19",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 81: tskDocMergeDocMergeFMatchRegionsStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "81",
"version": "0",
"level": "5",
"task": "39",
"opcode": "20",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 82: tskDocMergeDocMergeFMatchRegionsEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "82",
"version": "0",
"level": "5",
"task": "39",
"opcode": "21",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 83: tskDocMergeDocMergeFDiffPdodWithBaseStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "83",
"version": "0",
"level": "5",
"task": "39",
"opcode": "22",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 84: tskDocMergeDocMergeFDiffPdodWithBaseEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "84",
"version": "0",
"level": "5",
"task": "39",
"opcode": "23",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 85: tskDocMergeDocMergeFBuildDiffWithBaseStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "85",
"version": "0",
"level": "5",
"task": "39",
"opcode": "24",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 86: tskDocMergeDocMergeFBuildDiffWithBaseEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "86",
"version": "0",
"level": "5",
"task": "39",
"opcode": "25",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 87: tskDocMergeDocMergeFFixupFinalEopCocbStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "87",
"version": "0",
"level": "5",
"task": "39",
"opcode": "26",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 88: tskDocMergeDocMergeFFixupFinalEopCocbEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "88",
"version": "0",
"level": "5",
"task": "39",
"opcode": "27",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 89: tskDocMergeDocMergeFDiffNotesStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "89",
"version": "0",
"level": "5",
"task": "39",
"opcode": "28",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 90: tskDocMergeDocMergeFDiffNotesEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "90",
"version": "0",
"level": "5",
"task": "39",
"opcode": "29",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 91: tskDocMergeDocMergeFMatchTxbxFigusStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "91",
"version": "0",
"level": "5",
"task": "39",
"opcode": "30",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 92: tskDocMergeDocMergeFMatchTxbxFigusEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "92",
"version": "0",
"level": "5",
"task": "39",
"opcode": "31",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 93: tskDocMergeDocMergeFDiffTextboxesStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "93",
"version": "0",
"level": "5",
"task": "39",
"opcode": "32",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 94: tskDocMergeDocMergeFDiffTextboxesEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "94",
"version": "0",
"level": "5",
"task": "39",
"opcode": "33",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 95: tskDocMergeDocMergeFDiffHdrsStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "95",
"version": "0",
"level": "5",
"task": "39",
"opcode": "34",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 96: tskDocMergeDocMergeFDiffHdrsEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "96",
"version": "0",
"level": "5",
"task": "39",
"opcode": "35",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 97: tskDocMergeDocMergeFDiffPdodsStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "97",
"version": "0",
"level": "5",
"task": "39",
"opcode": "36",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 98: tskDocMergeDocMergeFDiffPdodsEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "98",
"version": "0",
"level": "5",
"task": "39",
"opcode": "37",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 99: tskDocMergeDocMergeMergeStyleLockingStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "99",
"version": "0",
"level": "5",
"task": "39",
"opcode": "38",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 100: tskDocMergeDocMergeMergeStyleLockingEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "100",
"version": "0",
"level": "5",
"task": "39",
"opcode": "39",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 101: tskDocMergeDocMergeFCompareStylesStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "101",
"version": "0",
"level": "5",
"task": "39",
"opcode": "40",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 102: tskDocMergeDocMergeFCompareStylesEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "102",
"version": "0",
"level": "5",
"task": "39",
"opcode": "41",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 103: tskDocMergeDocMergeFCopyParidsCocbStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "103",
"version": "0",
"level": "5",
"task": "39",
"opcode": "42",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 104: tskDocMergeDocMergeFCopyParidsCocbEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "104",
"version": "0",
"level": "5",
"task": "39",
"opcode": "43",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 105: tskDocMergeDocMergeFCopyParidStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "105",
"version": "0",
"level": "5",
"task": "39",
"opcode": "44",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 106: tskDocMergeDocMergeFCopyParidEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "106",
"version": "0",
"level": "5",
"task": "39",
"opcode": "45",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 107: tskCoauthMergeCoauthCOAHrApplyContentGetbaseStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "107",
"version": "0",
"level": "5",
"task": "12",
"opcode": "50",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 108: tskCoauthMergeCoauthCOAHrApplyContentGetbaseEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "108",
"version": "0",
"level": "5",
"task": "12",
"opcode": "51",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 109: tskCoauthMergeCoauthCOAHrApplyContentDoDiffStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "109",
"version": "0",
"level": "5",
"task": "12",
"opcode": "52",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 110: tskCoauthMergeCoauthCOAHrApplyContentDoDiffEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "110",
"version": "0",
"level": "5",
"task": "12",
"opcode": "53",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 111: tskCoauthMergeCmdApplyCoAuthLockStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "111",
"version": "0",
"level": "4",
"task": "12",
"opcode": "54",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045903900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 112: tskCoauthMergeCmdApplyCoAuthLockEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "112",
"version": "0",
"level": "4",
"task": "12",
"opcode": "55",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045911600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "10"
},
"message": ""
}
Event ID 113: tskCoauthMergeCoAuthLockCaldFInitDodStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "113",
"version": "0",
"level": "4",
"task": "12",
"opcode": "56",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 114: tskCoauthMergeCoAuthLockCaldFInitDodEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "114",
"version": "0",
"level": "4",
"task": "12",
"opcode": "57",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 115: tskCoauthMergeCoAuthFApplyCoAuthLockStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "115",
"version": "0",
"level": "4",
"task": "12",
"opcode": "58",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 116: tskCoauthMergeCoAuthFApplyCoAuthLockEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "116",
"version": "0",
"level": "4",
"task": "12",
"opcode": "59",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 117: tskCoauthMergePaxcelApplyCoAuthLockStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "117",
"version": "0",
"level": "4",
"task": "12",
"opcode": "60",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 118: tskCoauthMergePaxcelApplyCoAuthLockEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "118",
"version": "0",
"level": "4",
"task": "12",
"opcode": "61",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 119: tskCoauthMergeCmdPrepareApplyCoAuthLockStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "119",
"version": "0",
"level": "4",
"task": "12",
"opcode": "62",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045906600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 120: tskCoauthMergeCmdPrepareApplyCoAuthLockEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "120",
"version": "0",
"level": "4",
"task": "12",
"opcode": "63",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:29.045909200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "3"
},
"message": ""
}
Event ID 121: tskCoauthMergeCoauthAutoApplyCaldStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "121",
"version": "0",
"level": "4",
"task": "12",
"opcode": "64",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 122: tskCoauthMergeCoauthAutoApplyCaldEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "122",
"version": "0",
"level": "4",
"task": "12",
"opcode": "65",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 123: tskSaveStartSave_V4
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pdodClone Pointer | |
fBackground Boolean | |
Format UnicodeString | |
SQMDocID GUID | |
recurseCount Int32 | |
SaveActionId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
SqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fCoAuthorable Boolean | |
fMergeRequired Boolean | |
saveDwTag UInt32 | |
saveInitiateKind Int32 | |
rtcEnabledState Int32 | |
alwaysSaveEnabledState Int32 | |
BkgSaveDisallowReason UInt32 | |
AlwaysSaveDisableReason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "123",
"version": "4",
"level": "4",
"task": "13",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.711853500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x1FF3A8B6000",
"pdodClone": "0x1FFDAFA4A90",
"fBackground": "true",
"Format": "asd",
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"recurseCount": "0",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"ftyp": "14",
"fSaveAs": "false",
"SqmDocLocation": "14",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"saveDwTag": "20485325",
"saveInitiateKind": "2",
"rtcEnabledState": "0",
"alwaysSaveEnabledState": "0",
"BkgSaveDisallowReason": " 0",
"AlwaysSaveDisableReason": " 6292524"
},
"message": ""
}
Event ID 124: tskSaveStopSave_V8
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pdodClone Pointer | |
fSuccess Boolean | |
eid Int32 | |
recurseCount Int32 | |
ElapsedTimeMicroseconds UInt64 | |
SaveActionId GUID | |
EditToSaveTimeMicroseconds UInt64 | |
FirstEditId GUID | |
EdpiType UInt32 | |
CurrentEditId GUID | |
RtcBrkEditToSaveTimeMicroseconds UInt64 | |
FirstRtcBrkEditId GUID | |
CurrentRtcBrkEditId GUID | |
IdleDelayedAutoSaveTimeMicroseconds UInt64 | |
AutoSaveIdleToSaveTimeMicroseconds UInt64 | |
AutoSaveIdleDurationTimeMicroseconds UInt64 | |
AutoSaveIdleCooldownTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "124",
"version": "8",
"level": "4",
"task": "13",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.766445300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x1FF3A8B6000",
"pdodClone": "0x1FFDAFA4A90",
"fSuccess": "true",
"eid": "-1",
"recurseCount": "0",
"ElapsedTimeMicroseconds": "54590",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"EditToSaveTimeMicroseconds": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"EdpiType": " 2",
"CurrentEditId": "{00000000-0000-0000-0000-000000000000}",
"RtcBrkEditToSaveTimeMicroseconds": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"CurrentRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"IdleDelayedAutoSaveTimeMicroseconds": "0",
"AutoSaveIdleToSaveTimeMicroseconds": "0",
"AutoSaveIdleDurationTimeMicroseconds": "0",
"AutoSaveIdleCooldownTimeMicroseconds": "0"
},
"message": ""
}
Event ID 125: tskSaveInitiateSave_V2
#Fields #
| Name | Description |
|---|---|
SQMDocID GUID | |
Source UnicodeString | |
saveInitiateKind Int32 | |
Pdod Pointer | |
SqmDocLocation Int32 | |
FCoAuthorable Boolean | |
SaveActionId GUID | |
DusecFirstEditToSaveInit UInt64 | |
FirstEditId GUID | |
DusecFirstRtcBrkEditToSaveInit UInt64 | |
FirstRtcBrkEditId GUID | |
CsiErrorCode UInt32 | |
DynamicSaveAdjustedReason Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "125",
"version": "2",
"level": "4",
"task": "13",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.701292500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"Source": "UserRequested",
"saveInitiateKind": "2",
"Pdod": "0x1FF3A8B6000",
"SqmDocLocation": "14",
"FCoAuthorable": "false",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"DusecFirstEditToSaveInit": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"DusecFirstRtcBrkEditToSaveInit": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"CsiErrorCode": " 1",
"DynamicSaveAdjustedReason": "0"
},
"message": ""
}
Event ID 132: tskActivationPLMSuspensionBegin_V2
#Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | |
SuspensionID GUID | |
fpInitialTimeAvailableMilliseconds Float | |
SessionID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "132",
"version": "2",
"level": "4",
"task": "15",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fpInitialTimeAvailableMilliseconds": "0.0",
"SessionID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 133: tskActivationPLMSuspensionOpenFileData
#Fields #
| Name | Description |
|---|---|
SuspensionID GUID | |
fIsDocOpen Boolean | |
SQMDocID GUID | |
pdodCurrent Pointer | |
fIsDocDirty Boolean | |
fIsSaveInProgress Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "133",
"version": "0",
"level": "4",
"task": "15",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fIsDocOpen": "false",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodCurrent": "0x0",
"fIsDocDirty": "false",
"fIsSaveInProgress": "false"
},
"message": ""
}
Event ID 134: tskActivationPLMSuspensionComplete_V1
#Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | |
SuspensionID GUID | |
fpTimeRemainingMilliseconds Float | |
fpElapsedTimeMilliseconds Float | |
HResult Int32 | |
ErrorDescription UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "134",
"version": "1",
"level": "4",
"task": "15",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"fpTimeRemainingMilliseconds": "0.0",
"fpElapsedTimeMilliseconds": "0.0",
"HResult": "0",
"ErrorDescription": ""
},
"message": ""
}
Event ID 135: tskActivationActivationWithDataLoss_V1
#Fields #
| Name | Description |
|---|---|
SessionID GUID | |
SQMDocID GUID | |
pdod Pointer | |
dataLossType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "135",
"version": "1",
"level": "4",
"task": "15",
"opcode": "13",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SessionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"dataLossType": "0"
},
"message": ""
}
Event ID 136: tskDisplayDeviceLostNotification_V5
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pwwd Pointer | |
device id UInt32 | |
layer name UnicodeString | |
layer id Pointer | |
airspace layer handle Int64 | |
bootQuit state UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "136",
"version": "5",
"level": "3",
"task": "4",
"opcode": "19",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pwwd": "0x0",
"device id": "0",
"layer name": "",
"layer id": "0x0",
"airspace layer handle": "0",
"bootQuit state": "0"
},
"message": ""
}
Event ID 137: tskDisplay_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "137",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 141: tskSaveCancelSave
#Fields #
| Name | Description |
|---|---|
SQMDocID GUID | |
Reason UnicodeString | |
Details1 Int32 | |
Details2 UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "141",
"version": "0",
"level": "4",
"task": "13",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"Reason": "",
"Details1": "0",
"Details2": "0"
},
"message": ""
}
Event ID 148: tskSaveReportSaveUnresponsivenessBucketedData_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
SqmDocId GUID | |
Format UnicodeString | |
fSaveDuringSuspendOrClose Boolean | |
cIntervals UInt32 | |
Bucket1-Min-Msec UInt64 | |
Bucket2-Min-Msec UInt64 | |
Bucket3-Min-Msec UInt64 | |
Bucket4-Min-Msec UInt64 | |
Bucket5-Min-Msec UInt64 | |
Bucket6-Min-Msec UInt64 | |
Bucket7-Min-Msec UInt64 | |
Bucket8-Min-Msec UInt64 | |
Bucket9-Min-Msec UInt64 | |
Bucket10-Min-Msec UInt64 | |
Bucket1-Count UInt64 | |
Bucket2-Count UInt64 | |
Bucket3-Count UInt64 | |
Bucket4-Count UInt64 | |
Bucket5-Count UInt64 | |
Bucket6-Count UInt64 | |
Bucket7-Count UInt64 | |
Bucket8-Count UInt64 | |
Bucket9-Count UInt64 | |
Bucket10-Count UInt64 | |
TopUnresponsiveDuration1-Msec UInt64 | |
TopUnresponsiveDuration2-Msec UInt64 | |
TopUnresponsiveDuration3-Msec UInt64 | |
TopUnresponsiveDuration4-Msec UInt64 | |
TopUnresponsiveDuration5-Msec UInt64 | |
SaveActionId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
SqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fCoAuthorable Boolean | |
fMergeRequired Boolean | |
fOnBackgroundThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "148",
"version": "2",
"level": "4",
"task": "13",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"Format": "",
"fSaveDuringSuspendOrClose": "false",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0",
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"SqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 149: tskActivationPLMSuspensionSaveFile
#Fields #
| Name | Description |
|---|---|
SuspensionID GUID | |
SQMDocID GUID | |
Disposition UnicodeString | |
Error UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "149",
"version": "0",
"level": "4",
"task": "15",
"opcode": "14",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"Disposition": "",
"Error": ""
},
"message": ""
}
Event ID 150: tskActivationPLMResumingBegin
#Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | |
MillisecondsSuspended UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "150",
"version": "0",
"level": "4",
"task": "15",
"opcode": "15",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"MillisecondsSuspended": "0"
},
"message": ""
}
Event ID 151: tskActivationPLMResumingComplete_V1
#Fields #
| Name | Description |
|---|---|
ThreadName UnicodeString | |
fpElapsedTimeMilliseconds Float |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "151",
"version": "1",
"level": "4",
"task": "15",
"opcode": "16",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ThreadName": "",
"fpElapsedTimeMilliseconds": "0.0"
},
"message": ""
}
Event ID 152: tskActivationPLMSuspendOfficeStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "152",
"version": "0",
"level": "4",
"task": "15",
"opcode": "17",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 153: tskActivationPLMSuspendOfficeEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "153",
"version": "0",
"level": "4",
"task": "15",
"opcode": "18",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 154: tskActivationPLMResumeOfficeStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "154",
"version": "0",
"level": "4",
"task": "15",
"opcode": "19",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 155: tskActivationPLMResumeOfficeEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "155",
"version": "0",
"level": "4",
"task": "15",
"opcode": "20",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 156: tskBinaryFileOpenInlinePicLoadBinaryInlinePicLoadStart_V1
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "156",
"version": "1",
"level": "4",
"task": "20",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 157: tskBinaryFileOpenInlinePicLoadBinaryInlinePicLoadEnd_V1
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "157",
"version": "1",
"level": "4",
"task": "20",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 158: tskUpgradeUpgradeStart_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cmvBeforeUpgrade Int32 | |
cmvToUpgrade Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "158",
"version": "1",
"level": "4",
"task": "22",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cmvBeforeUpgrade": "0",
"cmvToUpgrade": "0"
},
"message": ""
}
Event ID 159: tskUpgradeUpgradeEnd_V1
#Fields #
| Name | Description |
|---|---|
upgradeCmdStatus Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "159",
"version": "1",
"level": "4",
"task": "22",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"upgradeCmdStatus": "0"
},
"message": ""
}
Event ID 162: tskIdleHealthIdleCoreTimeData_V1
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
IdleCoreTime UInt64 | |
ActiveTime UInt64 | |
DeepSleepTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "162",
"version": "1",
"level": "4",
"task": "23",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleCoreTime": "0",
"ActiveTime": "0",
"DeepSleepTime": "0"
},
"message": ""
}
Event ID 163: tskIdleHealthIdleContinuityData_V1
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
Bucket-0-50-Count UInt64 | |
Bucket-50-100-Count UInt64 | |
Bucket-100-150-Count UInt64 | |
Bucket-150-200-Count UInt64 | |
Bucket-200-350-Count UInt64 | |
Bucket-350-500-Count UInt64 | |
Bucket-500-1000-Count UInt64 | |
Bucket-1000-2000-Count UInt64 | |
Bucket-2000-5000-Count UInt64 | |
Bucket-5000-Max-Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "163",
"version": "1",
"level": "4",
"task": "23",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 164: tskIdleHealthIdleTaskData_V2
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
IdleTaskName UnicodeString | |
fRtcGroupIdle Boolean | |
IdleTimeForTask UInt64 | |
Count UInt64 | |
MsgPresentCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "164",
"version": "2",
"level": "4",
"task": "23",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"IdleTimeForTask": "0",
"Count": "0",
"MsgPresentCount": "0"
},
"message": ""
}
Event ID 165: tskActivationPLMSuspendAirSpaceStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "165",
"version": "0",
"level": "4",
"task": "15",
"opcode": "21",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 166: tskActivationPLMSuspendAirSpaceEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "166",
"version": "0",
"level": "4",
"task": "15",
"opcode": "22",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 167: tskActivationPLMResumeAirSpaceStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "167",
"version": "0",
"level": "4",
"task": "15",
"opcode": "23",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 168: tskActivationPLMResumeAirSpaceEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "168",
"version": "0",
"level": "4",
"task": "15",
"opcode": "24",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 169: tskActivationActivationWithNoDataLoss_V1
#Fields #
| Name | Description |
|---|---|
SessionID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "169",
"version": "1",
"level": "4",
"task": "15",
"opcode": "25",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SessionID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 172: tskFileOpenBeginFileOpenCore_V2
#Fields #
| Name | Description |
|---|---|
fn Int32 | |
Ext UnicodeString | |
ftyp Int32 | |
pioldoc Pointer | |
Caller UnicodeString | |
fAutosaveDoc Boolean | |
fFnStrmWrapped Boolean | |
dof UInt32 | |
dof2 UInt64 | |
recurseCount Int32 | |
currentScopeId UInt32 | |
parentScopeId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "172",
"version": "2",
"level": "4",
"task": "7",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T22:34:52.754312100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fn": "18",
"Ext": "dotm",
"ftyp": "-1",
"pioldoc": "0x2D835490210",
"Caller": "OpenGlobalDot",
"fAutosaveDoc": "false",
"fFnStrmWrapped": "false",
"dof": "0x4210000",
"dof2": "0x200024000201",
"recurseCount": "0",
"currentScopeId": "0x0",
"parentScopeId": "0x0"
},
"message": ""
}
Event ID 173: tskFileOpenEndFileOpenCore_V6
#Fields #
| Name | Description |
|---|---|
Failed Boolean | |
Canceled Boolean | |
pdod Pointer | |
diReason UInt16 | |
ftyp Int32 | |
FtypExt UnicodeString | |
SqmDocId GUID | |
recurseCount Int32 | |
sdv Int32 | |
EdpiType UInt32 | |
nFib UInt16 | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "173",
"version": "6",
"level": "4",
"task": "7",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T22:34:52.793373700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Failed": "false",
"Canceled": "false",
"pdod": "0x2D8354AA030",
"diReason": "0",
"ftyp": "11",
"FtypExt": "dotm",
"SqmDocId": "{6fd9e7eb-191b-436f-9877-96790d494e3b}",
"recurseCount": "0",
"sdv": "7",
"EdpiType": " 2",
"nFib": "0",
"ElapsedTimeMicroseconds": "39080"
},
"message": ""
}
Event ID 174: tskSaveCmdSaveFileExStart_V6
#Fields #
| Name | Description |
|---|---|
recurseCount Int32 | |
SaveActionId GUID | |
SqmDocId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
SqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fOnBackgroundThread Boolean | |
currentScopeId UInt32 | |
parentScopeId UInt32 | |
pioldoc Pointer | |
saveInitiateKind Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "174",
"version": "6",
"level": "4",
"task": "13",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"recurseCount": "0",
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"SqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fOnBackgroundThread": "false",
"currentScopeId": "0",
"parentScopeId": "0",
"pioldoc": "0x0",
"saveInitiateKind": "0"
},
"message": ""
}
Event ID 175: tskSaveCmdSaveFileExEnd_V5
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | |
cmdRet Int32 | |
recurseCount Int32 | |
SaveActionId GUID | |
fCoAuthorable Boolean | |
fMergeRequired Boolean | |
currentScopeId UInt32 | |
parentScopeId UInt32 | |
QueueStatus UInt16 | |
fInCoherencyRetry Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "175",
"version": "5",
"level": "4",
"task": "13",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.706973800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "5623",
"cmdRet": "0",
"recurseCount": "0",
"SaveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"fCoAuthorable": "false",
"fMergeRequired": "false",
"currentScopeId": "0x0",
"parentScopeId": "0x0",
"QueueStatus": "0x0",
"fInCoherencyRetry": "false"
},
"message": ""
}
Event ID 176: tskLineLayoutLSErr_V1
#Fields #
| Name | Description |
|---|---|
lserr Int32 | |
dk UInt32 | |
fGoodClientDoc Boolean | |
wk UInt32 | |
fWwdLayout Boolean | |
fWwdVBA Boolean | |
sqmDocID GUID | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "176",
"version": "1",
"level": "2",
"task": "3",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lserr": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 177: tskPageLayoutPTSErr_V1
#Fields #
| Name | Description |
|---|---|
fserr Int32 | |
ipgd Int32 | |
dk UInt32 | |
fGoodClientDoc Boolean | |
wk UInt32 | |
fWwdLayout Boolean | |
fWwdVBA Boolean | |
sqmDocID GUID | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "177",
"version": "1",
"level": "2",
"task": "2",
"opcode": "19",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fserr": "0",
"ipgd": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 178: tskPageLayoutAbortPageView_V2
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
fInterrupt Boolean | |
sqmDocID GUID | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "178",
"version": "2",
"level": "3",
"task": "2",
"opcode": "20",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fInterrupt": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 179: tskDisplayRequestNonCommandListTexture
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "179",
"version": "0",
"level": "4",
"task": "4",
"opcode": "21",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 180: tskActivationPLMSuspensionBadFnInDocument
#Fields #
| Name | Description |
|---|---|
SuspensionID GUID | |
SQMDocID GUID | |
pdod Pointer | |
fn Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "180",
"version": "0",
"level": "4",
"task": "15",
"opcode": "26",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuspensionID": "{00000000-0000-0000-0000-000000000000}",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fn": "0"
},
"message": ""
}
Event ID 181: tskDisplayIgnoreAirSpaceTextureUpdateRequest
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "181",
"version": "0",
"level": "4",
"task": "4",
"opcode": "22",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 182: tskActivationPLMResumeOpenDocumentsStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "182",
"version": "0",
"level": "4",
"task": "15",
"opcode": "27",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 183: tskActivationPLMResumeOpenDocumentsEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "183",
"version": "0",
"level": "4",
"task": "15",
"opcode": "28",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 184: tskActivationPLMResumeDocumentStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "184",
"version": "0",
"level": "4",
"task": "15",
"opcode": "29",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 185: tskActivationPLMResumeDocumentEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "185",
"version": "0",
"level": "4",
"task": "15",
"opcode": "30",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 186: tskActivationPLMSuspendDocumentStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "186",
"version": "0",
"level": "4",
"task": "15",
"opcode": "31",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 187: tskActivationPLMSuspendDocumentEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "187",
"version": "0",
"level": "4",
"task": "15",
"opcode": "32",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 188: tskPageLayoutPTSAbort_V1
#Fields #
| Name | Description |
|---|---|
fserr Int32 | |
ipgd Int32 | |
dk UInt32 | |
fGoodClientDoc Boolean | |
wk UInt32 | |
fWwdLayout Boolean | |
fWwdVBA Boolean | |
sqmDocID GUID | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "188",
"version": "1",
"level": "4",
"task": "2",
"opcode": "21",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fserr": "0",
"ipgd": "0",
"dk": "0",
"fGoodClientDoc": "false",
"wk": "0",
"fWwdLayout": "false",
"fWwdVBA": "false",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 189: tskViewTypeWwdViewTypeChange_V2
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString | |
pdodMain Pointer | |
pmwd Pointer | |
pwwd Pointer | |
Old View Type UnicodeString | |
New View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "189",
"version": "2",
"level": "4",
"task": "1",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-14T22:34:54.334628700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{d73f5340-b345-000c-cfaf-40d745b3dc01}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "CmdPageViewOnCpSee",
"pdodMain": "0x2D835A758F0",
"pmwd": "0x2D8359F5FF0",
"pwwd": "0x2D8BAE2AD70",
"Old View Type": "Draft",
"New View Type": "Page"
},
"message": ""
}
Event ID 190: tskViewTypeAppActivate_V1
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString | |
pmwd Pointer | |
pwwd Pointer | |
hwnd Pointer | |
View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "190",
"version": "1",
"level": "4",
"task": "1",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 191: tskViewTypeAppDeactivate_V1
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString | |
pmwd Pointer | |
pwwd Pointer | |
hwnd Pointer | |
View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "191",
"version": "1",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 192: tskViewTypeActiveWwdChange_V1
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString | |
pmwdOld Pointer | |
pwwdOld Pointer | |
Old Wwd View Type UnicodeString | |
pmwdNew Pointer | |
pwwdNew Pointer | |
New Wwd View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "192",
"version": "1",
"level": "4",
"task": "1",
"opcode": "13",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": "",
"pmwdOld": "0x0",
"pwwdOld": "0x0",
"Old Wwd View Type": "",
"pmwdNew": "0x0",
"pwwdNew": "0x0",
"New Wwd View Type": ""
},
"message": ""
}
Event ID 193: tskDisplayWwdScrollPosition_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
Wwd View Type UnicodeString | |
x Scroll Int32 | |
y Scroll Int32 | |
Canvas Width Int32 | |
Canvas Height Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "193",
"version": "1",
"level": "4",
"task": "4",
"opcode": "23",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:51:50.471022700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"Wwd View Type": "Page",
"x Scroll": "92",
"y Scroll": "0",
"Canvas Width": "856",
"Canvas Height": "1090"
},
"message": ""
}
Event ID 194: tskFileOpen
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "194",
"version": "0",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 195: tskFileOpen195
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "195",
"version": "0",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 196: tskIdleHealthIdleTaskResponsivenessData_V2
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
IdleTaskName UnicodeString | |
fRtcGroupIdle Boolean | |
Bucket-0-50-Count UInt64 | |
Bucket-50-100-Count UInt64 | |
Bucket-100-150-Count UInt64 | |
Bucket-150-200-Count UInt64 | |
Bucket-200-350-Count UInt64 | |
Bucket-350-500-Count UInt64 | |
Bucket-500-1000-Count UInt64 | |
Bucket-1000-2000-Count UInt64 | |
Bucket-2000-5000-Count UInt64 | |
Bucket-5000-Max-Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "196",
"version": "2",
"level": "4",
"task": "23",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 197: tskMessageBarItemMessageBarItemAdd
#Fields #
| Name | Description |
|---|---|
mbit UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "197",
"version": "0",
"level": "4",
"task": "32",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mbit": "0"
},
"message": ""
}
Event ID 198: tskMessageBarItemMessageBarItemRemove
#Fields #
| Name | Description |
|---|---|
mbit UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "198",
"version": "0",
"level": "4",
"task": "32",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mbit": "0"
},
"message": ""
}
Event ID 220: tskFileOpenFileOpenStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "220",
"version": "0",
"level": "4",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 221: tskFileOpenFileOpenStop
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "221",
"version": "0",
"level": "4",
"task": "7",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 222: tskSaveBkgSaveAllowed_V2
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
Allowed Boolean | |
Reason UnicodeString | |
ExtraInfo UnicodeString | |
ReasonInt UInt32 | |
ContextTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "222",
"version": "2",
"level": "4",
"task": "13",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.701428700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x0",
"pdod": "0x1FF3A8B6000",
"Allowed": "true",
"Reason": "",
"ExtraInfo": "",
"ReasonInt": " 0",
"ContextTag": "0x13894CD"
},
"message": ""
}
Event ID 223: tskDisplayDrawE1o
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cp Int32 | |
E1oType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "223",
"version": "0",
"level": "4",
"task": "4",
"opcode": "24",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"E1oType": "0"
},
"message": ""
}
Event ID 224: tskDisplayDrawE2o_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cp Int32 | |
E2oType UInt32 | |
fAccessibilityRunning Boolean | |
wkWwd UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "224",
"version": "1",
"level": "4",
"task": "4",
"opcode": "25",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0",
"E2oType": "0",
"fAccessibilityRunning": "false",
"wkWwd": "0"
},
"message": ""
}
Event ID 225: tskDisplayDrawTable
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cpStart Int32 | |
cpEnd Int32 | |
iTap Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "225",
"version": "0",
"level": "4",
"task": "4",
"opcode": "26",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cpStart": "0",
"cpEnd": "0",
"iTap": "0"
},
"message": ""
}
Event ID 226: tskFastHitTestingFHTDiagnostics226_V4
#Fields #
| Name | Description |
|---|---|
facekind UnicodeString | |
faceLeft Int32 | |
faceTop Int32 | |
faceRight Int32 | |
faceBottom Int32 | |
layerHandle Int32 | |
tE2oSelected Int32 | |
fVisible Boolean | |
cChildren Int32 | |
fHitTestChildrenOnly Boolean | |
fPinToScreen Boolean | |
fIgnoreFace Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "226",
"version": "4",
"level": "4",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 227: tskFastHitTestingFHTDiagnostics227_V4
#Fields #
| Name | Description |
|---|---|
facekind UnicodeString | |
faceLeft Int32 | |
faceTop Int32 | |
faceRight Int32 | |
faceBottom Int32 | |
layerHandle Int32 | |
tE2oSelected Int32 | |
fVisible Boolean | |
cChildren Int32 | |
fHitTestChildrenOnly Boolean | |
fPinToScreen Boolean | |
fIgnoreFace Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "227",
"version": "4",
"level": "100",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 228: tskFastHitTestingFHTDiagnostics228_V4
#Fields #
| Name | Description |
|---|---|
facekind UnicodeString | |
faceLeft Int32 | |
faceTop Int32 | |
faceRight Int32 | |
faceBottom Int32 | |
layerHandle Int32 | |
tE2oSelected Int32 | |
fVisible Boolean | |
cChildren Int32 | |
fHitTestChildrenOnly Boolean | |
fPinToScreen Boolean | |
fIgnoreFace Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "228",
"version": "4",
"level": "200",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"facekind": "",
"faceLeft": "0",
"faceTop": "0",
"faceRight": "0",
"faceBottom": "0",
"layerHandle": "0",
"tE2oSelected": "0",
"fVisible": "false",
"cChildren": "0",
"fHitTestChildrenOnly": "false",
"fPinToScreen": "false",
"fIgnoreFace": "false"
},
"message": ""
}
Event ID 229: tskFastHitTestingFHTPerformance229_V1
#Fields #
| Name | Description |
|---|---|
ptX Int32 | |
ptY Int32 | |
fZoomMatches Boolean | |
dxeScroll Int32 | |
dyeScroll Int32 | |
tapLeft Int32 | |
tapTop Int32 | |
tapRight Int32 | |
tapBottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "229",
"version": "1",
"level": "4",
"task": "30",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"fZoomMatches": "false",
"dxeScroll": "0",
"dyeScroll": "0",
"tapLeft": "0",
"tapTop": "0",
"tapRight": "0",
"tapBottom": "0"
},
"message": ""
}
Event ID 230: tskFastHitTestingFHTPerformance
#Fields #
| Name | Description |
|---|---|
usec UInt64 | |
iPagesTested Int32 | |
iFacesTested Int32 | |
cChildrenTree Int32 | |
cChildrenHitPage Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "230",
"version": "0",
"level": "4",
"task": "30",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usec": "0",
"iPagesTested": "0",
"iFacesTested": "0",
"cChildrenTree": "0",
"cChildrenHitPage": "0"
},
"message": ""
}
Event ID 231: tskSaveCheckInterruptSave
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
Interrupt Boolean | |
Reason UnicodeString | |
ExtraInfo UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "231",
"version": "0",
"level": "50",
"task": "13",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715463700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x49819C",
"Interrupt": "false",
"Reason": "ContIdleCheck",
"ExtraInfo": "No Msg"
},
"message": ""
}
Event ID 232: tskSaveSaveResponsivenessIntervalStart
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "232",
"version": "0",
"level": "50",
"task": "13",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.709846200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": " 0"
},
"message": ""
}
Event ID 233: tskSaveSaveResponsivenessIntervalEnd
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "233",
"version": "0",
"level": "50",
"task": "13",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715459700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": " 0"
},
"message": ""
}
Event ID 234: tskIdleHealthIdleDeepSleepData_V1
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
Bucket-0-500-Count UInt64 | |
Bucket-500-1000-Count UInt64 | |
Bucket-1000-2000-Count UInt64 | |
Bucket-2000-5000-Count UInt64 | |
Bucket-5000-10000-Count UInt64 | |
Bucket-10000-20000-Count UInt64 | |
Bucket-20000-50000-Count UInt64 | |
Bucket-50000-100000-Count UInt64 | |
Bucket-100000-300000-Count UInt64 | |
Bucket-300000-Max-Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "234",
"version": "1",
"level": "4",
"task": "23",
"opcode": "14",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"Bucket-0-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-10000-Count": "0",
"Bucket-10000-20000-Count": "0",
"Bucket-20000-50000-Count": "0",
"Bucket-50000-100000-Count": "0",
"Bucket-100000-300000-Count": "0",
"Bucket-300000-Max-Count": "0"
},
"message": ""
}
Event ID 235: tskFileOpenDocStatsOnOpen_V1
#Fields #
| Name | Description |
|---|---|
E2oTotalCount Int32 | |
E2oChartCount Int32 | |
E2oSmartArtCount Int32 | |
E2oPictureCount Int32 | |
E2oGroupCount Int32 | |
E2oTextBoxCount Int32 | |
E2oOLECount Int32 | |
E2oOthersCount Int32 | |
E1oTotalCount Int32 | |
E1oPictureCount Int32 | |
E1oGroupCount Int32 | |
E1oTextBoxCount Int32 | |
E1oOthersCount Int32 | |
FootNotesCount Int32 | |
EndNotesCount Int32 | |
CommentsCount Int32 | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "235",
"version": "1",
"level": "4",
"task": "7",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E2oTotalCount": "0",
"E2oChartCount": "0",
"E2oSmartArtCount": "0",
"E2oPictureCount": "0",
"E2oGroupCount": "0",
"E2oTextBoxCount": "0",
"E2oOLECount": "0",
"E2oOthersCount": "0",
"E1oTotalCount": "0",
"E1oPictureCount": "0",
"E1oGroupCount": "0",
"E1oTextBoxCount": "0",
"E1oOthersCount": "0",
"FootNotesCount": "0",
"EndNotesCount": "0",
"CommentsCount": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 236: tskEvntMntActiveRule_V1
#Fields #
| Name | Description |
|---|---|
EvalFunc UnicodeString | |
RuleType UnicodeString | |
Rule Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "236",
"version": "1",
"level": "4",
"task": "31",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"EvalFunc": "",
"RuleType": "",
"Rule": "0"
},
"message": ""
}
Event ID 237: tskCoauthMergeCoAuthEditorsCount
#Fields #
| Name | Description |
|---|---|
editorsCount Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "237",
"version": "0",
"level": "4",
"task": "12",
"opcode": "66",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"editorsCount": "0"
},
"message": ""
}
Event ID 238: tskFileOpenFileOpenStart238_V1
#Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | |
Issue UnicodeString | |
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "238",
"version": "1",
"level": "4",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"Issue": "",
"HResult": "0"
},
"message": ""
}
Event ID 239: tskFileOpenFileOpenStart239_V2
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
CorruptionReason UnicodeString | |
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "239",
"version": "2",
"level": "3",
"task": "7",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"CorruptionReason": "",
"HResult": "0"
},
"message": ""
}
Event ID 241: tskSaveSaveRemoveFromBSIList
#Fields #
| Name | Description |
|---|---|
SQMDocID GUID | |
pdod Pointer | |
pdodSrc Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "241",
"version": "0",
"level": "100",
"task": "13",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.776406600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{de02dca2-0395-47a5-8000-0ca37c5b5a89}",
"pdod": "0x1FFDAFA4A90",
"pdodSrc": "0x1FF3A8B6000"
},
"message": ""
}
Event ID 242: tskSaveSaveAddToBSIList
#Fields #
| Name | Description |
|---|---|
SQMDocID GUID | |
pdodSrc Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "242",
"version": "0",
"level": "100",
"task": "13",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"pdodSrc": "0x0"
},
"message": ""
}
Event ID 243: tskSaveSaveIssue
#Fields #
| Name | Description |
|---|---|
Issue UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "243",
"version": "0",
"level": "4",
"task": "13",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Issue": ""
},
"message": ""
}
Event ID 244: tskSaveSaveUnknownFtyp
#Fields #
| Name | Description |
|---|---|
ftyp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "244",
"version": "0",
"level": "4",
"task": "13",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ftyp": "0"
},
"message": ""
}
Event ID 245: tskFileOpenDocStatsOnOpenTwo_V2
#Fields #
| Name | Description |
|---|---|
SectionsCount Int32 | |
E2oIvyChartCount Int32 | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "245",
"version": "2",
"level": "4",
"task": "7",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SectionsCount": "0",
"E2oIvyChartCount": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 246: tskFileOpenPageNumStatsOnOpen
#Fields #
| Name | Description |
|---|---|
Current Section Int32 | |
HeaderFooter Type Int32 | |
Has PAGE Field Boolean | |
Has NUMPAGES Field Boolean | |
Has Lego Boolean | |
PN Start On UInt64 | |
PN Format UInt8 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "246",
"version": "0",
"level": "4",
"task": "7",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Current Section": "0",
"HeaderFooter Type": "0",
"Has PAGE Field": "false",
"Has NUMPAGES Field": "false",
"Has Lego": "false",
"PN Start On": "0",
"PN Format": "0"
},
"message": ""
}
Event ID 247: tskFileOpenCloseDocument
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "247",
"version": "0",
"level": "4",
"task": "7",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 248: tskSaveSaveCoroutineStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "248",
"version": "0",
"level": "4",
"task": "13",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 249: tskSaveSaveCoroutineEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "249",
"version": "0",
"level": "4",
"task": "13",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 250: tskPageLayoutWordMarginsBeforeAfter
#Fields #
| Name | Description |
|---|---|
dxaLeftBefore UInt64 | |
dxaRightBefore UInt64 | |
dyaTopBefore Int64 | |
dyaBottomBefore Int64 | |
dzaGutterBefore UInt64 | |
dxaLeftAfter UInt64 | |
dxaRightAfter UInt64 | |
dyaTopAfter Int64 | |
dyaBottomAfter Int64 | |
dzaGutterAfter UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "250",
"version": "0",
"level": "4",
"task": "2",
"opcode": "26",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxaLeftBefore": "0",
"dxaRightBefore": "0",
"dyaTopBefore": "0",
"dyaBottomBefore": "0",
"dzaGutterBefore": "0",
"dxaLeftAfter": "0",
"dxaRightAfter": "0",
"dyaTopAfter": "0",
"dyaBottomAfter": "0",
"dzaGutterAfter": "0"
},
"message": ""
}
Event ID 251: tskPageLayoutWordPgSizeBeforeAfter
#Fields #
| Name | Description |
|---|---|
dmPaperBefore Int32 | |
dmPaperAfter Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "2",
"opcode": "27",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmPaperBefore": "0",
"dmPaperAfter": "0"
},
"message": ""
}
Event ID 252: tskPageLayoutWordColumnsBeforeAfter
#Fields #
| Name | Description |
|---|---|
iColumnPresetBefore Int32 | |
iColumnPresetAfter Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "252",
"version": "0",
"level": "4",
"task": "2",
"opcode": "28",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iColumnPresetBefore": "0",
"iColumnPresetAfter": "0"
},
"message": ""
}
Event ID 253: tskLineLayoutStartLineLayoutFlccrs_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Doc Kind UnicodeString | |
cp Int32 | |
GoodClient Boolean | |
FormatLineCallerStack UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "253",
"version": "1",
"level": "200",
"task": "3",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Doc Kind": "",
"cp": "0",
"GoodClient": "false",
"FormatLineCallerStack": ""
},
"message": ""
}
Event ID 254: tskSaveAlwaysSaveStartStop_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fStart Boolean | |
Reason UInt32 | |
csiErrorCode UInt32 | |
rtcState Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "254",
"version": "2",
"level": "4",
"task": "13",
"opcode": "27",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fStart": "false",
"Reason": "0",
"csiErrorCode": "0",
"rtcState": "0"
},
"message": ""
}
Event ID 255: tskSaveAlwaysSaveAllowed_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
Allowed Boolean | |
Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "255",
"version": "2",
"level": "4",
"task": "13",
"opcode": "28",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"Allowed": "false",
"Reason": "0"
},
"message": ""
}
Event ID 256: tskSaveAlwaysSaveStatusToggle_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fStart Boolean | |
Reason UInt32 | |
csiErrorCode UInt32 | |
rtcState Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "256",
"version": "2",
"level": "4",
"task": "13",
"opcode": "29",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fStart": "false",
"Reason": "0",
"csiErrorCode": "0",
"rtcState": "0"
},
"message": ""
}
Event ID 257: tskCoauthMergeMergeAllowed
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
MergeAllowed Boolean | |
NoMergeReason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "257",
"version": "0",
"level": "5",
"task": "12",
"opcode": "77",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:30.231514300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"MergeAllowed": "true",
"NoMergeReason": " 0"
},
"message": ""
}
Event ID 258: tskFileOpenFileOpenDocumentStart
#Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | |
currentScopeId UInt32 | |
parentScopeId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "258",
"version": "0",
"level": "4",
"task": "7",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"currentScopeId": "0",
"parentScopeId": "0"
},
"message": ""
}
Event ID 259: tskFileOpenFileOpenDocumentStop
#Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | |
currentScopeId UInt32 | |
parentScopeId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "259",
"version": "0",
"level": "4",
"task": "7",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"currentScopeId": "0",
"parentScopeId": "0"
},
"message": ""
}
Event ID 260: tskActivationExtendedExecutionDenied
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "260",
"version": "0",
"level": "4",
"task": "15",
"opcode": "33",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 261: tskActivationExtendedExecutionGranted
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "261",
"version": "0",
"level": "4",
"task": "15",
"opcode": "34",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 262: tskActivationExtendedExecutionRevoked
#Fields #
| Name | Description |
|---|---|
reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "262",
"version": "0",
"level": "4",
"task": "15",
"opcode": "35",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": "0"
},
"message": ""
}
Event ID 263: tskSaveAlwaysSavePerfParameters
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cSavesToMonitorForMovingAvg UInt16 | |
MovingAvgThreshold UInt32 | |
SaveSpike UInt32 | |
SaveSpikeElapsedTimeThreshold UInt32 | |
cGoodSavesToMonitor UInt16 | |
GoodSaveTimeThreshold UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "263",
"version": "0",
"level": "4",
"task": "13",
"opcode": "30",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cSavesToMonitorForMovingAvg": "0",
"MovingAvgThreshold": "0",
"SaveSpike": "0",
"SaveSpikeElapsedTimeThreshold": "0",
"cGoodSavesToMonitor": "0",
"GoodSaveTimeThreshold": "0"
},
"message": ""
}
Event ID 264: tskIdleActivityInfo_V1
#Fields #
| Name | Description |
|---|---|
fDeepSleep Boolean | |
TimeSinceLastInput-Msec UInt64 | |
cMouse Int32 | |
cTouch Int32 | |
cKeyboard Int32 | |
cIME Int32 | |
cCommand Int32 | |
cZoom Int32 | |
cScroll Int32 | |
cDM Int32 | |
cPen Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "264",
"version": "1",
"level": "4",
"task": "33",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDeepSleep": "false",
"TimeSinceLastInput-Msec": "0",
"cMouse": "0",
"cTouch": "0",
"cKeyboard": "0",
"cIME": "0",
"cCommand": "0",
"cZoom": "0",
"cScroll": "0",
"cDM": "0",
"cPen": "0"
},
"message": ""
}
Event ID 265: tskIdleHealthIdleTaskMsgPresentData_V2
#Fields #
| Name | Description |
|---|---|
ReportID UInt64 | |
IdleTaskName UnicodeString | |
fRtcGroupIdle Boolean | |
Bucket-0-50-Count UInt64 | |
Bucket-50-100-Count UInt64 | |
Bucket-100-150-Count UInt64 | |
Bucket-150-200-Count UInt64 | |
Bucket-200-350-Count UInt64 | |
Bucket-350-500-Count UInt64 | |
Bucket-500-1000-Count UInt64 | |
Bucket-1000-2000-Count UInt64 | |
Bucket-2000-5000-Count UInt64 | |
Bucket-5000-Max-Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "265",
"version": "2",
"level": "4",
"task": "23",
"opcode": "15",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReportID": "0",
"IdleTaskName": "",
"fRtcGroupIdle": "false",
"Bucket-0-50-Count": "0",
"Bucket-50-100-Count": "0",
"Bucket-100-150-Count": "0",
"Bucket-150-200-Count": "0",
"Bucket-200-350-Count": "0",
"Bucket-350-500-Count": "0",
"Bucket-500-1000-Count": "0",
"Bucket-1000-2000-Count": "0",
"Bucket-2000-5000-Count": "0",
"Bucket-5000-Max-Count": "0"
},
"message": ""
}
Event ID 266: tskFastHitTestingFHTDiagnostics_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
FailureType UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "266",
"version": "1",
"level": "3",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"FailureType": ""
},
"message": ""
}
Event ID 267: tskFastHitTestingFHTDiagnostics267_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
FailureType UnicodeString | |
cChildrenTree Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "267",
"version": "1",
"level": "3",
"task": "30",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"FailureType": "",
"cChildrenTree": "0"
},
"message": ""
}
Event ID 268: tskCoauthMerge
#Fields #
| Name | Description |
|---|---|
cbGzipUncompressed UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "268",
"version": "0",
"level": "4",
"task": "12",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cbGzipUncompressed": "0"
},
"message": ""
}
Event ID 269: tskSaveBinStmStatsOnSave
#Fields #
| Name | Description |
|---|---|
OpenId UInt32 | |
nFib UInt16 | |
nFibCurr UInt16 | |
StreamName UnicodeString | |
StreamSizeBytes Int64 | |
fIsOCSB Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "269",
"version": "0",
"level": "4",
"task": "13",
"opcode": "31",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenId": "0",
"nFib": "0",
"nFibCurr": "0",
"StreamName": "",
"StreamSizeBytes": "0",
"fIsOCSB": "false"
},
"message": ""
}
Event ID 270: tskSaveFibContentOnSave_V1
#Fields #
| Name | Description |
|---|---|
OpenId UInt32 | |
IndexIntoFibshared Int32 | |
Cb UInt64 | |
PercentOfTblStream Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "270",
"version": "1",
"level": "4",
"task": "13",
"opcode": "32",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenId": "0",
"IndexIntoFibshared": "0",
"Cb": "0",
"PercentOfTblStream": "0"
},
"message": ""
}
Event ID 271: tskSaveSaveActionStart
#Fields #
| Name | Description |
|---|---|
SaveInitiateTag UInt32 | |
SqmDocId GUID | |
SaveInitiateKind Int32 | |
SaveAs Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "271",
"version": "0",
"level": "4",
"task": "13",
"opcode": "33",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveInitiateTag": "0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"SaveInitiateKind": "0",
"SaveAs": "false"
},
"message": ""
}
Event ID 272: tskSaveSaveActionStop
#Fields #
| Name | Description |
|---|---|
SaveInitiateKind Int32 | |
SQMDocID GUID | |
BkgndSaveLaunch Boolean | |
FailureRetry Boolean | |
HrCommitFileIO Int32 | |
SaveOpResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "272",
"version": "0",
"level": "4",
"task": "13",
"opcode": "34",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveInitiateKind": "0",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"BkgndSaveLaunch": "false",
"FailureRetry": "false",
"HrCommitFileIO": "0",
"SaveOpResult": "0"
},
"message": ""
}
Event ID 273: tskIdleHealthIdleCidr
#Fields #
| Name | Description |
|---|---|
ContinueIdleReturn UnicodeString | |
Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "273",
"version": "0",
"level": "4",
"task": "23",
"opcode": "16",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ContinueIdleReturn": "",
"Count": "0"
},
"message": ""
}
Event ID 274: tskIdleHealthIdleCidrCr
#Fields #
| Name | Description |
|---|---|
CancellationReason UnicodeString | |
Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "274",
"version": "0",
"level": "4",
"task": "23",
"opcode": "17",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CancellationReason": "",
"Count": "0"
},
"message": ""
}
Event ID 275: tskCoauthMergeCoauthRsidCheck
#Fields #
| Name | Description |
|---|---|
crsidBase UInt32 | |
crsid0 UInt32 | |
crsid1 UInt32 | |
fBaseOver0 Boolean | |
fBaseOver1 Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "275",
"version": "0",
"level": "4",
"task": "12",
"opcode": "79",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"crsidBase": "0",
"crsid0": "0",
"crsid1": "0",
"fBaseOver0": "false",
"fBaseOver1": "false"
},
"message": ""
}
Event ID 276: tskIdleHealthIdleTaskCanRunReasonCollector
#Fields #
| Name | Description |
|---|---|
Pdod UInt64 | |
itcrr UInt64 | |
citcrr UInt64 | |
fit UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "276",
"version": "0",
"level": "4",
"task": "23",
"opcode": "18",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0",
"itcrr": "0",
"citcrr": "0",
"fit": "0"
},
"message": ""
}
Event ID 277: tskLoggingWordMetadata_V5
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pdod Pointer | |
pct Int32 | |
wkViewKind UInt32 | |
fNoMargPgvw Boolean | |
fAlwaysSaveEnabled Boolean | |
edpiType UInt32 | |
fTouch Boolean | |
fIme Boolean | |
msecUserInteractionTime UInt64 | |
fTrackChanges Boolean | |
pageCountBucket Int64 | |
fPageCountInProgress Boolean | |
wordCountBucket Int64 | |
lineCountBucket Int64 | |
paraCount Int64 | |
charCountBucket Int64 | |
charWsCountBucket Int64 | |
rsidCount UInt32 | |
lidEditMru UInt16 | |
szEditLids UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "277",
"version": "5",
"level": "4",
"task": "38",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-14T21:57:27.600172200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0x140C002",
"pdod": "0x2CA3EA2C1D0",
"pct": "100",
"wkViewKind": " 2048",
"fNoMargPgvw": "false",
"fAlwaysSaveEnabled": "false",
"edpiType": " 2",
"fTouch": "false",
"fIme": "false",
"msecUserInteractionTime": "4175",
"fTrackChanges": "false",
"pageCountBucket": "3",
"fPageCountInProgress": "false",
"wordCountBucket": "79",
"lineCountBucket": "22",
"paraCount": "17",
"charCountBucket": "451",
"charWsCountBucket": "517",
"rsidCount": " 5",
"lidEditMru": "0x0",
"szEditLids": ""
},
"message": ""
}
Event ID 278: tskFileOpenFileOpenViaBcsInitiate
#Fields #
| Name | Description |
|---|---|
extension UnicodeString | |
ftyp Int32 | |
fIsRetryOpen Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "278",
"version": "0",
"level": "4",
"task": "7",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"extension": "",
"ftyp": "0",
"fIsRetryOpen": "false"
},
"message": ""
}
Event ID 279: tskEncodedFileOpen
#Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "279",
"version": "0",
"level": "4",
"task": "40",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0"
},
"message": ""
}
Event ID 280: tskEncodedFileOpenEncodingChangeInitiated
#Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "280",
"version": "0",
"level": "4",
"task": "40",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0"
},
"message": ""
}
Event ID 281: tskEncodedFileOpenEncodingConfirmed
#Fields #
| Name | Description |
|---|---|
OriginalEncoding Int32 | |
ChangedEncoding Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "281",
"version": "0",
"level": "4",
"task": "40",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OriginalEncoding": "0",
"ChangedEncoding": "0"
},
"message": ""
}
Event ID 282: tskEncodedFileOpenEncodingChangeCancelled
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "282",
"version": "0",
"level": "4",
"task": "40",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 283: tskEncodedFileOpenEncodingDetectionResult
#Fields #
| Name | Description |
|---|---|
HROptional Int32 | |
CodePage Int32 | |
Confidence Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "283",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HROptional": "0",
"CodePage": "0",
"Confidence": "0"
},
"message": ""
}
Event ID 284: tskLineLayoutStartLineLayoutCreateLine
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "284",
"version": "0",
"level": "5",
"task": "3",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cp": "0"
},
"message": ""
}
Event ID 285: tskFileOpenPdodCreateMetroResult
#Fields #
| Name | Description |
|---|---|
hrResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "285",
"version": "0",
"level": "4",
"task": "7",
"opcode": "23",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hrResult": "0"
},
"message": ""
}
Event ID 286: tskIdleHealthIdleIntervalStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "286",
"version": "0",
"level": "5",
"task": "23",
"opcode": "19",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 287: tskIdleHealthIdleIntervalStop
#Fields #
| Name | Description |
|---|---|
dusecInterval UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "287",
"version": "0",
"level": "5",
"task": "23",
"opcode": "20",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dusecInterval": "0"
},
"message": ""
}
Event ID 288: tskIdleHealthIdleTaskIntervalStart
#Fields #
| Name | Description |
|---|---|
xszName UnicodeString | |
fRtcGroupIdle Boolean | |
fResume Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "288",
"version": "0",
"level": "5",
"task": "23",
"opcode": "21",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"fResume": "false"
},
"message": ""
}
Event ID 289: tskIdleHealthIdleTaskIntervalStop
#Fields #
| Name | Description |
|---|---|
xszName UnicodeString | |
fRtcGroupIdle Boolean | |
fPause Boolean | |
dusecTaskInterval UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "289",
"version": "0",
"level": "5",
"task": "23",
"opcode": "22",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"fPause": "false",
"dusecTaskInterval": "0"
},
"message": ""
}
Event ID 290: tskIdleHealthIdleTaskResponsivenessIntervalStart
#Fields #
| Name | Description |
|---|---|
xszName UnicodeString | |
fRtcGroupIdle Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "290",
"version": "0",
"level": "5",
"task": "23",
"opcode": "23",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false"
},
"message": ""
}
Event ID 291: tskIdleHealthIdleTaskResponsivenessIntervalStop
#Fields #
| Name | Description |
|---|---|
xszName UnicodeString | |
fRtcGroupIdle Boolean | |
dusecTaskInterval UInt64 | |
fMsgPresent Boolean | |
dusecMsg UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "291",
"version": "0",
"level": "5",
"task": "23",
"opcode": "24",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszName": "",
"fRtcGroupIdle": "false",
"dusecTaskInterval": "0",
"fMsgPresent": "false",
"dusecMsg": "0"
},
"message": ""
}
Event ID 292: tskIdleHealthIdleDeepSleepIntervalStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "292",
"version": "0",
"level": "5",
"task": "23",
"opcode": "25",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 293: tskIdleHealthIdleDeepSleepIntervalStop
#Fields #
| Name | Description |
|---|---|
fPause Boolean | |
dusecTaskInterval UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "293",
"version": "0",
"level": "5",
"task": "23",
"opcode": "26",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPause": "false",
"dusecTaskInterval": "0"
},
"message": ""
}
Event ID 294: tskDisplayDisplayBeginBatch_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
m_cInBatch Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "294",
"version": "1",
"level": "5",
"task": "4",
"opcode": "35",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"m_cInBatch": "0"
},
"message": ""
}
Event ID 295: tskDisplayDisplayEndBatch_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
m_cInBatch Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "295",
"version": "1",
"level": "5",
"task": "4",
"opcode": "36",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"m_cInBatch": "0"
},
"message": ""
}
Event ID 296: tskDisplayDisplayShadyBatchBegin
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "296",
"version": "0",
"level": "5",
"task": "4",
"opcode": "37",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 297: tskDisplayDisplayShadyBatchEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "297",
"version": "0",
"level": "5",
"task": "4",
"opcode": "38",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 298: tskDisplayDisplayFastReadingPaneBatchBegin_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "298",
"version": "1",
"level": "5",
"task": "4",
"opcode": "39",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0"
},
"message": ""
}
Event ID 299: tskDisplayDisplayFastReadingPaneBatchEnd_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "299",
"version": "1",
"level": "5",
"task": "4",
"opcode": "40",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0"
},
"message": ""
}
Event ID 300: tskSaveCheckInterruptSaveStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "13",
"opcode": "35",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.715344100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 301: tskTypingInsertLoopStateTransition_V1
#Fields #
| Name | Description |
|---|---|
insloopID UInt32 | |
pdod Pointer | |
docKind UnicodeString | |
cpFirst Int32 | |
stateFrom UInt32 | |
stateTo UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "301",
"version": "1",
"level": "4",
"task": "5",
"opcode": "20",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"insloopID": "0",
"pdod": "0x0",
"docKind": "",
"cpFirst": "0",
"stateFrom": "0",
"stateTo": "0"
},
"message": ""
}
Event ID 302: tskTypingLeaveInsertWM
#Fields #
| Name | Description |
|---|---|
WM UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "5",
"opcode": "21",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"WM": "0"
},
"message": ""
}
Event ID 303: tskViewTypeLastViewLogicUsed
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fDefaultViewSetting Boolean | |
fViewStateSavingLogicUsed Boolean | |
UserType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "1",
"opcode": "14",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fDefaultViewSetting": "false",
"fViewStateSavingLogicUsed": "false",
"UserType": "0"
},
"message": ""
}
Event ID 304: tskSaveSaveOnClosePrompt
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "13",
"opcode": "36",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 305: tskSaveAutosaveUserSetting
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pcoa Pointer | |
OptedIn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "13",
"opcode": "37",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcoa": "0x0",
"OptedIn": "false"
},
"message": ""
}
Event ID 306: tskSaveSaveOnClosePromptResponse
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
diReason UInt16 | |
AutoSaveState UInt32 | |
AutoCreateEventHandler UInt32 | |
idReturn Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "13",
"opcode": "38",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"diReason": "0",
"AutoSaveState": "0",
"AutoCreateEventHandler": "0",
"idReturn": "0"
},
"message": ""
}
Event ID 307: tskCoauthMergeOCSStartStop
#Fields #
| Name | Description |
|---|---|
fStart Boolean | |
pioldoc Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "307",
"version": "0",
"level": "4",
"task": "12",
"opcode": "80",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 308: tskSaveAutorecoverySaveOptions
#Fields #
| Name | Description |
|---|---|
AutorecoveryConfiguration UInt32 | |
AutorecoveryInterval UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "13",
"opcode": "39",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AutorecoveryConfiguration": "0",
"AutorecoveryInterval": "0"
},
"message": ""
}
Event ID 309: tskTypingSetDelayUpdateWwdToEndInsert
#Fields #
| Name | Description |
|---|---|
fDelayUpdateWwdToEndInsert Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "5",
"opcode": "22",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDelayUpdateWwdToEndInsert": "false"
},
"message": ""
}
Event ID 310: tskTypingDelayedUpdateWwdToEndInsert
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "5",
"opcode": "23",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 311: tskSaveBGSaveFallbackToFG_V1
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
fFallback Boolean | |
saveActionId GUID | |
pdod Pointer | |
ftyp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "311",
"version": "1",
"level": "4",
"task": "13",
"opcode": "40",
"keywords": 9223372036854776320,
"time_created": "2026-03-14T21:53:20.776402300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9020"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0x159F695",
"fFallback": "false",
"saveActionId": "{e096f64f-47dc-44a6-9f22-7787ba6a8efd}",
"pdod": "0x1FF3A8B6000",
"ftyp": "14"
},
"message": ""
}
Event ID 312: tskSaveFGSaveFallbackFailed
#Fields #
| Name | Description |
|---|---|
cmd Int32 | |
saveActionIdOrig GUID | |
fSaveAsAttempted Boolean | |
fEmergencySave Boolean | |
fBsiIsFirst Boolean | |
pbsi Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "13",
"opcode": "41",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmd": "0",
"saveActionIdOrig": "{00000000-0000-0000-0000-000000000000}",
"fSaveAsAttempted": "false",
"fEmergencySave": "false",
"fBsiIsFirst": "false",
"pbsi": "0x0"
},
"message": ""
}
Event ID 313: tskSaveDocUpdateEnablerStatus_V5
#Fields #
| Name | Description |
|---|---|
Pdod Pointer | |
DocumentSessionId UInt32 | |
AutoSaveActive Boolean | |
RtcActive Boolean | |
AutoSaveEnabled Boolean | |
RtcEnablementState UInt32 | |
FlowEnabled Boolean | |
AutoSaveDisallowReason UInt32 | |
AutoSaveBlockingReason UInt32 | |
CsiStatusOk Boolean | |
CsiErrorCode UInt32 | |
UserWantsAutoSave Boolean | |
GroupPolicyPermitsAutoSave Boolean | |
UpdateFlowDisabledReason UInt32 | |
FEnableAutosaveWin32ODSP Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "313",
"version": "5",
"level": "4",
"task": "13",
"opcode": "42",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DocumentSessionId": "0",
"AutoSaveActive": "false",
"RtcActive": "false",
"AutoSaveEnabled": "false",
"RtcEnablementState": "0",
"FlowEnabled": "false",
"AutoSaveDisallowReason": "0",
"AutoSaveBlockingReason": "0",
"CsiStatusOk": "false",
"CsiErrorCode": "0",
"UserWantsAutoSave": "false",
"GroupPolicyPermitsAutoSave": "false",
"UpdateFlowDisabledReason": "0",
"FEnableAutosaveWin32ODSP": "false"
},
"message": ""
}
Event ID 314: tskSaveCloseApp
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
message UInt32 | |
TAppWndProcCloseReturn Int32 | |
fInFreezeDryClose Boolean | |
fInForceEndSession Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "314",
"version": "0",
"level": "4",
"task": "13",
"opcode": "43",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"message": "0",
"TAppWndProcCloseReturn": "0",
"fInFreezeDryClose": "false",
"fInForceEndSession": "false"
},
"message": ""
}
Event ID 315: tskSaveAutoSaveFailed
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
ForegroundSave Boolean | |
saveActionId GUID | |
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "315",
"version": "0",
"level": "4",
"task": "13",
"opcode": "44",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"ForegroundSave": "false",
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0"
},
"message": ""
}
Event ID 316: tskTypingTypingMonitorOnTextChangeRendered
#Fields #
| Name | Description |
|---|---|
dmsecLastRenderedSinceEpoch UInt64 | |
dmsecLastCharacterTurnAround UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "316",
"version": "0",
"level": "4",
"task": "5",
"opcode": "24",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecLastRenderedSinceEpoch": "0",
"dmsecLastCharacterTurnAround": "0"
},
"message": ""
}
Event ID 317: tskTypingBsvBackspaceMergingParasWithCoauthLock
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pdim Pointer | |
fEquation Boolean | |
fTable Boolean | |
selcurCpFirst Int64 | |
selcurCpLim Int64 | |
caParaCpFirst Int64 | |
caParaCpLim Int64 | |
m_cpInsert Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "317",
"version": "0",
"level": "4",
"task": "5",
"opcode": "25",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pdim": "0x0",
"fEquation": "false",
"fTable": "false",
"selcurCpFirst": "0",
"selcurCpLim": "0",
"caParaCpFirst": "0",
"caParaCpLim": "0",
"m_cpInsert": "0"
},
"message": ""
}
Event ID 318: tskAnimationMissingDrbPlyr
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
drk UInt32 | |
drkx_drck UInt32 | |
pdodDk UInt32 | |
fTxbx Boolean | |
fMtxi Boolean | |
fTable Boolean | |
wkHwwd UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "318",
"version": "0",
"level": "2",
"task": "42",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"drk": "0",
"drkx_drck": "0",
"pdodDk": "0",
"fTxbx": "false",
"fMtxi": "false",
"fTable": "false",
"wkHwwd": "0"
},
"message": ""
}
Event ID 319: tskDisplayDisplayMwdWindowCreate
#Fields #
| Name | Description |
|---|---|
pmwd Pointer | |
dpiSys Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "319",
"version": "0",
"level": "4",
"task": "4",
"opcode": "41",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"dpiSys": "0"
},
"message": ""
}
Event ID 320: tskDisplayDisplayMwdPerMonitorDpi
#Fields #
| Name | Description |
|---|---|
pmwd Pointer | |
dpiPerMonitor Int32 | |
fAlreadySeen Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "320",
"version": "0",
"level": "4",
"task": "4",
"opcode": "42",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"dpiPerMonitor": "0",
"fAlreadySeen": "false"
},
"message": ""
}
Event ID 321: tskSaveAutoSaveIotReplaceSavedFileBeforeInterrupt
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pIPersisterTrans Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "321",
"version": "0",
"level": "4",
"task": "13",
"opcode": "45",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 322: tskSaveAutoSaveIotCopyLocalSavedFileToODCBeforeInterrupt
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pIPersisterTrans Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "322",
"version": "0",
"level": "4",
"task": "13",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 323: tskSaveAutoSaveIotServerRecordEventBeforeInterrupt
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pIPersisterTrans Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "323",
"version": "0",
"level": "4",
"task": "13",
"opcode": "47",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIPersisterTrans": "0x0"
},
"message": ""
}
Event ID 324: tskSaveAutoSaveInterruptSource
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
saveActionGuid GUID | |
dwSrcTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "324",
"version": "0",
"level": "4",
"task": "13",
"opcode": "48",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"dwSrcTag": "0"
},
"message": ""
}
Event ID 325: tskSaveInterruptSaveUntilTransactionCommitIsDone
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "325",
"version": "0",
"level": "4",
"task": "13",
"opcode": "49",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 326: tskLoggingCDodAggregatorConstruct
#Fields #
| Name | Description |
|---|---|
pDod Pointer | |
runTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "326",
"version": "0",
"level": "5",
"task": "38",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0"
},
"message": ""
}
Event ID 327: tskLoggingCDodAggregatorAdd
#Fields #
| Name | Description |
|---|---|
pDod Pointer | |
runTime Int64 | |
aggType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "327",
"version": "0",
"level": "5",
"task": "38",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0",
"aggType": "0"
},
"message": ""
}
Event ID 328: tskLoggingCDodAggregatorUpload
#Fields #
| Name | Description |
|---|---|
pDod Pointer | |
runTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "328",
"version": "0",
"level": "4",
"task": "38",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pDod": "0x0",
"runTime": "0"
},
"message": ""
}
Event ID 329: tskLoggingCDodAggregatorUploadAll
#Fields #
| Name | Description |
|---|---|
runTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "329",
"version": "0",
"level": "4",
"task": "38",
"opcode": "14",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"runTime": "0"
},
"message": ""
}
Event ID 330: tskSaveScheduleBackgroundCompatCheck
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "330",
"version": "0",
"level": "4",
"task": "13",
"opcode": "50",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 331: tskSaveFailedBackgroundCompatCheck
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "331",
"version": "0",
"level": "4",
"task": "13",
"opcode": "51",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 332: tskSaveForegroundCompatCheck
#Fields #
| Name | Description |
|---|---|
fCompatCheckSuccess Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "332",
"version": "0",
"level": "4",
"task": "13",
"opcode": "52",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fCompatCheckSuccess": "false"
},
"message": ""
}
Event ID 333: tskSaveInterruptSaveUntilStreamsCreationIsDone
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "333",
"version": "0",
"level": "4",
"task": "13",
"opcode": "53",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 334: tskDisplayDisplayCardPr
#Fields #
| Name | Description |
|---|---|
dypViewport UInt32 | |
dypCard UInt32 | |
pctRatioCardToViewport UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "334",
"version": "0",
"level": "4",
"task": "4",
"opcode": "43",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dypViewport": "0",
"dypCard": "0",
"pctRatioCardToViewport": "0"
},
"message": ""
}
Event ID 335: tskSaveLogVolumeData
#Fields #
| Name | Description |
|---|---|
formatDesc UnicodeString | |
fIsEjectable Boolean | |
fIsReadOnly Boolean | |
fIsEncrypted Boolean | |
fIsDirectory Boolean | |
fIsSymbolicLink Boolean | |
fileSaveType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "335",
"version": "0",
"level": "4",
"task": "13",
"opcode": "57",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"formatDesc": "",
"fIsEjectable": "false",
"fIsReadOnly": "false",
"fIsEncrypted": "false",
"fIsDirectory": "false",
"fIsSymbolicLink": "false",
"fileSaveType": "0"
},
"message": ""
}
Event ID 336: tskDocStatsOnClose_V1
#Fields #
| Name | Description |
|---|---|
picCount Int64 | |
tocCount Int64 | |
fBibliography Boolean | |
pageNumberFieldCount Int64 | |
citationCount Int64 | |
chartCount Int64 | |
ivyChartCount Int64 | |
bkmkRefCount Int64 | |
fHeader Boolean | |
fUserHasEdited Boolean | |
heading1Count Int64 | |
heading2Count Int64 | |
heading3Count Int64 | |
fIsReadOnly Boolean | |
smartArtCount Int64 | |
heading1Length Int64 | |
heading2Length Int64 | |
heading3Length Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "336",
"version": "1",
"level": "4",
"task": "44",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"picCount": "0",
"tocCount": "0",
"fBibliography": "false",
"pageNumberFieldCount": "0",
"citationCount": "0",
"chartCount": "0",
"ivyChartCount": "0",
"bkmkRefCount": "0",
"fHeader": "false",
"fUserHasEdited": "false",
"heading1Count": "0",
"heading2Count": "0",
"heading3Count": "0",
"fIsReadOnly": "false",
"smartArtCount": "0",
"heading1Length": "0",
"heading2Length": "0",
"heading3Length": "0"
},
"message": ""
}
Event ID 337: tskZRTMergeError
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
piErrorOut Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "337",
"version": "0",
"level": "4",
"task": "46",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"piErrorOut": "0"
},
"message": ""
}
Event ID 338: tskDocMergeMergeDocIdMismatchError_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
fPidim0 UInt32 | |
fPidim1 UInt32 | |
fPidimB UInt32 | |
fPidim0A UInt32 | |
fPidim1A UInt32 | |
fPidimBA UInt32 | |
did0BEns UInt64 | |
did1BEns UInt64 | |
didBBEns UInt64 | |
did0AEns UInt64 | |
did1AEns UInt64 | |
didBAEns UInt64 | |
did0AAgr UInt64 | |
did1AAgr UInt64 | |
didBAAgr UInt64 | |
fObjIn0 Boolean | |
fObjIn1 Boolean | |
fObjInB Boolean | |
fVclok Boolean | |
fBAncestOf0 Boolean | |
fBAncestOf1 Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "338",
"version": "1",
"level": "2",
"task": "39",
"opcode": "48",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fPidim0": "0",
"fPidim1": "0",
"fPidimB": "0",
"fPidim0A": "0",
"fPidim1A": "0",
"fPidimBA": "0",
"did0BEns": "0",
"did1BEns": "0",
"didBBEns": "0",
"did0AEns": "0",
"did1AEns": "0",
"didBAEns": "0",
"did0AAgr": "0",
"did1AAgr": "0",
"didBAAgr": "0",
"fObjIn0": "false",
"fObjIn1": "false",
"fObjInB": "false",
"fVclok": "false",
"fBAncestOf0": "false",
"fBAncestOf1": "false"
},
"message": ""
}
Event ID 339: tskDocMergeMergeDocIdMismatchWarning_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
fPidim0 UInt32 | |
fPidim1 UInt32 | |
fPidimB UInt32 | |
fPidim0A UInt32 | |
fPidim1A UInt32 | |
fPidimBA UInt32 | |
did0BEns UInt64 | |
did1BEns UInt64 | |
didBBEns UInt64 | |
did0AEns UInt64 | |
did1AEns UInt64 | |
didBAEns UInt64 | |
did0AAgr UInt64 | |
did1AAgr UInt64 | |
didBAAgr UInt64 | |
fObjIn0 Boolean | |
fObjIn1 Boolean | |
fObjInB Boolean | |
fVclok Boolean | |
fBAncestOf0 Boolean | |
fBAncestOf1 Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "339",
"version": "1",
"level": "3",
"task": "39",
"opcode": "49",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"fPidim0": "0",
"fPidim1": "0",
"fPidimB": "0",
"fPidim0A": "0",
"fPidim1A": "0",
"fPidimBA": "0",
"did0BEns": "0",
"did1BEns": "0",
"didBBEns": "0",
"did0AEns": "0",
"did1AEns": "0",
"didBAEns": "0",
"did0AAgr": "0",
"did1AAgr": "0",
"didBAAgr": "0",
"fObjIn0": "false",
"fObjIn1": "false",
"fObjInB": "false",
"fVclok": "false",
"fBAncestOf0": "false",
"fBAncestOf1": "false"
},
"message": ""
}
Event ID 340: tskEvntMntDateRuleInfo
#Fields #
| Name | Description |
|---|---|
dirulEval Int32 | |
lidKbd UInt16 | |
lidInstall UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "340",
"version": "0",
"level": "4",
"task": "31",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dirulEval": "0",
"lidKbd": "0",
"lidInstall": "0"
},
"message": ""
}
Event ID 341: tskFileOpenDocPrintMet
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fPrintMet Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "341",
"version": "0",
"level": "4",
"task": "7",
"opcode": "26",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fPrintMet": "false"
},
"message": ""
}
Event ID 342: tskEvntMntJpnEraNameSubstituted
#Fields #
| Name | Description |
|---|---|
expectedJpnEraYear UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "342",
"version": "0",
"level": "4",
"task": "31",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"expectedJpnEraYear": "0"
},
"message": ""
}
Event ID 343: tskEvntMntJpnEraYearAssigned
#Fields #
| Name | Description |
|---|---|
actualJpnEraYear UInt32 | |
gregorianYear UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "343",
"version": "0",
"level": "4",
"task": "31",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"actualJpnEraYear": "0",
"gregorianYear": "0"
},
"message": ""
}
Event ID 344: tskSaveHandleCoherencyFailure
#Fields #
| Name | Description |
|---|---|
FRet Boolean | |
Pdod Pointer | |
CersBefore UInt32 | |
CersAfter UInt32 | |
Cerdr UInt32 | |
Cerwr UInt32 | |
Cerfr UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "344",
"version": "0",
"level": "4",
"task": "13",
"opcode": "59",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FRet": "false",
"Pdod": "0x0",
"CersBefore": "0",
"CersAfter": "0",
"Cerdr": "0",
"Cerwr": "0",
"Cerfr": "0"
},
"message": ""
}
Event ID 345: tskSaveCoherencyFailureRetryResult
#Fields #
| Name | Description |
|---|---|
FSuccess Boolean | |
Pdod Pointer | |
ElapsedTimeMs UInt64 | |
CsiErrorCode UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "345",
"version": "0",
"level": "4",
"task": "13",
"opcode": "60",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FSuccess": "false",
"Pdod": "0x0",
"ElapsedTimeMs": "0",
"CsiErrorCode": "0"
},
"message": ""
}
Event ID 346: tskSaveUpdateCoherencyErrorRetryStatus
#Fields #
| Name | Description |
|---|---|
Pdod Pointer | |
CersBefore UInt32 | |
CersAfter UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "346",
"version": "0",
"level": "4",
"task": "13",
"opcode": "61",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"CersBefore": "0",
"CersAfter": "0"
},
"message": ""
}
Event ID 347: tskSaveCoherencyFailureRetrySaveStart
#Fields #
| Name | Description |
|---|---|
Pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "347",
"version": "0",
"level": "4",
"task": "13",
"opcode": "62",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0"
},
"message": ""
}
Event ID 348: tskSaveCoherencyFailureRetrySaveEnd
#Fields #
| Name | Description |
|---|---|
Pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "348",
"version": "0",
"level": "4",
"task": "13",
"opcode": "63",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0"
},
"message": ""
}
Event ID 349: tskSaveMergeFailureResult
#Fields #
| Name | Description |
|---|---|
Pdod Pointer | |
fMergeExecuted Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "349",
"version": "0",
"level": "4",
"task": "13",
"opcode": "64",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"fMergeExecuted": "false"
},
"message": ""
}
Event ID 350: tskFileOpenSyncProgressUIToggledOn
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "350",
"version": "0",
"level": "4",
"task": "7",
"opcode": "27",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 351: tskDisplayUpdatePrE2oView
#Fields #
| Name | Description |
|---|---|
fAccessibilityRunning Boolean | |
wkWwd UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "4",
"opcode": "44",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAccessibilityRunning": "false",
"wkWwd": "0"
},
"message": ""
}
Event ID 352: tskCRtcRevertReplayKposScopeCreateCRtcRevertReplayKposScope
#Fields #
| Name | Description |
|---|---|
saveActionGuid GUID | |
pdod Pointer | |
fIgnore Boolean | |
fBeginBatchDone Boolean | |
fAttachKposDone Boolean | |
fRevertDone Boolean | |
fDoDestroy Boolean | |
usecExecTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "49",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fIgnore": "false",
"fBeginBatchDone": "false",
"fAttachKposDone": "false",
"fRevertDone": "false",
"fDoDestroy": "false",
"usecExecTime": "0"
},
"message": ""
}
Event ID 353: tskCRtcRevertReplayKposScopeDestroyCRtcRevertReplayKposScope
#Fields #
| Name | Description |
|---|---|
saveActionGuid GUID | |
pdod Pointer | |
fEndBatchDone Boolean | |
fInvokeKposDone Boolean | |
fReplayDone Boolean | |
fDoDestroy Boolean | |
fSubDocDeleted Boolean | |
usecCreateTime Int64 | |
usecDestroyTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "353",
"version": "0",
"level": "4",
"task": "49",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"fEndBatchDone": "false",
"fInvokeKposDone": "false",
"fReplayDone": "false",
"fDoDestroy": "false",
"fSubDocDeleted": "false",
"usecCreateTime": "0",
"usecDestroyTime": "0"
},
"message": ""
}
Event ID 354: tskNextSaveTimeOverflow
#Fields #
| Name | Description |
|---|---|
usecNextSaveTime UInt64 | |
usecMostRecentSaveEvent UInt64 | |
m_dusecDynamicSaveCooldownInterval UInt64 | |
usecNow UInt64 | |
m_grfdysgLastAdjustedReason Int32 | |
fOcsMode Boolean | |
m_dusecDefaultSaveCooldownInterval UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "354",
"version": "0",
"level": "3",
"task": "51",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usecNextSaveTime": "0",
"usecMostRecentSaveEvent": "0",
"m_dusecDynamicSaveCooldownInterval": "0",
"usecNow": "0",
"m_grfdysgLastAdjustedReason": "0",
"fOcsMode": "false",
"m_dusecDefaultSaveCooldownInterval": "0"
},
"message": ""
}
Event ID 355: tskFileOpenZrtCompleted
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "355",
"version": "0",
"level": "4",
"task": "7",
"opcode": "28",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1400: tskCoauthSaveCoauthCmdSaveStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1400",
"version": "0",
"level": "4",
"task": "21",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1401: tskCoauthSaveCoauthCmdSaveEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 | |
cmdRet Int32 | |
fDidSave Boolean | |
fDidAutosave Boolean | |
fConflict Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1401",
"version": "0",
"level": "4",
"task": "21",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0",
"cmdRet": "0",
"fDidSave": "false",
"fDidAutosave": "false",
"fConflict": "false"
},
"message": ""
}
Event ID 1402: tskCoauthSaveCoauthCmdSaveCheckConflictStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1402",
"version": "0",
"level": "4",
"task": "21",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1403: tskCoauthSaveCoauthCmdSaveCheckConflictEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1403",
"version": "0",
"level": "4",
"task": "21",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1404: tskCoauthSaveCoauthCmdSaveCsfExecStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1404",
"version": "0",
"level": "4",
"task": "21",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1405: tskCoauthSaveCoauthCmdSaveCsfExecEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1405",
"version": "0",
"level": "4",
"task": "21",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1406: tskCoauthSaveCoauthCmdSaveClearOverlayStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1406",
"version": "0",
"level": "4",
"task": "21",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1407: tskCoauthSaveCoauthCmdSaveClearOverlayEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1407",
"version": "0",
"level": "4",
"task": "21",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1408: tskCoauthSaveCoauthCmdSavePreemptiveSaveStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1408",
"version": "0",
"level": "4",
"task": "21",
"opcode": "18",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1409: tskCoauthSaveCoauthCmdSavePreemptiveSaveEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1409",
"version": "0",
"level": "4",
"task": "21",
"opcode": "19",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1410: tskCoauthSaveCoauthCmdSaveContentApplyStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1410",
"version": "0",
"level": "4",
"task": "21",
"opcode": "20",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1411: tskCoauthSaveCoauthCmdSaveContentApplyEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1411",
"version": "0",
"level": "4",
"task": "21",
"opcode": "21",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1412: tskCoauthSaveCoauthCmdSaveMetadataStart_V1
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
sqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fCoAuthorable Boolean | |
fOnBackgroundThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1412",
"version": "1",
"level": "4",
"task": "21",
"opcode": "22",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1413: tskCoauthSaveCoauthCmdSaveMetadataEnd_V1
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
fMergeRequired Boolean | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1413",
"version": "1",
"level": "4",
"task": "21",
"opcode": "23",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1414: tskCoauthSaveCoauthCmdSaveCaldApplyStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1414",
"version": "0",
"level": "4",
"task": "21",
"opcode": "24",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1415: tskCoauthSaveCoauthCmdSaveCaldApplyEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1415",
"version": "0",
"level": "4",
"task": "21",
"opcode": "25",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1416: tskCoauthSaveCoauthSaveTransCommit_V1
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1416",
"version": "1",
"level": "4",
"task": "21",
"opcode": "26",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1417: tskCoauthSaveCoauthLoadTransCommit_V1
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1417",
"version": "1",
"level": "4",
"task": "21",
"opcode": "28",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1418: tskCoauthSaveCoauthTransCommit_V2
#Fields #
| Name | Description |
|---|---|
HResult Int32 | |
PersisterType UInt32 | |
fIsMerge Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1418",
"version": "2",
"level": "5",
"task": "21",
"opcode": "27",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0",
"PersisterType": "0",
"fIsMerge": "false"
},
"message": ""
}
Event ID 1419: tskCoauthMergeCoauthMergeTransCommit1419_V2
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1419",
"version": "2",
"level": "4",
"task": "12",
"opcode": "67",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1420: tskCoauthMergePLMSuspendDuringMergeTrans
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1420",
"version": "0",
"level": "4",
"task": "12",
"opcode": "68",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1421: tskCoauthSaveCoauthSaveTransInit_V1
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1421",
"version": "1",
"level": "4",
"task": "21",
"opcode": "31",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1422: tskCoauthSaveCoauthLoadTransInit_V1
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1422",
"version": "1",
"level": "4",
"task": "21",
"opcode": "32",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1423: tskCoauthMergeCoauthMergeTransInit_V1
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1423",
"version": "1",
"level": "4",
"task": "12",
"opcode": "73",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1424: tskCoauthMergeCoauthUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1424",
"version": "0",
"level": "5",
"task": "12",
"opcode": "69",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1425: tskCoauthMergeCoauthEditorsUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1425",
"version": "0",
"level": "5",
"task": "12",
"opcode": "70",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1426: tskCoauthMergeCoauthMarkFileUnmergeable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1426",
"version": "0",
"level": "4",
"task": "12",
"opcode": "74",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1427: tskCoauthSaveCoauthSaveFailedTryAgain
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1427",
"version": "0",
"level": "4",
"task": "21",
"opcode": "37",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1428: tskCoauthLoadCoauthLoadPdodStart
#Fields #
| Name | Description |
|---|---|
SaveActionId GUID | |
Caller UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1428",
"version": "0",
"level": "4",
"task": "34",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"Caller": ""
},
"message": ""
}
Event ID 1429: tskCoauthLoadCoauthLoadPdodEnd
#Fields #
| Name | Description |
|---|---|
SaveActionId GUID | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1429",
"version": "0",
"level": "4",
"task": "34",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SaveActionId": "{00000000-0000-0000-0000-000000000000}",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1430: tskCoauthSaveCoauthSaveCsiUploadSucceeded
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
sqmDocID GUID | |
SqmDocLocation Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1430",
"version": "0",
"level": "4",
"task": "21",
"opcode": "46",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"SqmDocLocation": "0"
},
"message": ""
}
Event ID 1431: tskCoauthSaveCoauthSaveCsiUploadResult_V2
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pioldoc Pointer | |
GuidFileId GUID | |
sqmDocID GUID | |
SqmDocLocation Int32 | |
FirstEditId GUID | |
CsiErrorCode UInt32 | |
EditToUploadTimeMicroseconds UInt64 | |
FirstRtcBrkEditId GUID | |
RtcBrkEditToUploadTimeMicroseconds UInt64 | |
fRtcEnabled Boolean | |
fAutoSaveEnabled Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1431",
"version": "2",
"level": "4",
"task": "21",
"opcode": "47",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pioldoc": "0x0",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocID": "{00000000-0000-0000-0000-000000000000}",
"SqmDocLocation": "0",
"FirstEditId": "{00000000-0000-0000-0000-000000000000}",
"CsiErrorCode": "0",
"EditToUploadTimeMicroseconds": "0",
"FirstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"RtcBrkEditToUploadTimeMicroseconds": "0",
"fRtcEnabled": "false",
"fAutoSaveEnabled": "false"
},
"message": ""
}
Event ID 1432: tskCoauthMergeCoauthMergeTransCommit
#Fields #
| Name | Description |
|---|---|
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1432",
"version": "0",
"level": "4",
"task": "12",
"opcode": "67",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HResult": "0"
},
"message": ""
}
Event ID 1433: tskCoauthMergeCoauthAllConflictsRejected
#Fields #
| Name | Description |
|---|---|
result Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1433",
"version": "0",
"level": "4",
"task": "12",
"opcode": "78",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"result": "false"
},
"message": ""
}
Event ID 1434: tskCoauthMergeCoauthMergePropertyConflict
#Fields #
| Name | Description |
|---|---|
PropertyType UnicodeString | |
fChoose0 Boolean | |
fComparedWithBase Boolean | |
Endpoint UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1434",
"version": "0",
"level": "4",
"task": "12",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PropertyType": "",
"fChoose0": "false",
"fComparedWithBase": "false",
"Endpoint": "0"
},
"message": ""
}
Event ID 1435: tskCoauthSaveAutoSaveTimeSinceLastScheduleLoad
#Fields #
| Name | Description |
|---|---|
dmsecSinceLastScheduleLoad UInt64 | |
fPendingLoad Boolean | |
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1435",
"version": "0",
"level": "4",
"task": "21",
"opcode": "58",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecSinceLastScheduleLoad": "0",
"fPendingLoad": "false",
"pdod": "0x0"
},
"message": ""
}
Event ID 1436: tskCoauthSaveIsSubscribedForAutoSave
#Fields #
| Name | Description |
|---|---|
IsSubscribed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1436",
"version": "0",
"level": "4",
"task": "21",
"opcode": "59",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsSubscribed": "false"
},
"message": ""
}
Event ID 1437: tskCoauthMergeCoauthMergeTableConflict
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
dk UInt32 | |
iCmdDoDiffTag UInt32 | |
ITap UInt32 | |
TMI UInt8 | |
fCancelDel Boolean | |
itc UInt32 | |
fMarkIns Boolean | |
fMarkDel Boolean | |
parid0CpCell UInt32 | |
cpFirst UInt32 | |
cpLim UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1437",
"version": "0",
"level": "4",
"task": "12",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": "0",
"iCmdDoDiffTag": "0",
"ITap": "0",
"TMI": "0",
"fCancelDel": "false",
"itc": "0",
"fMarkIns": "false",
"fMarkDel": "false",
"parid0CpCell": "0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1438: tskCoauthMergeCoauthMarkCaConflict
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
dk UInt32 | |
cpFirst UInt32 | |
cpLim UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1438",
"version": "0",
"level": "4",
"task": "12",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dk": "0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1439: tskCoauthMergeCoauthTextboxEdit
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
dk UInt32 | |
parid UInt32 | |
cpFirst UInt32 | |
cpLim UInt32 | |
isGroup Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1439",
"version": "0",
"level": "4",
"task": "12",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"dk": "0",
"parid": "0",
"cpFirst": "0",
"cpLim": "0",
"isGroup": "false"
},
"message": ""
}
Event ID 1440: tskCoauthMergeFastCoauthDocumentLoaded
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1440",
"version": "0",
"level": "4",
"task": "12",
"opcode": "16",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1441: tskCoauthSaveCoauthContentInOCSSave
#Fields #
| Name | Description |
|---|---|
ContentElement UInt32 | |
CoauthUserAction UInt32 | |
EditToSaveTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1441",
"version": "0",
"level": "4",
"task": "21",
"opcode": "63",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ContentElement": "0",
"CoauthUserAction": "0",
"EditToSaveTime": "0"
},
"message": ""
}
Event ID 1442: tskCoauthMergeCoauthMergeTableUserBadScenario
#Fields #
| Name | Description |
|---|---|
iCmdDoDiffTag UInt32 | |
scenarioType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1442",
"version": "0",
"level": "4",
"task": "12",
"opcode": "17",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iCmdDoDiffTag": "0",
"scenarioType": "0"
},
"message": ""
}
Event ID 1456: tskCoauthMergeCoauthPresenceUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1456",
"version": "0",
"level": "5",
"task": "12",
"opcode": "71",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1457: tskCoauthMergeCoauthStatusUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1457",
"version": "0",
"level": "5",
"task": "12",
"opcode": "72",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1458: tskCoauthSaveAccessModeUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1458",
"version": "0",
"level": "5",
"task": "21",
"opcode": "29",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1459: tskCoauthSaveReadOnlyReasonsUpdateAvailable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1459",
"version": "0",
"level": "5",
"task": "21",
"opcode": "30",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1460: tskCoauthSaveCoauthStart_V2
#Fields #
| Name | Description |
|---|---|
fStart Boolean | |
fIsAlwaysSave Boolean | |
SqmDocId GUID | |
DocumentId UInt64 | |
pioldoc Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1460",
"version": "2",
"level": "4",
"task": "21",
"opcode": "33",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"fIsAlwaysSave": "false",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"DocumentId": "0",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 1461: tskCoauthSaveCoauthCmdSavePostMergeStart_V2
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
sqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fCoAuthorable Boolean | |
fOnBackgroundThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1461",
"version": "2",
"level": "4",
"task": "21",
"opcode": "35",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1462: tskCoauthSaveCoauthCmdSavePostMergeEnd_V2
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
fMergeRequired Boolean | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1462",
"version": "2",
"level": "4",
"task": "21",
"opcode": "36",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1463: tskCoauthMergeCoauthCOAHrEnsureMergeStart_V2
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
ftyp Int32 | |
fSaveAs Boolean | |
sqmDocLocation Int32 | |
AuthorsCount Int32 | |
fMultipleAuthors Boolean | |
fCoAuthorable Boolean | |
fOnBackgroundThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1463",
"version": "2",
"level": "4",
"task": "12",
"opcode": "75",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"ftyp": "0",
"fSaveAs": "false",
"sqmDocLocation": "0",
"AuthorsCount": "0",
"fMultipleAuthors": "false",
"fCoAuthorable": "false",
"fOnBackgroundThread": "false"
},
"message": ""
}
Event ID 1464: tskCoauthMergeCoauthCOAHrEnsureMergeEnd_V2
#Fields #
| Name | Description |
|---|---|
saveActionId GUID | |
sqmDocId GUID | |
fMergeRequired Boolean | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1464",
"version": "2",
"level": "4",
"task": "12",
"opcode": "76",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"saveActionId": "{00000000-0000-0000-0000-000000000000}",
"sqmDocId": "{00000000-0000-0000-0000-000000000000}",
"fMergeRequired": "false",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1465: tskCoauthSaveCoauthCOAIoldocBranchDownloadToWorkingCopyStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1465",
"version": "0",
"level": "4",
"task": "21",
"opcode": "38",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1466: tskCoauthSaveCoauthCOAIoldocBranchDownloadToWorkingCopyEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1466",
"version": "0",
"level": "4",
"task": "21",
"opcode": "39",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1467: tskCoauthSaveCoauthCOAIoldocHrPostMergeHrCommitStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1467",
"version": "0",
"level": "4",
"task": "21",
"opcode": "40",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1468: tskCoauthSaveCoauthCOAIoldocHrPostMergeHrCommitEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1468",
"version": "0",
"level": "4",
"task": "21",
"opcode": "41",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1469: tskCoauthSaveCoauthCOAIoldocTransactedCopyFileToCacheStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1469",
"version": "0",
"level": "4",
"task": "21",
"opcode": "42",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1470: tskCoauthSaveCoauthCOAIoldocTransactedCopyFileToCacheEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1470",
"version": "0",
"level": "4",
"task": "21",
"opcode": "43",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1471: tskCoauthSaveCoauthHrRecordSaveIoldocStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1471",
"version": "0",
"level": "4",
"task": "21",
"opcode": "44",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T22:56:23.802012800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "2584",
"thread_id": "9480"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1472: tskCoauthSaveCoauthHrRecordSaveIoldocEnd
#Fields #
| Name | Description |
|---|---|
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1472",
"version": "0",
"level": "4",
"task": "21",
"opcode": "45",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T22:56:23.802299500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "2584",
"thread_id": "9480"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ElapsedTimeMicroseconds": "283"
},
"message": ""
}
Event ID 1473: tskCoauthLoadCoauthLoadPdodCached
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1473",
"version": "0",
"level": "4",
"task": "34",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 1474: tskCoauthLoadCoauthLoadPdodMissed
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
Type Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1474",
"version": "0",
"level": "4",
"task": "34",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"Type": "0"
},
"message": ""
}
Event ID 1475: tskCoauthLoadCoauthLoadCachedPdodUsed
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
Type Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1475",
"version": "0",
"level": "4",
"task": "34",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"Type": "0"
},
"message": ""
}
Event ID 1476: tskCoauthLoadReportCoauthLoadUnresponsivenessBucketedData_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
SqmDocId GUID | |
cIntervals UInt32 | |
Bucket1-Min-Msec UInt64 | |
Bucket2-Min-Msec UInt64 | |
Bucket3-Min-Msec UInt64 | |
Bucket4-Min-Msec UInt64 | |
Bucket5-Min-Msec UInt64 | |
Bucket6-Min-Msec UInt64 | |
Bucket7-Min-Msec UInt64 | |
Bucket8-Min-Msec UInt64 | |
Bucket9-Min-Msec UInt64 | |
Bucket10-Min-Msec UInt64 | |
Bucket1-Count UInt64 | |
Bucket2-Count UInt64 | |
Bucket3-Count UInt64 | |
Bucket4-Count UInt64 | |
Bucket5-Count UInt64 | |
Bucket6-Count UInt64 | |
Bucket7-Count UInt64 | |
Bucket8-Count UInt64 | |
Bucket9-Count UInt64 | |
Bucket10-Count UInt64 | |
TopUnresponsiveDuration1-Msec UInt64 | |
TopUnresponsiveDuration2-Msec UInt64 | |
TopUnresponsiveDuration3-Msec UInt64 | |
TopUnresponsiveDuration4-Msec UInt64 | |
TopUnresponsiveDuration5-Msec UInt64 | |
IStm UInt32 | |
SqmDocLocation UInt32 | |
AuthorCount UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1476",
"version": "1",
"level": "4",
"task": "34",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0",
"IStm": "0",
"SqmDocLocation": "0",
"AuthorCount": "0"
},
"message": ""
}
Event ID 1477: tskCoauthLoadCoauthLoadResponsivenessIntervalStart
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1477",
"version": "0",
"level": "50",
"task": "34",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1478: tskCoauthLoadCoauthLoadResponsivenessIntervalEnd
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1478",
"version": "0",
"level": "50",
"task": "34",
"opcode": "15",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1479: tskCoauthSaveIOTransactionStart_V1
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pIOTransaction Pointer | |
iotType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1479",
"version": "1",
"level": "4",
"task": "21",
"opcode": "48",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIOTransaction": "0x0",
"iotType": "0"
},
"message": ""
}
Event ID 1480: tskCoauthSaveIOTransactionEnd_V7
#Fields #
| Name | Description |
|---|---|
pdodSrc Pointer | |
pIOTransaction Pointer | |
iotType UInt32 | |
iotFinalState UInt32 | |
fMergeSucceeded Boolean | |
fConflict Boolean | |
fLoad Boolean | |
fCoroutineLoadDone Boolean | |
fCoroutineSaveDone Boolean | |
fDelayedLoadOnCoroutine Boolean | |
ElapsedTimeMicroseconds UInt64 | |
persisterTransactionType UInt32 | |
persisterType UInt32 | |
strMeasurement UnicodeString | |
fDocmCoauthEnabled Boolean | |
ftyp UInt32 | |
coauthDisableReason UInt32 | |
exclusiveLockReason UInt32 | |
saveInitiateKind |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1480",
"version": "7",
"level": "4",
"task": "21",
"opcode": "49",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodSrc": "0x0",
"pIOTransaction": "0x0",
"iotType": "0",
"iotFinalState": "0",
"fMergeSucceeded": "false",
"fConflict": "false",
"fLoad": "false",
"fCoroutineLoadDone": "false",
"fCoroutineSaveDone": "false",
"fDelayedLoadOnCoroutine": "false",
"ElapsedTimeMicroseconds": "0",
"persisterTransactionType": "0",
"persisterType": "0",
"strMeasurement": "",
"fDocmCoauthEnabled": "false",
"ftyp": "0",
"coauthDisableReason": "0",
"exclusiveLockReason": "0",
"saveInitiateKind": "0"
},
"message": ""
}
Event ID 1481: tskCoauthSaveCoauthMergeConflict_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
docKind UInt32 | |
pcoctxt Pointer | |
iCmdDoDiffTag UInt32 | |
parid0OfCpFirst UInt32 | |
parid0OfCpLast UInt32 | |
parid1OfCpFirst UInt32 | |
parid1OfCpLast UInt32 | |
pcob Pointer | |
fChangeIn0 Boolean | |
fChangeIn1 Boolean | |
fInserted0 Boolean | |
fInserted1 Boolean | |
fDeleted0 Boolean | |
fDeleted1 Boolean | |
fDeletedPara0 Boolean | |
fDeletedPara1 Boolean | |
dcpChange0 UInt32 | |
dcpChange1 UInt32 | |
fConflictVisible Boolean | |
cpFirst Int32 | |
cpLim Int32 | |
cpFirst1 Int32 | |
cpLim1 Int32 | |
cpLim0ForChange0 Int32 | |
cpLim0ForChange1 Int32 | |
parid0ForChange0 UInt32 | |
parid0ForChange1 UInt32 | |
dcpConflict Int32 | |
cEntriesInResolvePane UInt32 | |
cxchPara0 UInt32 | |
elapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1481",
"version": "1",
"level": "4",
"task": "21",
"opcode": "50",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"docKind": "0",
"pcoctxt": "0x0",
"iCmdDoDiffTag": "0",
"parid0OfCpFirst": "0",
"parid0OfCpLast": "0",
"parid1OfCpFirst": "0",
"parid1OfCpLast": "0",
"pcob": "0x0",
"fChangeIn0": "false",
"fChangeIn1": "false",
"fInserted0": "false",
"fInserted1": "false",
"fDeleted0": "false",
"fDeleted1": "false",
"fDeletedPara0": "false",
"fDeletedPara1": "false",
"dcpChange0": "0",
"dcpChange1": "0",
"fConflictVisible": "false",
"cpFirst": "0",
"cpLim": "0",
"cpFirst1": "0",
"cpLim1": "0",
"cpLim0ForChange0": "0",
"cpLim0ForChange1": "0",
"parid0ForChange0": "0",
"parid0ForChange1": "0",
"dcpConflict": "0",
"cEntriesInResolvePane": "0",
"cxchPara0": "0",
"elapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1482: tskCoauthSaveCoauthMergeChange
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
docKind UInt32 | |
pcoctxt Pointer | |
fChangeInLocalDoc Boolean | |
dcpChange Int32 | |
elapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1482",
"version": "0",
"level": "4",
"task": "21",
"opcode": "51",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"docKind": "0",
"pcoctxt": "0x0",
"fChangeInLocalDoc": "false",
"dcpChange": "0",
"elapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1483: tskCoauthSaveCoauthIOTStateChange
#Fields #
| Name | Description |
|---|---|
iotType UInt32 | |
iotStatePrev UInt32 | |
iotStateNext UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1483",
"version": "0",
"level": "5",
"task": "21",
"opcode": "52",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iotType": "0",
"iotStatePrev": "0",
"iotStateNext": "0"
},
"message": ""
}
Event ID 1484: tskCoauthSaveAddToMruStart
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pioldoc Pointer | |
fReadOnly Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1484",
"version": "0",
"level": "4",
"task": "21",
"opcode": "53",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pioldoc": "0x0",
"fReadOnly": "false"
},
"message": ""
}
Event ID 1485: tskCoauthSaveAddToMruEnd
#Fields #
| Name | Description |
|---|---|
Tag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1485",
"version": "0",
"level": "4",
"task": "21",
"opcode": "54",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0"
},
"message": ""
}
Event ID 1486: tskCoauthSaveAutoSaveOffInFastModel_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
guidSqmDocId GUID | |
cpMac Int32 | |
fAutoSaveOff Boolean | |
fUserRequestedSave Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1486",
"version": "1",
"level": "4",
"task": "21",
"opcode": "55",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0",
"fAutoSaveOff": "false",
"fUserRequestedSave": "false"
},
"message": ""
}
Event ID 1487: tskCoauthSaveAutoSaveOffInFastModelSaveAndRefresh
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
guidSqmDocId GUID | |
cpMac Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1487",
"version": "0",
"level": "4",
"task": "21",
"opcode": "56",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0"
},
"message": ""
}
Event ID 1488: tskCoauthSaveAutoSaveOffInFastModelDismissal
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
guidSqmDocId GUID | |
cpMac Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1488",
"version": "0",
"level": "4",
"task": "21",
"opcode": "57",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"guidSqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cpMac": "0"
},
"message": ""
}
Event ID 1489: tskCoauthSaveBeginCmdIoldoc
#Fields #
| Name | Description |
|---|---|
pioldoc Pointer | |
pioldocOther Pointer | |
iolcmd UInt32 | |
iolcmdPrev UInt32 | |
dwCallsite UInt32 | |
fOnMainThread Boolean | |
fValidThread Boolean | |
hrBeginCmd Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1489",
"version": "0",
"level": "4",
"task": "21",
"opcode": "60",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pioldoc": "0x0",
"pioldocOther": "0x0",
"iolcmd": "0",
"iolcmdPrev": "0",
"dwCallsite": "0",
"fOnMainThread": "false",
"fValidThread": "false",
"hrBeginCmd": "0"
},
"message": ""
}
Event ID 1490: tskCoauthSaveCmdCompletedIoldoc
#Fields #
| Name | Description |
|---|---|
pioldoc Pointer | |
iolcmd UInt32 | |
iolcmdPrev UInt32 | |
dwCallsite UInt32 | |
fOnMainThread Boolean | |
fValidThread Boolean | |
hrMisc Int32 | |
hrRecordEvent Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1490",
"version": "0",
"level": "4",
"task": "21",
"opcode": "61",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pioldoc": "0x0",
"iolcmd": "0",
"iolcmdPrev": "0",
"dwCallsite": "0",
"fOnMainThread": "false",
"fValidThread": "false",
"hrMisc": "0",
"hrRecordEvent": "0"
},
"message": ""
}
Event ID 1491: tskCoauthSaveAutoSaveOffDueToTransactionTakingTooLong
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
iotType UInt32 | |
persisterTransactionType UInt32 | |
persisterType UInt32 | |
iotState UInt32 | |
fFocusLost Boolean | |
saveInitiateKind Int32 | |
ElapsedTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1491",
"version": "0",
"level": "4",
"task": "21",
"opcode": "62",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"iotType": "0",
"persisterTransactionType": "0",
"persisterType": "0",
"iotState": "0",
"fFocusLost": "false",
"saveInitiateKind": "0",
"ElapsedTimeMicroseconds": "0"
},
"message": ""
}
Event ID 1492: tskCoauthMergeFileLabelingCapabilityChanged
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1492",
"version": "0",
"level": "5",
"task": "12",
"opcode": "82",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1493: tskCoauthMergeFileLabelUpdated
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1493",
"version": "0",
"level": "5",
"task": "12",
"opcode": "81",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1494: tskCoauthSaveOnNeedTransitionInResult
#Fields #
| Name | Description |
|---|---|
lcrTransitionIn Int32 → int |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1494",
"version": "0",
"level": "4",
"task": "21",
"opcode": "64",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lcrTransitionIn": "0"
},
"message": ""
}
Event ID 1495: tskCoauthMergeFileLabelUpdatedEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1495",
"version": "0",
"level": "5",
"task": "12",
"opcode": "83",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1496: tskCoauthMergeOnIMsoDrmDocumentUpdate
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1496",
"version": "0",
"level": "5",
"task": "12",
"opcode": "84",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1497: tskCoauthMergeCompleteTransitionOutOfTrustBoundary
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1497",
"version": "0",
"level": "5",
"task": "12",
"opcode": "85",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1498: tskCoauthMergeHandleFileCapabilityChangeResult
#Fields #
| Name | Description |
|---|---|
BrickTransitionType UInt32 → unsignedInt | |
BrickSaveResult UInt32 → unsignedInt |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1498",
"version": "0",
"level": "5",
"task": "12",
"opcode": "86",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"BrickTransitionType": "0",
"BrickSaveResult": "0"
},
"message": ""
}
Event ID 1500: tskFontMathFontEnumStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1500",
"version": "0",
"level": "4",
"task": "25",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1501: tskFontMathFontEnumEnd
#Fields #
| Name | Description |
|---|---|
fSuccess Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1501",
"version": "0",
"level": "4",
"task": "25",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSuccess": "false"
},
"message": ""
}
Event ID 1502: tskFontAddFontsToPafStart_V1
#Fields #
| Name | Description |
|---|---|
MainThread Boolean | |
NumFontsInTable Int32 | |
Reason UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1502",
"version": "1",
"level": "4",
"task": "25",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MainThread": "false",
"NumFontsInTable": "0",
"Reason": ""
},
"message": ""
}
Event ID 1503: tskFontAddFontsToPafEnd
#Fields #
| Name | Description |
|---|---|
NumFontsInTable Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1503",
"version": "0",
"level": "4",
"task": "25",
"opcode": "13",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NumFontsInTable": "0"
},
"message": ""
}
Event ID 1504: tskFontResolveFont
#Fields #
| Name | Description |
|---|---|
FontNameRequested UnicodeString | |
CharSetRequested UInt32 | |
FTCResolved Int32 | |
FontNameResolved UnicodeString | |
CharSetResolved UInt32 | |
FTCResolvedFrom UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1504",
"version": "0",
"level": "4",
"task": "25",
"opcode": "14",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontNameRequested": "",
"CharSetRequested": "0",
"FTCResolved": "0",
"FontNameResolved": "",
"CharSetResolved": "0",
"FTCResolvedFrom": ""
},
"message": ""
}
Event ID 1505: tskFontFoundHagakiFont
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
CharSet UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1505",
"version": "0",
"level": "4",
"task": "25",
"opcode": "15",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"CharSet": "0"
},
"message": ""
}
Event ID 1506: tskFontFoundBitmapFont
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
CharSet UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1506",
"version": "0",
"level": "4",
"task": "25",
"opcode": "16",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"CharSet": "0"
},
"message": ""
}
Event ID 1507: tskFontFontDropdownFontApplied_V1
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
pdodMain Pointer | |
dk UInt32 | |
cpStart Int64 | |
cpLim Int64 | |
CpMacPdod Int64 | |
Lid UInt16 | |
Style UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1507",
"version": "1",
"level": "4",
"task": "25",
"opcode": "17",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1508: tskFontFontForNewMailNote
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1508",
"version": "0",
"level": "4",
"task": "25",
"opcode": "18",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": ""
},
"message": ""
}
Event ID 1509: tskFontLoadFontDataSuccess
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1509",
"version": "0",
"level": "4",
"task": "25",
"opcode": "19",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1510: tskFontSkipBadFce
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
Fticm Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1510",
"version": "0",
"level": "5",
"task": "25",
"opcode": "20",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"Fticm": "0"
},
"message": ""
}
Event ID 1511: tskFontRecoverFromBadFce
#Fields #
| Name | Description |
|---|---|
NameFromLogfont UnicodeString | |
FaceNameLoaded UnicodeString | |
Fticm Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1511",
"version": "0",
"level": "4",
"task": "25",
"opcode": "21",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NameFromLogfont": "",
"FaceNameLoaded": "",
"Fticm": "0"
},
"message": ""
}
Event ID 1512: tskFontInvalLayoutAfterBadFce
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1512",
"version": "0",
"level": "4",
"task": "25",
"opcode": "22",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1513: tskFontFontNameSizeApplied
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
FontSize UInt32 | |
pdodMain Pointer | |
dk UInt32 | |
cpStart Int64 | |
cpLim Int64 | |
CpMacPdod Int64 | |
Lid UInt16 | |
Style UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1513",
"version": "0",
"level": "4",
"task": "25",
"opcode": "23",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"FontSize": "0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1514: tskFontFontSizeApplied
#Fields #
| Name | Description |
|---|---|
FontSize Float | |
pdodMain Pointer | |
dk UInt32 | |
cpStart Int64 | |
cpLim Int64 | |
CpMacPdod Int64 | |
Lid UInt16 | |
Style UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1514",
"version": "0",
"level": "4",
"task": "25",
"opcode": "24",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontSize": "0.0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1515: tskFontFontDlgFontApplied
#Fields #
| Name | Description |
|---|---|
FontNameAscii UnicodeString | |
FontNameFE UnicodeString | |
FontNameOther UnicodeString | |
FontNameBi UnicodeString | |
FontSizeAscii Float | |
FontSizeBi Float | |
pdodMain Pointer | |
dk UInt32 | |
cpStart Int64 | |
cpLim Int64 | |
CpMacPdod Int64 | |
Lid UInt16 | |
Style UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1515",
"version": "0",
"level": "4",
"task": "25",
"opcode": "25",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontNameAscii": "",
"FontNameFE": "",
"FontNameOther": "",
"FontNameBi": "",
"FontSizeAscii": "0.0",
"FontSizeBi": "0.0",
"pdodMain": "0x0",
"dk": "0",
"cpStart": "0",
"cpLim": "0",
"CpMacPdod": "0",
"Lid": "0",
"Style": ""
},
"message": ""
}
Event ID 1516: tskFontDefaultFontOpen
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1516",
"version": "0",
"level": "4",
"task": "25",
"opcode": "26",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 1517: tskFontDefaultFontCloseDoc
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString | |
FontSize Float | |
pdodMain Pointer | |
CharacterCount Int64 | |
WordCount Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1517",
"version": "0",
"level": "4",
"task": "25",
"opcode": "27",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": "",
"FontSize": "0.0",
"pdodMain": "0x0",
"CharacterCount": "0",
"WordCount": "0"
},
"message": ""
}
Event ID 1518: tskFontLoadEmbeddedFont
#Fields #
| Name | Description |
|---|---|
EmbedLicenseType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1518",
"version": "0",
"level": "4",
"task": "25",
"opcode": "28",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"EmbedLicenseType": "0"
},
"message": ""
}
Event ID 1519: tskFontCreateFontFailure
#Fields #
| Name | Description |
|---|---|
NameFromLogfont UnicodeString | |
FaceNameLoaded UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1519",
"version": "0",
"level": "5",
"task": "25",
"opcode": "29",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NameFromLogfont": "",
"FaceNameLoaded": ""
},
"message": ""
}
Event ID 1520: tskFontSelectFontFailure
#Fields #
| Name | Description |
|---|---|
FontName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1520",
"version": "0",
"level": "5",
"task": "25",
"opcode": "30",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FontName": ""
},
"message": ""
}
Event ID 1521: tskFontFontErr
#Fields #
| Name | Description |
|---|---|
ErrorKind UInt16 | |
GetLastError UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1521",
"version": "0",
"level": "5",
"task": "25",
"opcode": "32",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ErrorKind": "0",
"GetLastError": "0"
},
"message": ""
}
Event ID 1522: tskFontNoValidFontSelected
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1522",
"version": "0",
"level": "5",
"task": "25",
"opcode": "33",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1600: tskKeyEventKeyDownUIStart_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1600",
"version": "1",
"level": "4",
"task": "24",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1601: tskKeyEventKeyDownUIEnd_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1601",
"version": "1",
"level": "4",
"task": "24",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1602: tskKeyEventKeyUpUIStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1602",
"version": "0",
"level": "4",
"task": "24",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1603: tskKeyEventKeyUpUIEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1603",
"version": "0",
"level": "4",
"task": "24",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1604: tskKeyEventCharRecievedUIStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1604",
"version": "0",
"level": "4",
"task": "24",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1605: tskKeyEventCharRecievedUIEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1605",
"version": "0",
"level": "4",
"task": "24",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1606: tskKeyEventKeyDownAppStart_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1606",
"version": "1",
"level": "4",
"task": "24",
"opcode": "16",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1607: tskKeyEventKeyDownAppEnd_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1607",
"version": "1",
"level": "4",
"task": "24",
"opcode": "17",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1608: tskKeyEventKeyUpAppStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1608",
"version": "0",
"level": "4",
"task": "24",
"opcode": "18",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1609: tskKeyEventKeyUpAppEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1609",
"version": "0",
"level": "4",
"task": "24",
"opcode": "19",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1610: tskKeyEventCharRecievedAppStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1610",
"version": "0",
"level": "4",
"task": "24",
"opcode": "20",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1611: tskKeyEventCharRecievedAppEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1611",
"version": "0",
"level": "4",
"task": "24",
"opcode": "21",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1612: tskKeyEventCKeyEventHandlersKmcHandleCharacterStart_V1
#Fields #
| Name | Description |
|---|---|
correlationId Int32 | |
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1612",
"version": "1",
"level": "4",
"task": "24",
"opcode": "22",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469343100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationId": "72",
"logId": " 0"
},
"message": ""
}
Event ID 1613: tskKeyEventCKeyEventHandlersKmcHandleCharacterEnd_V1
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 | |
correlationId Int32 | |
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1613",
"version": "1",
"level": "4",
"task": "24",
"opcode": "23",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0",
"correlationId": "0",
"logId": "0"
},
"message": ""
}
Event ID 1614: tskKeyEventCKeyEventHandlersKmcHandleSystemCharacterStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1614",
"version": "0",
"level": "4",
"task": "24",
"opcode": "24",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1615: tskKeyEventCKeyEventHandlersKmcHandleSystemCharacterEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1615",
"version": "0",
"level": "4",
"task": "24",
"opcode": "25",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1616: tskKeyEventCKeyEventHandlersKmcHandleKeyDownStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1616",
"version": "0",
"level": "4",
"task": "24",
"opcode": "26",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1617: tskKeyEventCKeyEventHandlersKmcHandleKeyDownEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1617",
"version": "0",
"level": "4",
"task": "24",
"opcode": "27",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1618: tskKeyEventCKeyEventHandlersKmcHandleSystemKeyDownStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1618",
"version": "0",
"level": "4",
"task": "24",
"opcode": "28",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1619: tskKeyEventCKeyEventHandlersKmcHandleSystemKeyDownEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1619",
"version": "0",
"level": "4",
"task": "24",
"opcode": "29",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1620: tskKeyEventCKeyEventHandlersKmcHandleKeyUpStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1620",
"version": "0",
"level": "4",
"task": "24",
"opcode": "30",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1621: tskKeyEventCKeyEventHandlersKmcHandleKeyUpEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1621",
"version": "0",
"level": "4",
"task": "24",
"opcode": "31",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1622: tskKeyEventCKeyEventHandlersKmcHandleSystemKeyUpStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1622",
"version": "0",
"level": "4",
"task": "24",
"opcode": "32",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1623: tskKeyEventCKeyEventHandlersKmcHandleSystemKeyUpEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
kmcHandled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1623",
"version": "0",
"level": "4",
"task": "24",
"opcode": "33",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"kmcHandled": "0"
},
"message": ""
}
Event ID 1624: tskKeyEventCKeyEventHandlersAirspaceRenderComplete_V1
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
correlationIdStart Int32 | |
correlationIdEnd Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1624",
"version": "1",
"level": "4",
"task": "24",
"opcode": "34",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:49.773274900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "3080"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0x7D345E",
"correlationIdStart": "32",
"correlationIdEnd": "32"
},
"message": ""
}
Event ID 1625: tskKeyEventCKeyEventHandlersKmcHandleMessagePostDelay
#Fields #
| Name | Description |
|---|---|
messagePostDelayMs Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1625",
"version": "0",
"level": "4",
"task": "24",
"opcode": "35",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.469189800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"messagePostDelayMs": "0"
},
"message": ""
}
Event ID 1626: tskKeyEventCKeyEventHandlersEventWetChangesPdod_V2
#Fields #
| Name | Description |
|---|---|
correlationIdStart Int32 | |
correlationIdEnd Int32 | |
fAlwaysSaveEnabledAndOn Boolean | |
fWetChangesInDocument Boolean | |
fDuringOrAfterRecentAutoSave Boolean | |
fInOcsMode Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1626",
"version": "2",
"level": "4",
"task": "24",
"opcode": "36",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:50.473815900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationIdStart": "72",
"correlationIdEnd": "72",
"fAlwaysSaveEnabledAndOn": "false",
"fWetChangesInDocument": "false",
"fDuringOrAfterRecentAutoSave": "false",
"fInOcsMode": "false"
},
"message": ""
}
Event ID 1627: tskTypingTypingMonitorWholeCharacterPerformance_V4
#Fields #
| Name | Description |
|---|---|
dmsecTypingTime UInt64 | |
dmsecMessagePostDelay UInt64 | |
dmsecTypedChar UInt64 | |
dmsecAirspaceRender UInt64 | |
DocumentId UInt64 | |
SqmDocId GUID | |
DocKind UnicodeString | |
SrcDocKind UnicodeString | |
fAlwaysSaveEnabledAndOn Boolean | |
fWetChangesInDocument Boolean | |
fDuringOrAfterRecentAutoSave Boolean | |
fInOcsMode Boolean | |
fInWPM | |
fChunking Boolean | |
fUIMCharacter Boolean | |
Pdod Pointer | |
Lid UInt16 | |
fShaping Boolean | |
fAcetate Boolean | |
fAbdkRMAtn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{daf0b914-9c1c-450a-81b2-fea7244f6ffa}",
"event_source_name": "",
"event_id": "1627",
"version": "4",
"level": "4",
"task": "5",
"opcode": "26",
"keywords": 9223372036854775816,
"time_created": "2026-03-14T21:51:49.773288200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "3080"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dmsecTypingTime": "16",
"dmsecMessagePostDelay": "0",
"dmsecTypedChar": "10",
"dmsecAirspaceRender": "8",
"DocumentId": "1346715326",
"SqmDocId": "{b4541f5c-1e9a-4fef-95d1-6c3c3b192773}",
"DocKind": "Doc",
"SrcDocKind": "Nil Pdod",
"fAlwaysSaveEnabledAndOn": "false",
"fWetChangesInDocument": "false",
"fDuringOrAfterRecentAutoSave": "false",
"fInOcsMode": "false",
"fInWPM": "false",
"fChunking": "false",
"fUIMCharacter": "false",
"Pdod": "0x1FF3C67AD60",
"Lid": "1033",
"fShaping": "true",
"fAcetate": "false",
"fAbdkRMAtn": "false"
},
"message": ""
}
Event ID 1700: tskSoftKeyboardSoftKeyboardLocked
#Fields #
| Name | Description |
|---|---|
softKeyboardIsLocked Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1700",
"version": "0",
"level": "4",
"task": "26",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"softKeyboardIsLocked": "false"
},
"message": ""
}
Event ID 1701: tskTouchGrippyTouchDown
#Fields #
| Name | Description |
|---|---|
touchX Int32 | |
touchY Int32 | |
grippyX Int32 | |
grippyY Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1701",
"version": "0",
"level": "4",
"task": "27",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"touchX": "0",
"touchY": "0",
"grippyX": "0",
"grippyY": "0"
},
"message": ""
}
Event ID 1702: tskTouchGrippyTouchUp
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1702",
"version": "0",
"level": "4",
"task": "27",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1703: tskTouchGrippyFrustrationBoundsReset
#Fields #
| Name | Description |
|---|---|
distance Double | |
newTouchX Int32 | |
newTouchY Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1703",
"version": "0",
"level": "4",
"task": "27",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"distance": "0.0",
"newTouchX": "0",
"newTouchY": "0"
},
"message": ""
}
Event ID 1704: tskTouchGrippySelectionChanged
#Fields #
| Name | Description |
|---|---|
cpStart Int64 | |
cpLim Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1704",
"version": "0",
"level": "5",
"task": "27",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpStart": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1705: tskTouchTableTouchTableRowStart_V1
#Fields #
| Name | Description |
|---|---|
CP Int32 | |
Double Tap Boolean | |
Nested Level (itap) Int32 | |
Max Rows Int32 | |
Max Columns Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1705",
"version": "1",
"level": "4",
"task": "29",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0",
"Double Tap": "false",
"Nested Level (itap)": "0",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1706: tskTouchTableTouchTableRowEnd
#Fields #
| Name | Description |
|---|---|
Index Int32 | |
Valid Row Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1706",
"version": "0",
"level": "4",
"task": "29",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0",
"Valid Row": "false"
},
"message": ""
}
Event ID 1707: tskTouchTableTouchTableColumnStart_V1
#Fields #
| Name | Description |
|---|---|
CP Int32 | |
Double Tap Boolean | |
Nested Level (itap) Int32 | |
Max Rows Int32 | |
Max Columns Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1707",
"version": "1",
"level": "4",
"task": "29",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0",
"Double Tap": "false",
"Nested Level (itap)": "0",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1708: tskTouchTableTouchTableColumnEnd
#Fields #
| Name | Description |
|---|---|
Index Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1708",
"version": "0",
"level": "4",
"task": "29",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0"
},
"message": ""
}
Event ID 1709: tskTouchTableTouchTableSelectStart_V1
#Fields #
| Name | Description |
|---|---|
Double Tap Boolean | |
Max Rows Int32 | |
Max Columns Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1709",
"version": "1",
"level": "4",
"task": "29",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Double Tap": "false",
"Max Rows": "0",
"Max Columns": "0"
},
"message": ""
}
Event ID 1710: tskTouchTableTouchTableSelectEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1710",
"version": "0",
"level": "4",
"task": "29",
"opcode": "15",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1711: tskTouchTapTouchUITap
#Fields #
| Name | Description |
|---|---|
PointerId UInt32 | |
CanDM Int32 | |
UITEH Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1711",
"version": "0",
"level": "4",
"task": "36",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PointerId": "0",
"CanDM": "0",
"UITEH": "0"
},
"message": ""
}
Event ID 1712: tskTouchTapTouchAppTapStart
#Fields #
| Name | Description |
|---|---|
Gesture Int32 | |
PointerId UInt32 | |
InteractionState UInt32 | |
PointX Int32 | |
PointY Int32 | |
DeltaX Int32 | |
DeltaY Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1712",
"version": "0",
"level": "4",
"task": "36",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Gesture": "0",
"PointerId": "0",
"InteractionState": "0",
"PointX": "0",
"PointY": "0",
"DeltaX": "0",
"DeltaY": "0"
},
"message": ""
}
Event ID 1713: tskTouchTapTouchAppTapEnd_V1
#Fields #
| Name | Description |
|---|---|
Gesture Int32 | |
PointerId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1713",
"version": "1",
"level": "4",
"task": "36",
"opcode": "13",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Gesture": "0",
"PointerId": "0"
},
"message": ""
}
Event ID 1714: tskTouchTapStartDirectManipulation
#Fields #
| Name | Description |
|---|---|
InputType UInt32 | |
PointerId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1714",
"version": "0",
"level": "4",
"task": "36",
"opcode": "14",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InputType": "0",
"PointerId": "0"
},
"message": ""
}
Event ID 1715: tskTouchTapHitTargetElementApp
#Fields #
| Name | Description |
|---|---|
teh UInt32 | |
InputType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1715",
"version": "0",
"level": "4",
"task": "36",
"opcode": "15",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"teh": "0",
"InputType": "0"
},
"message": ""
}
Event ID 1716: tskTouchTapHitTargetElementUI
#Fields #
| Name | Description |
|---|---|
uiteh UInt32 | |
InputType UInt32 | |
PointerId UInt32 | |
CanDM Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1716",
"version": "0",
"level": "4",
"task": "36",
"opcode": "16",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"uiteh": "0",
"InputType": "0",
"PointerId": "0",
"CanDM": "0"
},
"message": ""
}
Event ID 1800: tskResumeReadingDisplayCallout
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1800",
"version": "0",
"level": "4",
"task": "28",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1801: tskResumeReadingCalloutClickedOn
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1801",
"version": "0",
"level": "4",
"task": "28",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1900: tskPolicyTipsSubmitTask
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1900",
"version": "0",
"level": "5",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1901: tskPolicyTipsSubmitTask1901
#Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | |
m_sppts Boolean | |
m_sppts.bstrText UnicodeString | |
m_spptcc Boolean | |
m_spptcc.segid UInt32 | |
m_spptcc.iseg UInt32 | |
m_spptcc.dcpRelative UInt64 | |
m_spptcc.dcpSegmentStart UInt64 | |
m_spptcc.dcpSegmentEnd UInt64 | |
m_spptcc.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1901",
"version": "0",
"level": "5",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1902: tskPolicyTipsHandlePolicyTipsTask
#Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | |
m_sppts Boolean | |
m_sppts.bstrText UnicodeString | |
m_spptcc Boolean | |
m_spptcc.segid UInt32 | |
m_spptcc.iseg UInt32 | |
m_spptcc.dcpRelative UInt64 | |
m_spptcc.dcpSegmentStart UInt64 | |
m_spptcc.dcpSegmentEnd UInt64 | |
m_spptcc.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1902",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1903: tskPolicyTipsHandlePolicyTipsTask1903
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
dcpShift UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1903",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1904: tskPolicyTipsHandlePolicyTipsTask1904
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
dcpShift UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1904",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1905: tskPolicyTipsHandlePolicyTipsTask1905
#Fields #
| Name | Description |
|---|---|
ulRelativeOffset UInt64 | |
lShift Int64 | |
ulSegmentStart UInt64 | |
ulSegmentEnd UInt64 | |
fClearCache Boolean | |
bstrText UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1905",
"version": "0",
"level": "5",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ulRelativeOffset": "0",
"lShift": "0",
"ulSegmentStart": "0",
"ulSegmentEnd": "0",
"fClearCache": "false",
"bstrText": ""
},
"message": ""
}
Event ID 1906: tskPolicyTipsCreatePTDataTask
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1906",
"version": "0",
"level": "5",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1907: tskPolicyTipsCreatePTDataTask1907
#Fields #
| Name | Description |
|---|---|
m_ptct UnicodeString | |
m_sppts Boolean | |
m_sppts.bstrText UnicodeString | |
m_spptcc Boolean | |
m_spptcc.segid UInt32 | |
m_spptcc.iseg UInt32 | |
m_spptcc.dcpRelative UInt64 | |
m_spptcc.dcpSegmentStart UInt64 | |
m_spptcc.dcpSegmentEnd UInt64 | |
m_spptcc.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1907",
"version": "0",
"level": "5",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"m_ptct": "",
"m_sppts": "false",
"m_sppts.bstrText": "",
"m_spptcc": "false",
"m_spptcc.segid": "0",
"m_spptcc.iseg": "0",
"m_spptcc.dcpRelative": "0",
"m_spptcc.dcpSegmentStart": "0",
"m_spptcc.dcpSegmentEnd": "0",
"m_spptcc.dcpShift": "0"
},
"message": ""
}
Event ID 1908: tskPolicyTipsReplaceSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
spSegment.segid UInt32 | |
spSegment.iseg UInt32 | |
spSegment.dcpRelative UInt64 | |
spSegment.dcpSegmentStart UInt64 | |
spSegment.dcpSegmentEnd UInt64 | |
spSegment.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1908",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1909: tskPolicyTipsReplaceSegment1909
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
m_vecsegmentSize UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1909",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1910: tskPolicyTipsReplaceSegment1910
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1910",
"version": "0",
"level": "5",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1911: tskPolicyTipsInsertSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
spSegment.segid UInt32 | |
spSegment.iseg UInt32 | |
spSegment.dcpRelative UInt64 | |
spSegment.dcpSegmentStart UInt64 | |
spSegment.dcpSegmentEnd UInt64 | |
spSegment.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1911",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1912: tskPolicyTipsInsertSegment1912
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
m_vecsegmentSize UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1912",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1913: tskPolicyTipsInsertSegment1913
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1913",
"version": "0",
"level": "5",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1914: tskPolicyTipsDeleteSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
spSegment.segid UInt32 | |
spSegment.iseg UInt32 | |
spSegment.dcpRelative UInt64 | |
spSegment.dcpSegmentStart UInt64 | |
spSegment.dcpSegmentEnd UInt64 | |
spSegment.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1914",
"version": "0",
"level": "5",
"task": "35",
"opcode": "15",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1915: tskPolicyTipsDeleteSegment1915
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1915",
"version": "0",
"level": "5",
"task": "35",
"opcode": "15",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1916: tskPolicyTipsEraseSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
spSegment.segid UInt32 | |
spSegment.iseg UInt32 | |
spSegment.dcpRelative UInt64 | |
spSegment.dcpSegmentStart UInt64 | |
spSegment.dcpSegmentEnd UInt64 | |
spSegment.dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1916",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0"
},
"message": ""
}
Event ID 1917: tskPolicyTipsEraseSegment1917
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
m_vecsegmentSize UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1917",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1918: tskPolicyTipsEraseSegment1918
#Fields #
| Name | Description |
|---|---|
segid UInt32 | |
iseg UInt32 | |
dcpRelative UInt64 | |
dcpSegmentStart UInt64 | |
dcpSegmentEnd UInt64 | |
dcpShift Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1918",
"version": "0",
"level": "5",
"task": "35",
"opcode": "16",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"segid": "0",
"iseg": "0",
"dcpRelative": "0",
"dcpSegmentStart": "0",
"dcpSegmentEnd": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1919: tskPolicyTipsGetSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1919",
"version": "0",
"level": "5",
"task": "35",
"opcode": "17",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0"
},
"message": ""
}
Event ID 1920: tskPolicyTipsGetSegment1920
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
m_vecsegmentSize UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1920",
"version": "0",
"level": "5",
"task": "35",
"opcode": "17",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"m_vecsegmentSize": "0"
},
"message": ""
}
Event ID 1921: tskPolicyTipsGetIndexFromSegmentId
#Fields #
| Name | Description |
|---|---|
index UInt32 | |
segid UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1921",
"version": "0",
"level": "5",
"task": "35",
"opcode": "18",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"index": "0",
"segid": "0"
},
"message": ""
}
Event ID 1922: tskPolicyTipsInternalInsertSegment
#Fields #
| Name | Description |
|---|---|
iseg UInt32 | |
spSegment.segid UInt32 | |
spSegment.iseg UInt32 | |
spSegment.dcpRelative UInt64 | |
spSegment.dcpSegmentStart UInt64 | |
spSegment.dcpSegmentEnd UInt64 | |
spSegment.dcpShift Int64 | |
dcpShift UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1922",
"version": "0",
"level": "5",
"task": "35",
"opcode": "19",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"iseg": "0",
"spSegment.segid": "0",
"spSegment.iseg": "0",
"spSegment.dcpRelative": "0",
"spSegment.dcpSegmentStart": "0",
"spSegment.dcpSegmentEnd": "0",
"spSegment.dcpShift": "0",
"dcpShift": "0"
},
"message": ""
}
Event ID 1923: tskPolicyTipsProcessReadRequests
#Fields #
| Name | Description |
|---|---|
ullBmkId UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1923",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ullBmkId": "0"
},
"message": ""
}
Event ID 1924: tskPolicyTipsProcessReadRequests1924
#Fields #
| Name | Description |
|---|---|
count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1924",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1925: tskPolicyTipsProcessReadRequests1925
#Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | |
cpBmkEnd Int32 | |
ibkf Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1925",
"version": "0",
"level": "5",
"task": "35",
"opcode": "20",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1926: tskPolicyTipsExtendCpToRead
#Fields #
| Name | Description |
|---|---|
tempUullSegmentId UInt64 | |
ullSegmentId UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1926",
"version": "0",
"level": "5",
"task": "35",
"opcode": "21",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tempUullSegmentId": "0",
"ullSegmentId": "0"
},
"message": ""
}
Event ID 1927: tskPolicyTipsFDpcPolicyCheck
#Fields #
| Name | Description |
|---|---|
count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1927",
"version": "0",
"level": "5",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1928: tskPolicyTipsFDpcPolicyCheck1928
#Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | |
cpBmkEnd Int32 | |
ibkf Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1928",
"version": "0",
"level": "100",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1929: tskPolicyTipsFDpcPolicyCheck1929
#Fields #
| Name | Description |
|---|---|
count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1929",
"version": "0",
"level": "5",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1930: tskPolicyTipsFDpcPolicyCheck1930
#Fields #
| Name | Description |
|---|---|
cpBmkStart Int32 | |
cpBmkEnd Int32 | |
ibkf Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1930",
"version": "0",
"level": "100",
"task": "35",
"opcode": "22",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpBmkStart": "0",
"cpBmkEnd": "0",
"ibkf": "0"
},
"message": ""
}
Event ID 1931: tskPolicyTipsHrConsumeTasks
#Fields #
| Name | Description |
|---|---|
count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1931",
"version": "0",
"level": "5",
"task": "35",
"opcode": "23",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"count": "0"
},
"message": ""
}
Event ID 1932: tskPolicyTipsPolicyTipsIdle_V1
#Fields #
| Name | Description |
|---|---|
timeSpent UInt64 | |
loopIterations UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1932",
"version": "1",
"level": "5",
"task": "35",
"opcode": "24",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"timeSpent": "0",
"loopIterations": "0"
},
"message": ""
}
Event ID 1933: tskPolicyTipsBookmarks
#Fields #
| Name | Description |
|---|---|
context UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1933",
"version": "0",
"level": "5",
"task": "35",
"opcode": "25",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"context": ""
},
"message": ""
}
Event ID 1934: tskPolicyTipsBookmarks1934
#Fields #
| Name | Description |
|---|---|
context UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "1934",
"version": "0",
"level": "5",
"task": "35",
"opcode": "25",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"context": ""
},
"message": ""
}
Event ID 2000: task_0PCODEERRORpcodeError_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001: task_0PCODEERRORpcodeError2001_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002: task_0PCODEERRORpcodeError2002_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003: task_0PCODEERRORpcodeError2003_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004: task_0PCODEERRORpcodeError2004_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005: task_0PCODEERRORpcodeError2005_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006: task_0PCODEERRORpcodeError2006_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007: task_0PCODEERRORpcodeError2007_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008: task_0PCODEERRORpcodeError2008_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009: task_0PCODEERRORpcodeError2009_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010: task_0PCODEERRORpcodeError2010_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011: task_0PCODEERRORpcodeError2011_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012: task_0PCODEERRORpcodeError2012_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013: task_0PCODEERRORpcodeError2013_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014: task_0PCODEERRORpcodeError2014_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015: task_0PCODEERRORpcodeError2015_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016: task_0PCODEERRORpcodeError2016_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017: task_0PCODEERRORpcodeError2017_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018: task_0PCODEERRORpcodeError2018_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019: task_0PCODEERRORpcodeError2019_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020: task_0PCODEERRORpcodeError2020_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021: task_0PCODEERRORpcodeError2021_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022: task_0PCODEERRORpcodeError2022_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023: task_0PCODEERRORpcodeError2023_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024: task_0PCODEERRORpcodeError2024_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025: task_0PCODEERRORpcodeError2025_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026: task_0PCODEERRORpcodeError2026_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027: task_0PCODEERRORpcodeError2027_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028: task_0PCODEERRORpcodeError2028_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2028",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2029: task_0PCODEERRORpcodeError2029_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2029",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2030: task_0PCODEERRORpcodeError2030_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2030",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2031: task_0PCODEERRORpcodeError2031_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2031",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2032: task_0PCODEWARNINGpcodeWarning
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033: task_0PCODEWARNINGpcodeWarning2033
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034: task_0PCODEWARNINGpcodeWarning2034
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035: task_0PCODEWARNINGpcodeWarning2035
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036: task_0PCODEWARNINGpcodeWarning2036
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037: task_0PCODEWARNINGpcodeWarning2037
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038: task_0PCODEWARNINGpcodeWarning2038
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039: task_0PCODEWARNINGpcodeWarning2039
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040: task_0PCODEWARNINGpcodeWarning2040
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041: task_0PCODEWARNINGpcodeWarning2041
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042: task_0PCODEWARNINGpcodeWarning2042
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043: task_0PCODEWARNINGpcodeWarning2043
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044: task_0PCODEWARNINGpcodeWarning2044
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045: task_0PCODEWARNINGpcodeWarning2045
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046: task_0PCODEWARNINGpcodeWarning2046
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047: task_0PCODEWARNINGpcodeWarning2047
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048: task_0PCODEWARNINGpcodeWarning2048
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049: task_0PCODEWARNINGpcodeWarning2049
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050: task_0PCODEWARNINGpcodeWarning2050
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051: task_0PCODEWARNINGpcodeWarning2051
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052: task_0PCODEWARNINGpcodeWarning2052
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053: task_0PCODEWARNINGpcodeWarning2053
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054: task_0PCODEWARNINGpcodeWarning2054
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055: task_0PCODEWARNINGpcodeWarning2055
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056: task_0PCODEWARNINGpcodeWarning2056
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057: task_0PCODEWARNINGpcodeWarning2057
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058: task_0PCODEWARNINGpcodeWarning2058
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059: task_0PCODEWARNINGpcodeWarning2059
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060: task_0PCODEWARNINGpcodeWarning2060
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2060",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2061: task_0PCODEWARNINGpcodeWarning2061
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2061",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2062: task_0PCODEWARNINGpcodeWarning2062
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2062",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2063: task_0PCODEWARNINGpcodeWarning2063
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2063",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2064: task_0PCODEINFORMATIONALpcodeInformational
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065: task_0PCODEINFORMATIONALpcodeInformational2065
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066: task_0PCODEINFORMATIONALpcodeInformational2066
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067: task_0PCODEINFORMATIONALpcodeInformational2067
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068: task_0PCODEINFORMATIONALpcodeInformational2068
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069: task_0PCODEINFORMATIONALpcodeInformational2069
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070: task_0PCODEINFORMATIONALpcodeInformational2070
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071: task_0PCODEINFORMATIONALpcodeInformational2071
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072: task_0PCODEINFORMATIONALpcodeInformational2072
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073: task_0PCODEINFORMATIONALpcodeInformational2073
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074: task_0PCODEINFORMATIONALpcodeInformational2074
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075: task_0PCODEINFORMATIONALpcodeInformational2075
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076: task_0PCODEINFORMATIONALpcodeInformational2076
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077: task_0PCODEINFORMATIONALpcodeInformational2077
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078: task_0PCODEINFORMATIONALpcodeInformational2078
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079: task_0PCODEINFORMATIONALpcodeInformational2079
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080: task_0PCODEINFORMATIONALpcodeInformational2080
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081: task_0PCODEINFORMATIONALpcodeInformational2081
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082: task_0PCODEINFORMATIONALpcodeInformational2082
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083: task_0PCODEINFORMATIONALpcodeInformational2083
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084: task_0PCODEINFORMATIONALpcodeInformational2084
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085: task_0PCODEINFORMATIONALpcodeInformational2085
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086: task_0PCODEINFORMATIONALpcodeInformational2086
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087: task_0PCODEINFORMATIONALpcodeInformational2087
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088: task_0PCODEINFORMATIONALpcodeInformational2088
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089: task_0PCODEINFORMATIONALpcodeInformational2089
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090: task_0PCODEINFORMATIONALpcodeInformational2090
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091: task_0PCODEINFORMATIONALpcodeInformational2091
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092: task_0PCODEINFORMATIONALpcodeInformational2092
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2092",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2093: task_0PCODEINFORMATIONALpcodeInformational2093
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2093",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2094: task_0PCODEINFORMATIONALpcodeInformational2094
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2094",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2095: task_0PCODEINFORMATIONALpcodeInformational2095
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2095",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2500: tskDisplayNeedUpdateWwdLater
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2500",
"version": "0",
"level": "4",
"task": "4",
"opcode": "27",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2501: tskFileOpenPreviewHandlerReRegistered
#Fields #
| Name | Description |
|---|---|
ReRegisterSucceeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2501",
"version": "0",
"level": "4",
"task": "7",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReRegisterSucceeded": "false"
},
"message": ""
}
Event ID 2502: tskVirtualDesktopWndCountOnVirtualDesktops
#Fields #
| Name | Description |
|---|---|
NumDocs Int32 | |
Virtual desktop GUID UnicodeString | |
Instance UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "2502",
"version": "0",
"level": "5",
"task": "37",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NumDocs": "0",
"Virtual desktop GUID": "",
"Instance": ""
},
"message": ""
}
Event ID 3500: tskParidParaIdsPidmDestructor_V1
#Fields #
| Name | Description |
|---|---|
pidim Pointer | |
fMother Boolean | |
docParidsStateOpen UInt32 | |
docParidsStateEnsureParids UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3500",
"version": "1",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pidim": "0x0",
"fMother": "false",
"docParidsStateOpen": "0",
"docParidsStateEnsureParids": "0"
},
"message": ""
}
Event ID 3501: tskSavePersisterAllocHealth
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pcaso Pointer | |
pcoa Pointer | |
fIsInCsiTransactedStreamMode Boolean | |
fIsSaveAs Boolean | |
fSourceIsServer Boolean | |
fTargetIsServer Boolean | |
fListenerRegistrationFailed Boolean | |
fDocumentContentWasNull Boolean | |
persisterTypeReplaced UInt32 | |
persisterTypeConstructed UInt32 | |
dwTagCaller UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3501",
"version": "0",
"level": "4",
"task": "13",
"opcode": "54",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcaso": "0x0",
"pcoa": "0x0",
"fIsInCsiTransactedStreamMode": "false",
"fIsSaveAs": "false",
"fSourceIsServer": "false",
"fTargetIsServer": "false",
"fListenerRegistrationFailed": "false",
"fDocumentContentWasNull": "false",
"persisterTypeReplaced": "0",
"persisterTypeConstructed": "0",
"dwTagCaller": "0"
},
"message": ""
}
Event ID 3502: tskInputLanguageChanged
#Fields #
| Name | Description |
|---|---|
Lid UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3502",
"version": "0",
"level": "4",
"task": "43",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Lid": "0"
},
"message": ""
}
Event ID 3503: tskFileOpenSetTransactedStreamSupportedLocations
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pioldoc Pointer | |
previousSupportedLocations UInt32 | |
newSupportedLocations UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3503",
"version": "0",
"level": "4",
"task": "7",
"opcode": "24",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pioldoc": "0x0",
"previousSupportedLocations": "0",
"newSupportedLocations": "0"
},
"message": ""
}
Event ID 3504: tskSaveLoadRetrySucceeded
#Fields #
| Name | Description |
|---|---|
fOnMainThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3504",
"version": "0",
"level": "4",
"task": "13",
"opcode": "55",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fOnMainThread": "false"
},
"message": ""
}
Event ID 3505: tskSaveSaveDocOnCloseFailed
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pmwd Pointer | |
ac Int32 | |
fAutosaveActiveAfterFailure Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3505",
"version": "0",
"level": "3",
"task": "13",
"opcode": "56",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pmwd": "0x0",
"ac": "0",
"fAutosaveActiveAfterFailure": "false"
},
"message": ""
}
Event ID 3506: tskSaveStreamSaveTransactionRetry
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
csierrOnRetry UInt32 | |
fOnFreeRunningThread Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3506",
"version": "0",
"level": "4",
"task": "13",
"opcode": "58",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"csierrOnRetry": "0",
"fOnFreeRunningThread": "false"
},
"message": ""
}
Event ID 3507: tskIdleDirtyToolbars
#Fields #
| Name | Description |
|---|---|
dwtag UInt32 | |
dwtagLast UInt32 | |
dullDirtyToolbarsMs UInt64 | |
fToolbarsDirty Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3507",
"version": "0",
"level": "5",
"task": "33",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwtag": "0",
"dwtagLast": "0",
"dullDirtyToolbarsMs": "0",
"fToolbarsDirty": "false"
},
"message": ""
}
Event ID 3508: tskIdleHealthIdleDataJson
#Fields #
| Name | Description |
|---|---|
JsonData UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3508",
"version": "0",
"level": "4",
"task": "23",
"opcode": "27",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"JsonData": ""
},
"message": ""
}
Event ID 3509: tskFileOpenSetDisableTempFileGenerationSupportedLocations
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pioldoc Pointer | |
previousDisableTempFileLocations UInt32 | |
newDisableTempFileLocations UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3509",
"version": "0",
"level": "4",
"task": "7",
"opcode": "25",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pioldoc": "0x0",
"previousDisableTempFileLocations": "0",
"newDisableTempFileLocations": "0"
},
"message": ""
}
Event ID 3581: tskOsfOsfCreatedFromTemplate
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "3581",
"version": "0",
"level": "4",
"task": "48",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4001: tskUserOperationLoggingUserOperationSourceTag
#Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4001",
"version": "0",
"level": "4",
"task": "50",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0"
},
"message": ""
}
Event ID 4002: tskUserOperationLoggingUserOperationSetActivity
#Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 | |
EventName UnicodeString | |
SamplingPolicy UInt32 | |
DiagnosticLevel UInt32 | |
DataCategories UInt32 | |
AggregationMode UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4002",
"version": "0",
"level": "4",
"task": "50",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0",
"EventName": "",
"SamplingPolicy": "0",
"DiagnosticLevel": "0",
"DataCategories": "0",
"AggregationMode": "0"
},
"message": ""
}
Event ID 4003: tskUserOperationLoggingUserOperationSetResult
#Fields #
| Name | Description |
|---|---|
TrackbackTag UInt32 | |
LogEventResultEndState UnicodeString | |
ErrorCode Int32 | |
ResultType UnicodeString | |
IsExpected Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4003",
"version": "0",
"level": "4",
"task": "50",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TrackbackTag": "0",
"LogEventResultEndState": "",
"ErrorCode": "0",
"ResultType": "",
"IsExpected": "false"
},
"message": ""
}
Event ID 4004: tskUserOperationLoggingUserOperationDeliverDataPayload
#Fields #
| Name | Description |
|---|---|
DataPayloadTarget UnicodeString | |
Name UnicodeString | |
Value UnicodeString | |
DataClassification UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "4004",
"version": "0",
"level": "4",
"task": "50",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DataPayloadTarget": "",
"Name": "",
"Value": "",
"DataClassification": "0"
},
"message": ""
}
Event ID 30003: tskMyLocalChanges_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30003",
"version": "1",
"level": "1",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30004: tskMyLocalChanges30004_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30004",
"version": "1",
"level": "2",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30005: tskMyLocalChanges30005_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30005",
"version": "1",
"level": "3",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30006: tskMyLocalChanges30006_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30006",
"version": "1",
"level": "4",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30007: tskMyLocalChanges30007_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30007",
"version": "1",
"level": "5",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30008: tskMyLocalChanges30008_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30008",
"version": "1",
"level": "16",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30009: tskMyLocalChanges30009_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30009",
"version": "1",
"level": "50",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30010: tskMyLocalChanges30010_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30010",
"version": "1",
"level": "100",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30011: tskMyLocalChanges30011_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30011",
"version": "1",
"level": "200",
"task": "1001",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30012: tskLayout_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30012",
"version": "1",
"level": "1",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30013: tskLayout30013_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30013",
"version": "1",
"level": "2",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30014: tskLayout30014_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30014",
"version": "1",
"level": "3",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30015: tskLayout30015_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30015",
"version": "1",
"level": "4",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30016: tskLayout30016_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30016",
"version": "1",
"level": "5",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30017: tskLayout30017_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30017",
"version": "1",
"level": "16",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30018: tskLayout30018_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30018",
"version": "1",
"level": "50",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30019: tskLayout30019_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30019",
"version": "1",
"level": "100",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30020: tskLayout30020_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30020",
"version": "1",
"level": "200",
"task": "1002",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30021: tskDisplay30021_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30021",
"version": "1",
"level": "1",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30022: tskDisplay30022_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30022",
"version": "1",
"level": "2",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30023: tskDisplay30023_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30023",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30024: tskDisplay30024_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30024",
"version": "1",
"level": "4",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30025: tskDisplay30025_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30025",
"version": "1",
"level": "5",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30026: tskDisplay30026_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30026",
"version": "1",
"level": "16",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30027: tskDisplay30027_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30027",
"version": "1",
"level": "50",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30028: tskDisplay30028_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30028",
"version": "1",
"level": "100",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30029: tskDisplay30029_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30029",
"version": "1",
"level": "200",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30030: tskKeyboardInput_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30030",
"version": "1",
"level": "1",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30031: tskKeyboardInput30031_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30031",
"version": "1",
"level": "2",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30032: tskKeyboardInput30032_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30032",
"version": "1",
"level": "3",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30033: tskKeyboardInput30033_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30033",
"version": "1",
"level": "4",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30034: tskKeyboardInput30034_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30034",
"version": "1",
"level": "5",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30035: tskKeyboardInput30035_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30035",
"version": "1",
"level": "16",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30036: tskKeyboardInput30036_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30036",
"version": "1",
"level": "50",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30037: tskKeyboardInput30037_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30037",
"version": "1",
"level": "100",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30038: tskKeyboardInput30038_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30038",
"version": "1",
"level": "200",
"task": "1004",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30039: tskNone_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30039",
"version": "1",
"level": "1",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30040: tskNone30040_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30040",
"version": "1",
"level": "2",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30041: tskNone30041_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30041",
"version": "1",
"level": "3",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30042: tskNone30042_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30042",
"version": "1",
"level": "4",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30043: tskNone30043_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30043",
"version": "1",
"level": "5",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30044: tskNone30044_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30044",
"version": "1",
"level": "16",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30045: tskNone30045_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30045",
"version": "1",
"level": "50",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30046: tskNone30046_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30046",
"version": "1",
"level": "100",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30047: tskNone30047_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30047",
"version": "1",
"level": "200",
"task": "1005",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30048: tskLogging_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30048",
"version": "1",
"level": "1",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30049: tskLogging30049_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30049",
"version": "1",
"level": "2",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30050: tskLogging30050_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30050",
"version": "1",
"level": "3",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30051: tskLogging30051_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30051",
"version": "1",
"level": "4",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30052: tskLogging30052_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30052",
"version": "1",
"level": "5",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30053: tskLogging30053_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30053",
"version": "1",
"level": "16",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30054: tskLogging30054_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30054",
"version": "1",
"level": "50",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30055: tskLogging30055_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30055",
"version": "1",
"level": "100",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30056: tskLogging30056_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30056",
"version": "1",
"level": "200",
"task": "38",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30057: tskIdle_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30057",
"version": "1",
"level": "1",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30058: tskIdle30058_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30058",
"version": "1",
"level": "2",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30059: tskIdle30059_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30059",
"version": "1",
"level": "3",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30060: tskIdle30060_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30060",
"version": "1",
"level": "4",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30061: tskIdle30061_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30061",
"version": "1",
"level": "5",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30062: tskIdle30062_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30062",
"version": "1",
"level": "16",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30063: tskIdle30063_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30063",
"version": "1",
"level": "50",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30064: tskIdle30064_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30064",
"version": "1",
"level": "100",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30065: tskIdle30065_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30065",
"version": "1",
"level": "200",
"task": "33",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30066: tskFileOpen30066_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30066",
"version": "1",
"level": "1",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30067: tskFileOpen30067_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30067",
"version": "1",
"level": "2",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30068: tskFileOpen30068_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30068",
"version": "1",
"level": "3",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30069: tskFileOpen30069_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30069",
"version": "1",
"level": "4",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30070: tskFileOpen30070_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30070",
"version": "1",
"level": "5",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30071: tskFileOpen30071_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30071",
"version": "1",
"level": "16",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30072: tskFileOpen30072_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30072",
"version": "1",
"level": "50",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30073: tskFileOpen30073_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30073",
"version": "1",
"level": "100",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30074: tskFileOpen30074_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30074",
"version": "1",
"level": "200",
"task": "7",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30075: tskFont_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30075",
"version": "1",
"level": "1",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30076: tskFont30076_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30076",
"version": "1",
"level": "2",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30077: tskFont30077_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30077",
"version": "1",
"level": "3",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30078: tskFont30078_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30078",
"version": "1",
"level": "4",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30079: tskFont30079_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30079",
"version": "1",
"level": "5",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30080: tskFont30080_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30080",
"version": "1",
"level": "16",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30081: tskFont30081_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30081",
"version": "1",
"level": "50",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30082: tskFont30082_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30082",
"version": "1",
"level": "100",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30083: tskFont30083_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30083",
"version": "1",
"level": "200",
"task": "25",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30084: tskSave_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30084",
"version": "1",
"level": "1",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30085: tskSave30085_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30085",
"version": "1",
"level": "2",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30086: tskSave30086_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30086",
"version": "1",
"level": "3",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30087: tskSave30087_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30087",
"version": "1",
"level": "4",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30088: tskSave30088_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30088",
"version": "1",
"level": "5",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30089: tskSave30089_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30089",
"version": "1",
"level": "16",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30090: tskSave30090_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30090",
"version": "1",
"level": "50",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30091: tskSave30091_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30091",
"version": "1",
"level": "100",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30092: tskSave30092_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30092",
"version": "1",
"level": "200",
"task": "13",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30093: tskFormatConsistencyChecker_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30093",
"version": "1",
"level": "1",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30094: tskFormatConsistencyChecker30094_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30094",
"version": "1",
"level": "2",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30095: tskFormatConsistencyChecker30095_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30095",
"version": "1",
"level": "3",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30096: tskFormatConsistencyChecker30096_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30096",
"version": "1",
"level": "4",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30097: tskFormatConsistencyChecker30097_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30097",
"version": "1",
"level": "5",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30098: tskFormatConsistencyChecker30098_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30098",
"version": "1",
"level": "16",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30099: tskFormatConsistencyChecker30099_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30099",
"version": "1",
"level": "50",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30100: tskFormatConsistencyChecker30100_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30100",
"version": "1",
"level": "100",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30101: tskFormatConsistencyChecker30101_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30101",
"version": "1",
"level": "200",
"task": "1011",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30102: tskLiveStatisticsCount_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30102",
"version": "1",
"level": "1",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30103: tskLiveStatisticsCount30103_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30103",
"version": "1",
"level": "2",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30104: tskLiveStatisticsCount30104_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30104",
"version": "1",
"level": "3",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30105: tskLiveStatisticsCount30105_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30105",
"version": "1",
"level": "4",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30106: tskLiveStatisticsCount30106_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30106",
"version": "1",
"level": "5",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30107: tskLiveStatisticsCount30107_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30107",
"version": "1",
"level": "16",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30108: tskLiveStatisticsCount30108_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30108",
"version": "1",
"level": "50",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30109: tskLiveStatisticsCount30109_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30109",
"version": "1",
"level": "100",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30110: tskLiveStatisticsCount30110_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30110",
"version": "1",
"level": "200",
"task": "1012",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30111: tskParagraphIDs_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30111",
"version": "1",
"level": "1",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30112: tskParagraphIDs30112_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30112",
"version": "1",
"level": "2",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30113: tskParagraphIDs30113_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30113",
"version": "1",
"level": "3",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30114: tskParagraphIDs30114_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30114",
"version": "1",
"level": "4",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30115: tskParagraphIDs30115_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30115",
"version": "1",
"level": "5",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30116: tskParagraphIDs30116_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30116",
"version": "1",
"level": "16",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30117: tskParagraphIDs30117_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30117",
"version": "1",
"level": "50",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30118: tskParagraphIDs30118_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30118",
"version": "1",
"level": "100",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30119: tskParagraphIDs30119_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30119",
"version": "1",
"level": "200",
"task": "1013",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30120: tskHrLog_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30120",
"version": "1",
"level": "1",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30121: tskHrLog30121_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30121",
"version": "1",
"level": "2",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30122: tskHrLog30122_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30122",
"version": "1",
"level": "3",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30123: tskHrLog30123_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30123",
"version": "1",
"level": "4",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30124: tskHrLog30124_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30124",
"version": "1",
"level": "5",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30125: tskHrLog30125_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30125",
"version": "1",
"level": "16",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30126: tskHrLog30126_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30126",
"version": "1",
"level": "50",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30127: tskHrLog30127_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30127",
"version": "1",
"level": "100",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30128: tskHrLog30128_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30128",
"version": "1",
"level": "200",
"task": "1014",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30129: tskMemoryStorageObject_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30129",
"version": "1",
"level": "1",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30130: tskMemoryStorageObject30130_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30130",
"version": "1",
"level": "2",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30131: tskMemoryStorageObject30131_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30131",
"version": "1",
"level": "3",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30132: tskMemoryStorageObject30132_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30132",
"version": "1",
"level": "4",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30133: tskMemoryStorageObject30133_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30133",
"version": "1",
"level": "5",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30134: tskMemoryStorageObject30134_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30134",
"version": "1",
"level": "16",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30135: tskMemoryStorageObject30135_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30135",
"version": "1",
"level": "50",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30136: tskMemoryStorageObject30136_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30136",
"version": "1",
"level": "100",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30137: tskMemoryStorageObject30137_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30137",
"version": "1",
"level": "200",
"task": "1015",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30138: tskCoAuthoring_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30138",
"version": "1",
"level": "1",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30139: tskCoAuthoring30139_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30139",
"version": "1",
"level": "2",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30140: tskCoAuthoring30140_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30140",
"version": "1",
"level": "3",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30141: tskCoAuthoring30141_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30141",
"version": "1",
"level": "4",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30142: tskCoAuthoring30142_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30142",
"version": "1",
"level": "5",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30143: tskCoAuthoring30143_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30143",
"version": "1",
"level": "16",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30144: tskCoAuthoring30144_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30144",
"version": "1",
"level": "50",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30145: tskCoAuthoring30145_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30145",
"version": "1",
"level": "100",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30146: tskCoAuthoring30146_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30146",
"version": "1",
"level": "200",
"task": "1016",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30147: tskLocks_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30147",
"version": "1",
"level": "1",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30148: tskLocks30148_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30148",
"version": "1",
"level": "2",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30149: tskLocks30149_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30149",
"version": "1",
"level": "3",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30150: tskLocks30150_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30150",
"version": "1",
"level": "4",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30151: tskLocks30151_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30151",
"version": "1",
"level": "5",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30152: tskLocks30152_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30152",
"version": "1",
"level": "16",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30153: tskLocks30153_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30153",
"version": "1",
"level": "50",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30154: tskLocks30154_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30154",
"version": "1",
"level": "100",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30155: tskLocks30155_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30155",
"version": "1",
"level": "200",
"task": "1017",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30156: tskMetadata_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30156",
"version": "1",
"level": "1",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30157: tskMetadata30157_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30157",
"version": "1",
"level": "2",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30158: tskMetadata30158_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30158",
"version": "1",
"level": "3",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30159: tskMetadata30159_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30159",
"version": "1",
"level": "4",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30160: tskMetadata30160_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30160",
"version": "1",
"level": "5",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30161: tskMetadata30161_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30161",
"version": "1",
"level": "16",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30162: tskMetadata30162_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30162",
"version": "1",
"level": "50",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30163: tskMetadata30163_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30163",
"version": "1",
"level": "100",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30164: tskMetadata30164_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30164",
"version": "1",
"level": "200",
"task": "1018",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30165: tskThreeWayMerge_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30165",
"version": "1",
"level": "1",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30166: tskThreeWayMerge30166_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30166",
"version": "1",
"level": "2",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30167: tskThreeWayMerge30167_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30167",
"version": "1",
"level": "3",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30168: tskThreeWayMerge30168_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30168",
"version": "1",
"level": "4",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30169: tskThreeWayMerge30169_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30169",
"version": "1",
"level": "5",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30170: tskThreeWayMerge30170_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30170",
"version": "1",
"level": "16",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30171: tskThreeWayMerge30171_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30171",
"version": "1",
"level": "50",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30172: tskThreeWayMerge30172_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30172",
"version": "1",
"level": "100",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30173: tskThreeWayMerge30173_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30173",
"version": "1",
"level": "200",
"task": "1019",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30174: tskAnimation_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30174",
"version": "1",
"level": "1",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30175: tskAnimation30175_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30175",
"version": "1",
"level": "2",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30176: tskAnimation30176_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30176",
"version": "1",
"level": "3",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30177: tskAnimation30177_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30177",
"version": "1",
"level": "4",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30178: tskAnimation30178_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30178",
"version": "1",
"level": "5",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30179: tskAnimation30179_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30179",
"version": "1",
"level": "16",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30180: tskAnimation30180_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30180",
"version": "1",
"level": "50",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30181: tskAnimation30181_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30181",
"version": "1",
"level": "100",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30182: tskAnimation30182_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30182",
"version": "1",
"level": "200",
"task": "42",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30183: tskTouch_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30183",
"version": "1",
"level": "1",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30184: tskTouch30184_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30184",
"version": "1",
"level": "2",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30185: tskTouch30185_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30185",
"version": "1",
"level": "3",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30186: tskTouch30186_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30186",
"version": "1",
"level": "4",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30187: tskTouch30187_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30187",
"version": "1",
"level": "5",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30188: tskTouch30188_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30188",
"version": "1",
"level": "16",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30189: tskTouch30189_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30189",
"version": "1",
"level": "50",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30190: tskTouch30190_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30190",
"version": "1",
"level": "100",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30191: tskTouch30191_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30191",
"version": "1",
"level": "200",
"task": "27",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30192: tskStructuredDocumentTags_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30192",
"version": "1",
"level": "1",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30193: tskStructuredDocumentTags30193_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30193",
"version": "1",
"level": "2",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30194: tskStructuredDocumentTags30194_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30194",
"version": "1",
"level": "3",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30195: tskStructuredDocumentTags30195_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30195",
"version": "1",
"level": "4",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30196: tskStructuredDocumentTags30196_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30196",
"version": "1",
"level": "5",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30197: tskStructuredDocumentTags30197_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30197",
"version": "1",
"level": "16",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30198: tskStructuredDocumentTags30198_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30198",
"version": "1",
"level": "50",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30199: tskStructuredDocumentTags30199_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30199",
"version": "1",
"level": "100",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30200: tskStructuredDocumentTags30200_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30200",
"version": "1",
"level": "200",
"task": "1022",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30201: tskOfficeSolutionFramework_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30201",
"version": "1",
"level": "1",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30202: tskOfficeSolutionFramework30202_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30202",
"version": "1",
"level": "2",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30203: tskOfficeSolutionFramework30203_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30203",
"version": "1",
"level": "3",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30204: tskOfficeSolutionFramework30204_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30204",
"version": "1",
"level": "4",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30205: tskOfficeSolutionFramework30205_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30205",
"version": "1",
"level": "5",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30206: tskOfficeSolutionFramework30206_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30206",
"version": "1",
"level": "16",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30207: tskOfficeSolutionFramework30207_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30207",
"version": "1",
"level": "50",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30208: tskOfficeSolutionFramework30208_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30208",
"version": "1",
"level": "100",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30209: tskOfficeSolutionFramework30209_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30209",
"version": "1",
"level": "200",
"task": "1023",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30210: tskRasterization_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30210",
"version": "1",
"level": "1",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30211: tskRasterization30211_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30211",
"version": "1",
"level": "2",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30212: tskRasterization30212_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30212",
"version": "1",
"level": "3",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30213: tskRasterization30213_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30213",
"version": "1",
"level": "4",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30214: tskRasterization30214_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30214",
"version": "1",
"level": "5",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30215: tskRasterization30215_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30215",
"version": "1",
"level": "16",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30216: tskRasterization30216_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30216",
"version": "1",
"level": "50",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30217: tskRasterization30217_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30217",
"version": "1",
"level": "100",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30218: tskRasterization30218_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30218",
"version": "1",
"level": "200",
"task": "1024",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30219: tskPower_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30219",
"version": "1",
"level": "1",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30220: tskPower30220_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30220",
"version": "1",
"level": "2",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30221: tskPower30221_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30221",
"version": "1",
"level": "3",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30222: tskPower30222_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30222",
"version": "1",
"level": "4",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30223: tskPower30223_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30223",
"version": "1",
"level": "5",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30224: tskPower30224_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30224",
"version": "1",
"level": "16",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30225: tskPower30225_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30225",
"version": "1",
"level": "50",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30226: tskPower30226_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30226",
"version": "1",
"level": "100",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30227: tskPower30227_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30227",
"version": "1",
"level": "200",
"task": "1025",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30228: tskUnitTest_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30228",
"version": "1",
"level": "1",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30229: tskUnitTest30229_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30229",
"version": "1",
"level": "2",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30230: tskUnitTest30230_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30230",
"version": "1",
"level": "3",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30231: tskUnitTest30231_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30231",
"version": "1",
"level": "4",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30232: tskUnitTest30232_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30232",
"version": "1",
"level": "5",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30233: tskUnitTest30233_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30233",
"version": "1",
"level": "16",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30234: tskUnitTest30234_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30234",
"version": "1",
"level": "50",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30235: tskUnitTest30235_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30235",
"version": "1",
"level": "100",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30236: tskUnitTest30236_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30236",
"version": "1",
"level": "200",
"task": "1026",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30237: tskTargetElement_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30237",
"version": "1",
"level": "1",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30238: tskTargetElement30238_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30238",
"version": "1",
"level": "2",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30239: tskTargetElement30239_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30239",
"version": "1",
"level": "3",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30240: tskTargetElement30240_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30240",
"version": "1",
"level": "4",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30241: tskTargetElement30241_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30241",
"version": "1",
"level": "5",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30242: tskTargetElement30242_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30242",
"version": "1",
"level": "16",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30243: tskTargetElement30243_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30243",
"version": "1",
"level": "50",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30244: tskTargetElement30244_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30244",
"version": "1",
"level": "100",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30245: tskTargetElement30245_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30245",
"version": "1",
"level": "200",
"task": "1027",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30246: tskTEPinningTest_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30246",
"version": "1",
"level": "1",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30247: tskTEPinningTest30247_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30247",
"version": "1",
"level": "2",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30248: tskTEPinningTest30248_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30248",
"version": "1",
"level": "3",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30249: tskTEPinningTest30249_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30249",
"version": "1",
"level": "4",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30250: tskTEPinningTest30250_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30250",
"version": "1",
"level": "5",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30251: tskTEPinningTest30251_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30251",
"version": "1",
"level": "16",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30252: tskTEPinningTest30252_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30252",
"version": "1",
"level": "50",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30253: tskTEPinningTest30253_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30253",
"version": "1",
"level": "100",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30254: tskTEPinningTest30254_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30254",
"version": "1",
"level": "200",
"task": "1028",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30255: tskGlobalState_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30255",
"version": "1",
"level": "1",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30256: tskGlobalState30256_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30256",
"version": "1",
"level": "2",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30257: tskGlobalState30257_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30257",
"version": "1",
"level": "3",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30258: tskGlobalState30258_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30258",
"version": "1",
"level": "4",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30259: tskGlobalState30259_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30259",
"version": "1",
"level": "5",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30260: tskGlobalState30260_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30260",
"version": "1",
"level": "16",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30261: tskGlobalState30261_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30261",
"version": "1",
"level": "50",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30262: tskGlobalState30262_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30262",
"version": "1",
"level": "100",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30263: tskGlobalState30263_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30263",
"version": "1",
"level": "200",
"task": "1029",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30264: tskView_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30264",
"version": "1",
"level": "1",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30265: tskView30265_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30265",
"version": "1",
"level": "2",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30266: tskView30266_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30266",
"version": "1",
"level": "3",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30267: tskView30267_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30267",
"version": "1",
"level": "4",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30268: tskView30268_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30268",
"version": "1",
"level": "5",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30269: tskView30269_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30269",
"version": "1",
"level": "16",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30270: tskView30270_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30270",
"version": "1",
"level": "50",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30271: tskView30271_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30271",
"version": "1",
"level": "100",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30272: tskView30272_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30272",
"version": "1",
"level": "200",
"task": "1030",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30273: tskInProcAutomation_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30273",
"version": "1",
"level": "1",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30274: tskInProcAutomation30274_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30274",
"version": "1",
"level": "2",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30275: tskInProcAutomation30275_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30275",
"version": "1",
"level": "3",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30276: tskInProcAutomation30276_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30276",
"version": "1",
"level": "4",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30277: tskInProcAutomation30277_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30277",
"version": "1",
"level": "5",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30278: tskInProcAutomation30278_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30278",
"version": "1",
"level": "16",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30279: tskInProcAutomation30279_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30279",
"version": "1",
"level": "50",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30280: tskInProcAutomation30280_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30280",
"version": "1",
"level": "100",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30281: tskInProcAutomation30281_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30281",
"version": "1",
"level": "200",
"task": "1031",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30282: tskActivation_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30282",
"version": "1",
"level": "1",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30283: tskActivation30283_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30283",
"version": "1",
"level": "2",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30284: tskActivation30284_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30284",
"version": "1",
"level": "3",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30285: tskActivation30285_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30285",
"version": "1",
"level": "4",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30286: tskActivation30286_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30286",
"version": "1",
"level": "5",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30287: tskActivation30287_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30287",
"version": "1",
"level": "16",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30288: tskActivation30288_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30288",
"version": "1",
"level": "50",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30289: tskActivation30289_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30289",
"version": "1",
"level": "100",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30290: tskActivation30290_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word",
"guid": "{DAF0B914-9C1C-450a-81B2-FEA7244F6FFA}",
"event_source_name": "",
"event_id": "30290",
"version": "1",
"level": "200",
"task": "15",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID daf0b914-9c1c-450a-81b2-fea7244f6ffa
Defined in Program, which carries the event manifest.
Observed on:
- Win11-26200.6584 · schema read from the registered manifest · binary version 16.0.17932.20790 · captured 2026-06-02