Microsoft-Office-Word2
976 events across 1 channel
Event ID 30 —
Fields #
| Name | Description |
|---|---|
sel UnicodeString | — |
pdod Pointer | — |
Doc Kind UnicodeString | — |
pwwd Pointer | — |
View Type UnicodeString | — |
Old Selection Kind UnicodeString | — |
Old cpFirst Int32 | — |
Old cpLim Int32 | — |
Old fDiscontiguous Boolean | — |
Intended cpFirst Int32 | — |
Intended cpLim Int32 | — |
grfsel HexInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30",
"version": "2",
"level": "4",
"task": "6",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"pdod": "0x0",
"Doc Kind": "",
"pwwd": "0x0",
"View Type": "",
"Old Selection Kind": "",
"Old cpFirst": "0",
"Old cpLim": "0",
"Old fDiscontiguous": "false",
"Intended cpFirst": "0",
"Intended cpLim": "0",
"grfsel": "0x0"
},
"message": ""
}
Event ID 31 —
Fields #
| Name | Description |
|---|---|
New Selection Kind UnicodeString | — |
New cpFirst Int32 | — |
New cpLim Int32 | — |
New fDiscontiguous Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "31",
"version": "1",
"level": "4",
"task": "6",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"New Selection Kind": "",
"New cpFirst": "0",
"New cpLim": "0",
"New fDiscontiguous": "false"
},
"message": ""
}
Event ID 32 —
Fields #
| Name | Description |
|---|---|
Type UnicodeString | — |
fInOptimizedPass Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "32",
"version": "1",
"level": "50",
"task": "6",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473194900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Type": "Normal",
"fInOptimizedPass": "true"
},
"message": ""
}
Event ID 33 —
Fields #
| Name | Description |
|---|---|
Type UnicodeString | — |
fInOptimizedPass Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "33",
"version": "1",
"level": "50",
"task": "6",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473573700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Type": "Normal",
"fInOptimizedPass": "true"
},
"message": ""
}
Event ID 34 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cpFirst Int32 | — |
cpLim Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "34",
"version": "0",
"level": "50",
"task": "6",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473152500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"cpFirst": "72",
"cpLim": "72"
},
"message": ""
}
Event ID 35 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "35",
"version": "0",
"level": "50",
"task": "6",
"opcode": "15",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473163200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 36 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "36",
"version": "0",
"level": "50",
"task": "6",
"opcode": "16",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473171300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 37 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "37",
"version": "0",
"level": "50",
"task": "6",
"opcode": "17",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473172900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 38 —
Fields #
| Name | Description |
|---|---|
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "38",
"version": "1",
"level": "50",
"task": "6",
"opcode": "18",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391034100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "ArtObjects"
},
"message": ""
}
Event ID 39 —
Fields #
| Name | Description |
|---|---|
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "39",
"version": "1",
"level": "50",
"task": "6",
"opcode": "19",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391059600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "ArtObjects"
},
"message": ""
}
Event ID 40 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "40",
"version": "0",
"level": "50",
"task": "6",
"opcode": "20",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391061600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 41 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "41",
"version": "0",
"level": "50",
"task": "6",
"opcode": "21",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391505800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 42 —
Fields #
| Name | Description |
|---|---|
sel UnicodeString | — |
cpFirst Int32 | — |
cpLim Int32 | — |
rcw.xp Int32 | — |
rcw.yp Int32 | — |
rcw.dxp Int32 | — |
rcw.dyp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "42",
"version": "1",
"level": "50",
"task": "6",
"opcode": "22",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"cpFirst": "0",
"cpLim": "0",
"rcw.xp": "0",
"rcw.yp": "0",
"rcw.dxp": "0",
"rcw.dyp": "0"
},
"message": ""
}
Event ID 43 —
Fields #
| Name | Description |
|---|---|
sel UnicodeString | — |
Old pdod Pointer | — |
New pdod Pointer | — |
pwwd Pointer | — |
View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "43",
"version": "2",
"level": "50",
"task": "6",
"opcode": "23",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:57:27.602359000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "selDotted",
"Old pdod": "0x2CA3EA2C1D0",
"New pdod": "0x0",
"pwwd": "0x0",
"View Type": "Nil pwwd"
},
"message": ""
}
Event ID 44 —
Fields #
| Name | Description |
|---|---|
sel UnicodeString | — |
Selection Kind UnicodeString | — |
pdod Pointer | — |
Doc Kind UnicodeString | — |
pwwd Pointer | — |
View Type UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "44",
"version": "2",
"level": "50",
"task": "6",
"opcode": "24",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"Selection Kind": "",
"pdod": "0x0",
"Doc Kind": "",
"pwwd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 45 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "45",
"version": "0",
"level": "50",
"task": "6",
"opcode": "25",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 46 —
Fields #
| Name | Description |
|---|---|
DR cpFirst Int32 | — |
DR cpLim Int32 | — |
Original xwLeft Int32 | — |
Original xwRight Int32 | — |
Original ywTop Int32 | — |
Original ywBottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "46",
"version": "0",
"level": "50",
"task": "6",
"opcode": "26",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DR cpFirst": "0",
"DR cpLim": "0",
"Original xwLeft": "0",
"Original xwRight": "0",
"Original ywTop": "0",
"Original ywBottom": "0"
},
"message": ""
}
Event ID 47 —
Fields #
| Name | Description |
|---|---|
Updated xwLeft Int32 | — |
Updated xwRight Int32 | — |
Updated ywTop Int32 | — |
Updated ywBottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "47",
"version": "0",
"level": "50",
"task": "6",
"opcode": "27",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Updated xwLeft": "0",
"Updated xwRight": "0",
"Updated ywTop": "0",
"Updated ywBottom": "0"
},
"message": ""
}
Event ID 49 —
Fields #
| Name | Description |
|---|---|
Cmd Name UnicodeString | — |
FCI UInt32 | — |
TCID UInt32 | — |
grfcco UInt64 | — |
grfaux UInt64 | — |
kcm UInt32 | — |
kcm2 UInt32 | — |
Chained Boolean | — |
Macro Active Boolean | — |
Live Preview Boolean | — |
Orig pdod Pointer | — |
Orig Doc Kind UnicodeString | — |
Orig pmwd Pointer | — |
Orig wwd Pointer | — |
Orig View Type UnicodeString | — |
SEL pdod Pointer | — |
SEL Doc Kind UnicodeString | — |
SEL cpFirst Int32 | — |
SEL cpLim Int32 | — |
SEL pmwd Pointer | — |
SEL wwd Pointer | — |
SEL View Type UnicodeString | — |
Original pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "49",
"version": "2",
"level": "4",
"task": "9",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:52:07.344098700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Cmd Name": "EditGoTo",
"FCI": " 896",
"TCID": " 757",
"grfcco": "0x20100059",
"grfaux": "0x11",
"kcm": "0x247",
"kcm2": "0x0",
"Chained": "false",
"Macro Active": "false",
"Live Preview": "false",
"Orig pdod": "0x1FF3C67AD60",
"Orig Doc Kind": "Doc",
"Orig pmwd": "0x1FF3C5DD4A0",
"Orig wwd": "0x1FF3BF2B670",
"Orig View Type": "Page",
"SEL pdod": "0x1FF3C67AD60",
"SEL Doc Kind": "Doc",
"SEL cpFirst": "0",
"SEL cpLim": "0",
"SEL pmwd": "0x1FF3C5DD4A0",
"SEL wwd": "0x1FF3BF2B670",
"SEL View Type": "Page",
"Original pdodMain": "0x1FF3C67AD60"
},
"message": ""
}
Event ID 50 —
Fields #
| Name | Description |
|---|---|
Cmd Name UnicodeString | — |
Cmd Return UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "50",
"version": "0",
"level": "4",
"task": "9",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:52:30.226684700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Cmd Name": "QuickCheck",
"Cmd Return": "OK"
},
"message": ""
}
Event ID 51 —
Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | — |
Dlg ID UInt64 | — |
Cmd Name UnicodeString | — |
FCI UInt32 | — |
TCID UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "51",
"version": "0",
"level": "4",
"task": "10",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0"
},
"message": ""
}
Event ID 52 —
Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | — |
Dlg ID UInt64 | — |
Cmd Name UnicodeString | — |
Cmd Return UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "52",
"version": "0",
"level": "4",
"task": "10",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"Cmd Return": ""
},
"message": ""
}
Event ID 53 —
Fields #
| Name | Description |
|---|---|
Layout Type UnicodeString | — |
x Scroll Int32 | — |
y Scroll Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "53",
"version": "0",
"level": "4",
"task": "11",
"opcode": "27",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Layout Type": "",
"x Scroll": "0",
"y Scroll": "0"
},
"message": ""
}
Event ID 55 —
Fields #
| Name | Description |
|---|---|
x Scroll Int32 | — |
y Scroll Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "55",
"version": "0",
"level": "4",
"task": "11",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "0",
"y Scroll": "0"
},
"message": ""
}
Event ID 56 —
Fields #
| Name | Description |
|---|---|
x Scroll Int32 | — |
y Scroll Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "56",
"version": "0",
"level": "4",
"task": "11",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:51:59.007125600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "92",
"y Scroll": "432"
},
"message": ""
}
Event ID 57 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
Wwd UnicodeString | — |
Pct Zoom Double | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "57",
"version": "2",
"level": "4",
"task": "11",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:34:54.343529200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{d73f5340-b345-000c-cfaf-40d745b3dc01}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x2D835A758F0",
"Wwd": "Page",
"Pct Zoom": "100.000000"
},
"message": ""
}
Event ID 58 —
Fields #
| Name | Description |
|---|---|
Natural stop page Int32 | — |
x Natural stop point Int32 | — |
m_xeDmBegin Int32 | — |
xeMid Int32 | — |
Viewport left Int32 | — |
Viewport right Int32 | — |
Corrected page Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "58",
"version": "0",
"level": "4",
"task": "11",
"opcode": "14",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Natural stop page": "0",
"x Natural stop point": "0",
"m_xeDmBegin": "0",
"xeMid": "0",
"Viewport left": "0",
"Viewport right": "0",
"Corrected page": "0"
},
"message": ""
}
Event ID 59 —
Fields #
| Name | Description |
|---|---|
dxpInertiaStrength Int32 | — |
x Natural stop point Int32 | — |
Current xPos Int32 | — |
Snap point Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "59",
"version": "0",
"level": "4",
"task": "11",
"opcode": "15",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpInertiaStrength": "0",
"x Natural stop point": "0",
"Current xPos": "0",
"Snap point": "0"
},
"message": ""
}
Event ID 60 —
Fields #
| Name | Description |
|---|---|
dxpInertiaStrength Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "60",
"version": "0",
"level": "4",
"task": "11",
"opcode": "16",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpInertiaStrength": "0"
},
"message": ""
}
Event ID 61 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "61",
"version": "0",
"level": "4",
"task": "11",
"opcode": "17",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 62 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "62",
"version": "0",
"level": "4",
"task": "11",
"opcode": "18",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 63 —
Fields #
| Name | Description |
|---|---|
xScrollerContext Int32 | — |
yScrollerContext Int32 | — |
dxMoved Int32 | — |
dyMoved Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "63",
"version": "1",
"level": "4",
"task": "11",
"opcode": "19",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xScrollerContext": "0",
"yScrollerContext": "0",
"dxMoved": "0",
"dyMoved": "0"
},
"message": ""
}
Event ID 64 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "64",
"version": "0",
"level": "4",
"task": "11",
"opcode": "20",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 65 —
Fields #
| Name | Description |
|---|---|
Current point Int32 | — |
Left Bounds Int32 | — |
Right Bounds Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "65",
"version": "0",
"level": "4",
"task": "11",
"opcode": "21",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Current point": "0",
"Left Bounds": "0",
"Right Bounds": "0"
},
"message": ""
}
Event ID 66 —
Fields #
| Name | Description |
|---|---|
Correction point Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "66",
"version": "0",
"level": "4",
"task": "11",
"opcode": "22",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Correction point": "0"
},
"message": ""
}
Event ID 126 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
Cmd Name UnicodeString | — |
FCI UInt32 | — |
TCID UInt32 | — |
grfcco UInt64 | — |
grfaux UInt64 | — |
kcm UInt32 | — |
kcm2 UInt32 | — |
From Keyboard Boolean | — |
Chained Boolean | — |
Enabled Boolean | — |
grfoff1 UInt64 | — |
grfoff2 UInt64 | — |
grfoff3 UInt64 | — |
grfon1 UInt64 | — |
grfon2 UInt64 | — |
grfon3 UInt64 | — |
Cmd Return UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "126",
"version": "1",
"level": "3",
"task": "9",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0",
"grfcco": "0",
"grfaux": "0",
"kcm": "0",
"kcm2": "0",
"From Keyboard": "false",
"Chained": "false",
"Enabled": "false",
"grfoff1": "0",
"grfoff2": "0",
"grfoff3": "0",
"grfon1": "0",
"grfon2": "0",
"grfon3": "0",
"Cmd Return": ""
},
"message": ""
}
Event ID 127 —
Fields #
| Name | Description |
|---|---|
Dirty calls before update Int32 | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "127",
"version": "1",
"level": "50",
"task": "9",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dirty calls before update": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 128 —
Fields #
| Name | Description |
|---|---|
Updates already in progress Int32 | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "128",
"version": "1",
"level": "50",
"task": "9",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Updates already in progress": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 129 —
Fields #
| Name | Description |
|---|---|
Dirty calls during update Int32 | — |
Updates scheduled during update Int32 | — |
Updates still in progress Int32 | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "129",
"version": "1",
"level": "50",
"task": "9",
"opcode": "15",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dirty calls during update": "0",
"Updates scheduled during update": "0",
"Updates still in progress": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 130 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "130",
"version": "0",
"level": "4",
"task": "14",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 131 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "131",
"version": "0",
"level": "4",
"task": "14",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 138 —
Fields #
| Name | Description |
|---|---|
idTag UnicodeString | — |
depth Int32 | — |
cursorSaverOn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "138",
"version": "0",
"level": "4",
"task": "9",
"opcode": "16",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"idTag": "",
"depth": "0",
"cursorSaverOn": "false"
},
"message": ""
}
Event ID 139 —
Fields #
| Name | Description |
|---|---|
idTag UnicodeString | — |
fAll Boolean | — |
depth Int32 | — |
cursorSaverOn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "139",
"version": "0",
"level": "4",
"task": "9",
"opcode": "17",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"idTag": "",
"fAll": "false",
"depth": "0",
"cursorSaverOn": "false"
},
"message": ""
}
Event ID 140 —
Fields #
| Name | Description |
|---|---|
UserAction Int32 | — |
fViewportMovesRight Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "140",
"version": "0",
"level": "4",
"task": "17",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UserAction": "0",
"fViewportMovesRight": "false"
},
"message": ""
}
Event ID 141 —
Fields #
| Name | Description |
|---|---|
fViewportMovesRight Boolean | — |
cPagesMoved Int32 | — |
cPagesInViewport Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "141",
"version": "0",
"level": "4",
"task": "17",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fViewportMovesRight": "false",
"cPagesMoved": "0",
"cPagesInViewport": "0"
},
"message": ""
}
Event ID 142 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "142",
"version": "0",
"level": "5",
"task": "18",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 143 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "143",
"version": "0",
"level": "5",
"task": "18",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 144 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "144",
"version": "0",
"level": "5",
"task": "18",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 145 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "145",
"version": "0",
"level": "5",
"task": "18",
"opcode": "13",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 146 —
Fields #
| Name | Description |
|---|---|
Offset Int32 | — |
Interval Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "146",
"version": "0",
"level": "4",
"task": "11",
"opcode": "23",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Offset": "0",
"Interval": "0"
},
"message": ""
}
Event ID 147 —
Fields #
| Name | Description |
|---|---|
Point 1 Int32 | — |
Point 2 Int32 | — |
Point 3 Int32 | — |
Point 4 Int32 | — |
Point 5 Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "147",
"version": "0",
"level": "4",
"task": "11",
"opcode": "24",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Point 1": "0",
"Point 2": "0",
"Point 3": "0",
"Point 4": "0",
"Point 5": "0"
},
"message": ""
}
Event ID 160 —
Fields #
| Name | Description |
|---|---|
E1o info UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "160",
"version": "1",
"level": "4",
"task": "8",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E1o info": "0"
},
"message": ""
}
Event ID 161 —
Fields #
| Name | Description |
|---|---|
E1o info UInt32 | — |
pdod Pointer | — |
Doc Kind UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "161",
"version": "0",
"level": "4",
"task": "8",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E1o info": "0",
"pdod": "0x0",
"Doc Kind": ""
},
"message": ""
}
Event ID 170 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
Square Pixels of Missing Page Int32 | — |
Square Pixels of Missing DR content Int32 | — |
Square Pixels of Viewport Int32 | — |
Square Pixels Scrolled Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "170",
"version": "1",
"level": "4",
"task": "11",
"opcode": "25",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:30.227814900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"Square Pixels of Missing Page": "0",
"Square Pixels of Missing DR content": "0",
"Square Pixels of Viewport": "66000",
"Square Pixels Scrolled": "0"
},
"message": ""
}
Event ID 171 —
Fields #
| Name | Description |
|---|---|
Start Time (msec) UInt64 | — |
End Time (msec) UInt64 | — |
Duration (msec) UInt64 | — |
Sliver Count (pixel height or width 1) UInt32 | — |
Total Count UInt32 | — |
Threshold time (msec) UInt64 | — |
Threshold count UInt32 | — |
Dxw Max UInt32 | — |
Dyw Max UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "171",
"version": "0",
"level": "4",
"task": "11",
"opcode": "26",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Start Time (msec)": "0",
"End Time (msec)": "0",
"Duration (msec)": "0",
"Sliver Count (pixel height or width 1)": "0",
"Total Count": "0",
"Threshold time (msec)": "0",
"Threshold count": "0",
"Dxw Max": "0",
"Dyw Max": "0"
},
"message": ""
}
Event ID 176 —
Fields #
| Name | Description |
|---|---|
PtlType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "176",
"version": "0",
"level": "4",
"task": "24",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 177 —
Fields #
| Name | Description |
|---|---|
PtlType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "177",
"version": "0",
"level": "4",
"task": "24",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 178 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "178",
"version": "0",
"level": "4",
"task": "24",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 179 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "179",
"version": "0",
"level": "4",
"task": "24",
"opcode": "13",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 180 —
Fields #
| Name | Description |
|---|---|
IsNextError Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "180",
"version": "1",
"level": "4",
"task": "24",
"opcode": "14",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsNextError": "false"
},
"message": ""
}
Event ID 181 —
Fields #
| Name | Description |
|---|---|
IsNextError Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "181",
"version": "1",
"level": "4",
"task": "24",
"opcode": "15",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsNextError": "false"
},
"message": ""
}
Event ID 182 —
Fields #
| Name | Description |
|---|---|
cComments Int32 | — |
cReplies Int32 | — |
cArtObjs Int32 | — |
cFieldChars Int32 | — |
Event ID 183 —
Fields #
| Name | Description |
|---|---|
cParents UInt32 | — |
cReplies UInt32 | — |
cInkComments UInt32 | — |
cCommentsWithTables UInt32 | — |
cSmartArt UInt32 | — |
cVideos UInt32 | — |
cPictures UInt32 | — |
cCharts UInt32 | — |
cOtherE2Os UInt32 | — |
cFields UInt32 | — |
cOLEObjects UInt32 | — |
Event ID 184 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "184",
"version": "0",
"level": "100",
"task": "25",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 185 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "185",
"version": "0",
"level": "100",
"task": "25",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 186 —
Fields #
| Name | Description |
|---|---|
reason UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "186",
"version": "0",
"level": "100",
"task": "25",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": ""
},
"message": ""
}
Event ID 187 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "187",
"version": "0",
"level": "100",
"task": "25",
"opcode": "13",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 188 —
Fields #
| Name | Description |
|---|---|
ptX Int32 | — |
ptY Int32 | — |
updateCnt Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "188",
"version": "0",
"level": "100",
"task": "25",
"opcode": "14",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"updateCnt": "0"
},
"message": ""
}
Event ID 189 —
Fields #
| Name | Description |
|---|---|
ptX Int32 | — |
ptY Int32 | — |
updateCnt Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "189",
"version": "0",
"level": "100",
"task": "25",
"opcode": "15",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"updateCnt": "0"
},
"message": ""
}
Event ID 190 —
Fields #
| Name | Description |
|---|---|
ptX Int32 | — |
ptY Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "190",
"version": "0",
"level": "100",
"task": "25",
"opcode": "16",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0"
},
"message": ""
}
Event ID 191 —
Fields #
| Name | Description |
|---|---|
ptX Int32 | — |
ptY Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "191",
"version": "0",
"level": "100",
"task": "25",
"opcode": "17",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0"
},
"message": ""
}
Event ID 192 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "192",
"version": "0",
"level": "100",
"task": "25",
"opcode": "18",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 193 —
Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | — |
Sel.cpLim Int32 | — |
DocKind UnicodeString | — |
ViewType UnicodeString | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "193",
"version": "2",
"level": "4",
"task": "27",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 194 —
Fields #
| Name | Description |
|---|---|
cmdRet Int32 | — |
UsedFmt UnicodeString | — |
AvailFmts UnicodeString | — |
AvailFmtsCount UInt64 | — |
Size UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "194",
"version": "1",
"level": "4",
"task": "27",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0",
"UsedFmt": "",
"AvailFmts": "",
"AvailFmtsCount": "0",
"Size": "0"
},
"message": ""
}
Event ID 195 —
Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | — |
Sel.cpLim Int32 | — |
DocKind UnicodeString | — |
ViewType UnicodeString | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "195",
"version": "2",
"level": "4",
"task": "27",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 196 —
Fields #
| Name | Description |
|---|---|
cmdRet Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "196",
"version": "0",
"level": "4",
"task": "27",
"opcode": "13",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0"
},
"message": ""
}
Event ID 197 —
Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | — |
Sel.cpLim Int32 | — |
DocKind UnicodeString | — |
ViewType UnicodeString | — |
pdod Pointer | — |
pwwd Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "197",
"version": "2",
"level": "4",
"task": "27",
"opcode": "14",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 198 —
Fields #
| Name | Description |
|---|---|
cmdRet Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "198",
"version": "0",
"level": "4",
"task": "27",
"opcode": "15",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0"
},
"message": ""
}
Event ID 199 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
PasteType UInt32 | — |
SourceUrlHash GUID | — |
SourceLocationType UInt32 | — |
SourceApp Int32 | — |
ContentType UInt32 | — |
Size Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "199",
"version": "0",
"level": "4",
"task": "27",
"opcode": "17",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"PasteType": "0",
"SourceUrlHash": "{00000000-0000-0000-0000-000000000000}",
"SourceLocationType": "0",
"SourceApp": "0",
"ContentType": "0",
"Size": "0"
},
"message": ""
}
Event ID 201 —
Fields #
| Name | Description |
|---|---|
responsivenessType UnicodeString | — |
cIntervals UInt32 | — |
Bucket1-Min-Msec UInt64 | — |
Bucket2-Min-Msec UInt64 | — |
Bucket3-Min-Msec UInt64 | — |
Bucket4-Min-Msec UInt64 | — |
Bucket5-Min-Msec UInt64 | — |
Bucket6-Min-Msec UInt64 | — |
Bucket7-Min-Msec UInt64 | — |
Bucket8-Min-Msec UInt64 | — |
Bucket9-Min-Msec UInt64 | — |
Bucket10-Min-Msec UInt64 | — |
Bucket1-Count UInt64 | — |
Bucket2-Count UInt64 | — |
Bucket3-Count UInt64 | — |
Bucket4-Count UInt64 | — |
Bucket5-Count UInt64 | — |
Bucket6-Count UInt64 | — |
Bucket7-Count UInt64 | — |
Bucket8-Count UInt64 | — |
Bucket9-Count UInt64 | — |
Bucket10-Count UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "201",
"version": "0",
"level": "4",
"task": "1",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:34.468277500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"responsivenessType": "MsoHrRedirectCheckedOutFile",
"cIntervals": " 2",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "50",
"Bucket3-Min-Msec": "100",
"Bucket4-Min-Msec": "200",
"Bucket5-Min-Msec": "500",
"Bucket6-Min-Msec": "1000",
"Bucket7-Min-Msec": "2000",
"Bucket8-Min-Msec": "3000",
"Bucket9-Min-Msec": "4000",
"Bucket10-Min-Msec": "5000",
"Bucket1-Count": "2",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0"
},
"message": ""
}
Event ID 202 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
responsivenessType UnicodeString | — |
timeoutLength UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "202",
"version": "1",
"level": "3",
"task": "1",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"responsivenessType": "",
"timeoutLength": "0"
},
"message": ""
}
Event ID 203 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
IsDocDirty Boolean | — |
Message UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "203",
"version": "0",
"level": "4",
"task": "29",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"IsDocDirty": "false",
"Message": ""
},
"message": ""
}
Event ID 204 —
Fields #
| Name | Description |
|---|---|
FuncName UnicodeString | — |
Dusec UInt64 | — |
fAborted Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "204",
"version": "0",
"level": "4",
"task": "31",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FuncName": "",
"Dusec": "0",
"fAborted": "false"
},
"message": ""
}
Event ID 205 —
Fields #
| Name | Description |
|---|---|
Kind Int32 | — |
sti Int32 | — |
stiBase Int32 | — |
istd UInt32 | — |
istdBase Int32 | — |
Linked Int32 | — |
Live Preview Boolean | — |
fResult Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "205",
"version": "0",
"level": "4",
"task": "18",
"opcode": "14",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Kind": "0",
"sti": "0",
"stiBase": "0",
"istd": "0",
"istdBase": "0",
"Linked": "0",
"Live Preview": "false",
"fResult": "false"
},
"message": ""
}
Event ID 206 —
Fields #
| Name | Description |
|---|---|
ActionType UInt32 | — |
E2oId UInt32 | — |
E2oType UInt32 | — |
PrevTextWrapping UInt32 | — |
NewTextWrapping UInt32 | — |
SqmDocID GUID | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "206",
"version": "2",
"level": "4",
"task": "32",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ActionType": "0",
"E2oId": "0",
"E2oType": "0",
"PrevTextWrapping": "0",
"NewTextWrapping": "0",
"SqmDocID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 207 —
Fields #
| Name | Description |
|---|---|
ammPrev UInt32 | — |
ammNew UInt32 | — |
Event ID 208 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "208",
"version": "0",
"level": "4",
"task": "33",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": ""
},
"message": ""
}
Event ID 209 —
Fields #
| Name | Description |
|---|---|
Caller UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "209",
"version": "0",
"level": "4",
"task": "33",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": ""
},
"message": ""
}
Event ID 210 —
Fields #
| Name | Description |
|---|---|
izSource UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "210",
"version": "0",
"level": "4",
"task": "34",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"izSource": ""
},
"message": ""
}
Event ID 211 —
Fields #
| Name | Description |
|---|---|
instance UInt32 | — |
objectType UnicodeString | — |
toggleToState UnicodeString | — |
scale UInt32 | — |
zoom UInt32 | — |
windowWidth UInt64 | — |
windowHeight UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "211",
"version": "0",
"level": "4",
"task": "34",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"instance": "0",
"objectType": "",
"toggleToState": "",
"scale": "0",
"zoom": "0",
"windowWidth": "0",
"windowHeight": "0"
},
"message": ""
}
Event ID 212 —
Fields #
| Name | Description |
|---|---|
instance UInt32 | — |
objectType UnicodeString | — |
scale UInt32 | — |
zoom UInt32 | — |
windowWidth UInt64 | — |
windowHeight UInt64 | — |
secondLevel UnicodeString | — |
objectFitKind UnicodeString | — |
availSpaceWidth UInt64 | — |
availSpaceHeight UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "212",
"version": "0",
"level": "4",
"task": "34",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"instance": "0",
"objectType": "",
"scale": "0",
"zoom": "0",
"windowWidth": "0",
"windowHeight": "0",
"secondLevel": "",
"objectFitKind": "",
"availSpaceWidth": "0",
"availSpaceHeight": "0"
},
"message": ""
}
Event ID 213 —
Fields #
| Name | Description |
|---|---|
fSinglePage Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "213",
"version": "0",
"level": "4",
"task": "17",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSinglePage": "false"
},
"message": ""
}
Event ID 214 —
Fields #
| Name | Description |
|---|---|
PageTurnSuccess Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "214",
"version": "0",
"level": "4",
"task": "17",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PageTurnSuccess": "false"
},
"message": ""
}
Event ID 215 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "215",
"version": "0",
"level": "4",
"task": "14",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 217 —
Fields #
| Name | Description |
|---|---|
providerName UnicodeString | — |
apiName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "217",
"version": "0",
"level": "4",
"task": "14",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"providerName": "",
"apiName": ""
},
"message": ""
}
Event ID 218 —
Fields #
| Name | Description |
|---|---|
ReadModeFontSizePCT Double | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "218",
"version": "0",
"level": "4",
"task": "36",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReadModeFontSizePCT": "0.0"
},
"message": ""
}
Event ID 220 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "220",
"version": "0",
"level": "4",
"task": "8",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 221 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "221",
"version": "0",
"level": "4",
"task": "8",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 223 —
Fields #
| Name | Description |
|---|---|
PtlType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "223",
"version": "0",
"level": "4",
"task": "24",
"opcode": "16",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 224 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "224",
"version": "0",
"level": "4",
"task": "24",
"opcode": "17",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 225 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
View Type UnicodeString | — |
hwwd.pdod Pointer | — |
Doc Kind UnicodeString | — |
cpok UInt32 | — |
taxc.IMac UInt32 | — |
rcwAnchor.xp Int32 | — |
rcwAnchor.yp Int32 | — |
rcwAnchor.dxp Int32 | — |
rcwAnchor.dyp Int32 | — |
SEL pdod Pointer | — |
SEL Doc Kind UnicodeString | — |
SEL cpFirst Int32 | — |
SEL cpLim Int32 | — |
fForcefullySingleThreaded Boolean | — |
cplr UInt32 | — |
fDocsPaneUX Boolean | — |
fTrackChanges Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "225",
"version": "1",
"level": "4",
"task": "26",
"opcode": "13",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"hwwd.pdod": "0x0",
"Doc Kind": "",
"cpok": "0",
"taxc.IMac": "0",
"rcwAnchor.xp": "0",
"rcwAnchor.yp": "0",
"rcwAnchor.dxp": "0",
"rcwAnchor.dyp": "0",
"SEL pdod": "0x0",
"SEL Doc Kind": "",
"SEL cpFirst": "0",
"SEL cpLim": "0",
"fForcefullySingleThreaded": "false",
"cplr": "0",
"fDocsPaneUX": "false",
"fTrackChanges": "false"
},
"message": ""
}
Event ID 226 —
Fields #
| Name | Description |
|---|---|
ItemType Int32 | — |
tplc Int64 | — |
iCat Int32 | — |
nfc Int32 | — |
iApplyTo Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "226",
"version": "0",
"level": "4",
"task": "38",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ItemType": "0",
"tplc": "0",
"iCat": "0",
"nfc": "0",
"iApplyTo": "0"
},
"message": ""
}
Event ID 227 —
Fields #
| Name | Description |
|---|---|
textPatternCount UInt64 | — |
textRangePatternCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "227",
"version": "0",
"level": "4",
"task": "14",
"opcode": "14",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"textPatternCount": "0",
"textRangePatternCount": "0"
},
"message": ""
}
Event ID 228 —
Fields #
| Name | Description |
|---|---|
PtlType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "228",
"version": "0",
"level": "4",
"task": "24",
"opcode": "18",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 229 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fUndo Int32 | — |
cActions Int32 | — |
fucr UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "229",
"version": "0",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fUndo": "0",
"cActions": "0",
"fucr": "0"
},
"message": ""
}
Event ID 230 —
Fields #
| Name | Description |
|---|---|
fRet Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "230",
"version": "0",
"level": "4",
"task": "41",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "0"
},
"message": ""
}
Event ID 231 —
Fields #
| Name | Description |
|---|---|
fUndo Int32 | — |
Command Int32 | — |
CommandArgument Int32 | — |
UndoType UInt32 | — |
fChained Boolean | — |
fChainStart Boolean | — |
fInLiveDrag Boolean | — |
fSwapConsidered Boolean | — |
fSavedByAllowSwapStyles Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "231",
"version": "3",
"level": "4",
"task": "41",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fUndo": "0",
"Command": "0",
"CommandArgument": "0",
"UndoType": "0",
"fChained": "false",
"fChainStart": "false",
"fInLiveDrag": "false",
"fSwapConsidered": "false",
"fSavedByAllowSwapStyles": "false"
},
"message": ""
}
Event ID 232 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
cUndoCmdsBlown Int32 | — |
cRedoCmdsBlown Int32 | — |
cCmdsUsk Int32 | — |
Reason UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "232",
"version": "0",
"level": "4",
"task": "41",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cUndoCmdsBlown": "0",
"cRedoCmdsBlown": "0",
"cCmdsUsk": "0",
"Reason": ""
},
"message": ""
}
Event ID 233 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fTrackChangesNewState Boolean | — |
stateToggledByFCI Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "233",
"version": "0",
"level": "4",
"task": "42",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-14T21:52:32.892847000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"fTrackChangesNewState": "true",
"stateToggledByFCI": "956"
},
"message": ""
}
Event ID 234 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fTrackChangesOn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "234",
"version": "0",
"level": "4",
"task": "42",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fTrackChangesOn": "false"
},
"message": ""
}
Event ID 235 —
Fields #
| Name | Description |
|---|---|
OpenInRM Boolean | — |
Reason UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "235",
"version": "0",
"level": "4",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenInRM": "false",
"Reason": ""
},
"message": ""
}
Event ID 236 —
Fields #
| Name | Description |
|---|---|
moveDistance Int32 | — |
moveTime Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "236",
"version": "1",
"level": "100",
"task": "25",
"opcode": "19",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"moveDistance": "0",
"moveTime": "0"
},
"message": ""
}
Event ID 237 —
Fields #
| Name | Description |
|---|---|
maxDistance1 Int32 | — |
maxDistanceTime1 Int64 | — |
maxDistance2 Int32 | — |
maxDistanceTime2 Int64 | — |
maxDistance3 Int32 | — |
maxDistanceTime3 Int64 | — |
maxTime1 Int64 | — |
maxTimeDistance1 Int32 | — |
maxTime2 Int64 | — |
maxTimeDistance2 Int32 | — |
maxTime3 Int64 | — |
maxTimeDistance3 Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "237",
"version": "0",
"level": "100",
"task": "25",
"opcode": "20",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"maxDistance1": "0",
"maxDistanceTime1": "0",
"maxDistance2": "0",
"maxDistanceTime2": "0",
"maxDistance3": "0",
"maxDistanceTime3": "0",
"maxTime1": "0",
"maxTimeDistance1": "0",
"maxTime2": "0",
"maxTimeDistance2": "0",
"maxTime3": "0",
"maxTimeDistance3": "0"
},
"message": ""
}
Event ID 238 —
Fields #
| Name | Description |
|---|---|
dxpApp Int32 | — |
dypApp Int32 | — |
rclwApp Int32 | — |
pctFontApp Int32 | — |
dxpPageContentApp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "238",
"version": "0",
"level": "4",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpApp": "0",
"dypApp": "0",
"rclwApp": "0",
"pctFontApp": "0",
"dxpPageContentApp": "0"
},
"message": ""
}
Event ID 239 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
SQMDocID GUID | — |
dk UInt32 | — |
cpMac Int32 | — |
cpReq Int32 | — |
cpFirst Int32 | — |
cpLim Int32 | — |
fFoundPiece Boolean | — |
fBinaryPiece Boolean | — |
fInBulletProofer Boolean | — |
fSafeFetch Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "239",
"version": "1",
"level": "3",
"task": "18",
"opcode": "15",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"dk": "0",
"cpMac": "0",
"cpReq": "0",
"cpFirst": "0",
"cpLim": "0",
"fFoundPiece": "false",
"fBinaryPiece": "false",
"fInBulletProofer": "false",
"fSafeFetch": "false"
},
"message": ""
}
Event ID 240 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "240",
"version": "0",
"level": "4",
"task": "27",
"opcode": "16",
"keywords": 9223372036854792192,
"time_created": "2026-03-14T21:53:36.811922800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 241 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
FCI UInt32 | — |
fCoauthEdit Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "241",
"version": "1",
"level": "5",
"task": "41",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.469410900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"FCI": " 7000",
"fCoauthEdit": "false"
},
"message": ""
}
Event ID 242 —
Fields #
| Name | Description |
|---|---|
fRet Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "242",
"version": "0",
"level": "5",
"task": "41",
"opcode": "15",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.469413300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "1"
},
"message": ""
}
Event ID 243 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
FCI UInt32 | — |
fCoauthEdit Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "243",
"version": "1",
"level": "5",
"task": "41",
"opcode": "16",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.466643800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"FCI": " 7000",
"fCoauthEdit": "false"
},
"message": ""
}
Event ID 244 —
Fields #
| Name | Description |
|---|---|
fRet Int32 | — |
cPaxuadSlots Int32 | — |
cPaxuadSlotsUsed Int32 | — |
cPaxuadSlotsUnused Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "244",
"version": "0",
"level": "5",
"task": "41",
"opcode": "17",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.466716000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "1",
"cPaxuadSlots": "10",
"cPaxuadSlotsUsed": "4",
"cPaxuadSlotsUnused": "6"
},
"message": ""
}
Event ID 245 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
FCI UInt32 | — |
dcp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "245",
"version": "0",
"level": "4",
"task": "41",
"opcode": "18",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"FCI": "0",
"dcp": "0"
},
"message": ""
}
Event ID 246 —
Fields #
| Name | Description |
|---|---|
reason UInt32 | — |
FCI UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "246",
"version": "0",
"level": "4",
"task": "41",
"opcode": "19",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": "0",
"FCI": "0"
},
"message": ""
}
Event ID 250 —
Fields #
| Name | Description |
|---|---|
RMRR UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "250",
"version": "1",
"level": "4",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RMRR": "0"
},
"message": ""
}
Event ID 251 —
Fields #
| Name | Description |
|---|---|
ZoomScrollCause UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "39",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ZoomScrollCause": "0"
},
"message": ""
}
Event ID 252 —
Fields #
| Name | Description |
|---|---|
flt Int32 | — |
fcr Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "252",
"version": "0",
"level": "4",
"task": "44",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 253 —
Fields #
| Name | Description |
|---|---|
flt Int32 | — |
fcr Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "253",
"version": "0",
"level": "4",
"task": "44",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 254 —
Fields #
| Name | Description |
|---|---|
cTasks Int32 | — |
Endpoint UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "254",
"version": "0",
"level": "4",
"task": "45",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cTasks": "0",
"Endpoint": "0"
},
"message": ""
}
Event ID 255 —
Fields #
| Name | Description |
|---|---|
cExecutedTasks Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "255",
"version": "0",
"level": "4",
"task": "45",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-14T22:34:52.830081500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cExecutedTasks": "159"
},
"message": ""
}
Event ID 256 —
Fields #
| Name | Description |
|---|---|
Name UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "256",
"version": "0",
"level": "4",
"task": "45",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": ""
},
"message": ""
}
Event ID 257 —
Fields #
| Name | Description |
|---|---|
Name UnicodeString | — |
fPass Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "257",
"version": "0",
"level": "4",
"task": "45",
"opcode": "13",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": "",
"fPass": "false"
},
"message": ""
}
Event ID 258 —
Fields #
| Name | Description |
|---|---|
AttachmentIndex UInt64 | — |
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "258",
"version": "0",
"level": "4",
"task": "46",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AttachmentIndex": "0",
"HResult": "0"
},
"message": ""
}
Event ID 259 —
Fields #
| Name | Description |
|---|---|
CID UnicodeString | — |
fReuse Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "259",
"version": "0",
"level": "4",
"task": "46",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CID": "",
"fReuse": "false"
},
"message": ""
}
Event ID 260 —
Fields #
| Name | Description |
|---|---|
flt Int32 | — |
fcr Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "260",
"version": "0",
"level": "4",
"task": "44",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 261 —
Fields #
| Name | Description |
|---|---|
pctFontApp Int32 | — |
pctFontUI Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "261",
"version": "0",
"level": "4",
"task": "48",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pctFontApp": "0",
"pctFontUI": "0"
},
"message": ""
}
Event ID 262 —
Fields #
| Name | Description |
|---|---|
pctApp Int32 | — |
pctUI Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "262",
"version": "0",
"level": "4",
"task": "48",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pctApp": "0",
"pctUI": "0"
},
"message": ""
}
Event ID 263 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "263",
"version": "0",
"level": "4",
"task": "45",
"opcode": "14",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 264 —
Fields #
| Name | Description |
|---|---|
vcLcidEdit Int32 | — |
vfFlavourT Int32 | — |
lidInstall Int32 | — |
lidUITemp Int32 | — |
lidOS Int32 | — |
lidDefault Int32 | — |
lidPolicy Int32 | — |
cpgUI Int32 | — |
cpgOS Int32 | — |
chsOS Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "264",
"version": "0",
"level": "4",
"task": "45",
"opcode": "15",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"vcLcidEdit": "0",
"vfFlavourT": "0",
"lidInstall": "0",
"lidUITemp": "0",
"lidOS": "0",
"lidDefault": "0",
"lidPolicy": "0",
"cpgUI": "0",
"cpgOS": "0",
"chsOS": "0"
},
"message": ""
}
Event ID 265 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "265",
"version": "0",
"level": "4",
"task": "45",
"opcode": "16",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 266 —
Fields #
| Name | Description |
|---|---|
lidKbd UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "266",
"version": "0",
"level": "4",
"task": "45",
"opcode": "17",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lidKbd": "0"
},
"message": ""
}
Event ID 267 —
Fields #
| Name | Description |
|---|---|
vfProfileStartup Boolean | — |
Event ID 268 —
Fields #
| Name | Description |
|---|---|
fOsrc Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "268",
"version": "0",
"level": "4",
"task": "45",
"opcode": "19",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fOsrc": "false"
},
"message": ""
}
Event ID 269 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
autoSwitchedByFCI Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "269",
"version": "1",
"level": "4",
"task": "49",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"autoSwitchedByFCI": "0"
},
"message": ""
}
Event ID 270 —
Fields #
| Name | Description |
|---|---|
LevelPrev Int32 | — |
LevelCur Int32 | — |
UsageCur UInt64 | — |
LimitCur UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "270",
"version": "0",
"level": "4",
"task": "50",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelPrev": "0",
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 271 —
Fields #
| Name | Description |
|---|---|
LimitPrev UInt64 | — |
LimitCur UInt64 | — |
UsageCur UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "271",
"version": "0",
"level": "4",
"task": "50",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LimitPrev": "0",
"LimitCur": "0",
"UsageCur": "0"
},
"message": ""
}
Event ID 272 —
Fields #
| Name | Description |
|---|---|
LevelCur Int32 | — |
UsageCur UInt64 | — |
LimitCur UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "272",
"version": "0",
"level": "5",
"task": "50",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 273 —
Fields #
| Name | Description |
|---|---|
LevelPrev Int32 | — |
UsagePrev UInt64 | — |
LimitPrev UInt64 | — |
LevelCur Int32 | — |
UsageCur UInt64 | — |
LimitCur UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "273",
"version": "0",
"level": "4",
"task": "50",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelPrev": "0",
"UsagePrev": "0",
"LimitPrev": "0",
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 274 —
Fields #
| Name | Description |
|---|---|
PartCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "274",
"version": "0",
"level": "4",
"task": "46",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartCount": "0"
},
"message": ""
}
Event ID 275 —
Fields #
| Name | Description |
|---|---|
PartCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "275",
"version": "0",
"level": "4",
"task": "46",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartCount": "0"
},
"message": ""
}
Event ID 276 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "276",
"version": "0",
"level": "4",
"task": "46",
"opcode": "13",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 277 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ChromeOnly Boolean | — |
ReadOnly Boolean | — |
PartId UInt32 | — |
SdtId UInt32 | — |
SdtContentId UInt32 | — |
UseBackgroundLoad Boolean | — |
ReplacePart Boolean | — |
PlainText Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "277",
"version": "1",
"level": "4",
"task": "46",
"opcode": "14",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ChromeOnly": "false",
"ReadOnly": "false",
"PartId": "0",
"SdtId": "0",
"SdtContentId": "0",
"UseBackgroundLoad": "false",
"ReplacePart": "false",
"PlainText": "false"
},
"message": ""
}
Event ID 278 —
Fields #
| Name | Description |
|---|---|
ReadOnly Boolean | — |
PartId UInt32 | — |
SdtId UInt32 | — |
PlainText Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "278",
"version": "0",
"level": "4",
"task": "46",
"opcode": "14",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReadOnly": "false",
"PartId": "0",
"SdtId": "0",
"PlainText": "false"
},
"message": ""
}
Event ID 279 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "279",
"version": "0",
"level": "4",
"task": "46",
"opcode": "15",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 280 —
Fields #
| Name | Description |
|---|---|
Reset Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "280",
"version": "0",
"level": "4",
"task": "46",
"opcode": "16",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Reset": "false"
},
"message": ""
}
Event ID 281 —
Fields #
| Name | Description |
|---|---|
SDTType UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "281",
"version": "0",
"level": "4",
"task": "46",
"opcode": "17",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SDTType": "0"
},
"message": ""
}
Event ID 282 —
Fields #
| Name | Description |
|---|---|
Index UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "282",
"version": "0",
"level": "4",
"task": "46",
"opcode": "18",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0"
},
"message": ""
}
Event ID 283 —
Fields #
| Name | Description |
|---|---|
CP Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "283",
"version": "0",
"level": "4",
"task": "46",
"opcode": "19",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0"
},
"message": ""
}
Event ID 284 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "284",
"version": "0",
"level": "4",
"task": "46",
"opcode": "20",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 285 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "285",
"version": "0",
"level": "4",
"task": "46",
"opcode": "21",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 286 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "286",
"version": "1",
"level": "4",
"task": "46",
"opcode": "22",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 287 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "287",
"version": "0",
"level": "4",
"task": "46",
"opcode": "23",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 288 —
Fields #
| Name | Description |
|---|---|
IsPlainText Boolean | — |
NumberAttachments UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "288",
"version": "0",
"level": "4",
"task": "46",
"opcode": "24",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsPlainText": "false",
"NumberAttachments": "0"
},
"message": ""
}
Event ID 289 —
Fields #
| Name | Description |
|---|---|
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "289",
"version": "0",
"level": "4",
"task": "46",
"opcode": "25",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 290 —
Fields #
| Name | Description |
|---|---|
PlainText Boolean | — |
StreamCount UInt64 | — |
AttachmentCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "290",
"version": "0",
"level": "4",
"task": "46",
"opcode": "26",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PlainText": "false",
"StreamCount": "0",
"AttachmentCount": "0"
},
"message": ""
}
Event ID 291 —
Fields #
| Name | Description |
|---|---|
Success Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "291",
"version": "0",
"level": "4",
"task": "46",
"opcode": "27",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false"
},
"message": ""
}
Event ID 292 —
Fields #
| Name | Description |
|---|---|
ParaCP Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "292",
"version": "0",
"level": "4",
"task": "46",
"opcode": "28",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ParaCP": "0"
},
"message": ""
}
Event ID 293 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "293",
"version": "0",
"level": "4",
"task": "46",
"opcode": "29",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 294 —
Fields #
| Name | Description |
|---|---|
Count Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "294",
"version": "0",
"level": "4",
"task": "46",
"opcode": "30",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count": "0"
},
"message": ""
}
Event ID 295 —
Fields #
| Name | Description |
|---|---|
ID UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "295",
"version": "0",
"level": "4",
"task": "46",
"opcode": "31",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ID": ""
},
"message": ""
}
Event ID 296 —
Fields #
| Name | Description |
|---|---|
ID UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "296",
"version": "0",
"level": "4",
"task": "46",
"opcode": "32",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ID": ""
},
"message": ""
}
Event ID 297 —
Fields #
| Name | Description |
|---|---|
IsReadOnly Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "297",
"version": "0",
"level": "4",
"task": "46",
"opcode": "33",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsReadOnly": "false"
},
"message": ""
}
Event ID 298 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "298",
"version": "0",
"level": "4",
"task": "46",
"opcode": "34",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 299 —
Fields #
| Name | Description |
|---|---|
PartId UInt32 | — |
SdtId UInt32 | — |
IsHeader Boolean | — |
HeaderXValue UInt32 | — |
HeaderYValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "299",
"version": "0",
"level": "4",
"task": "46",
"opcode": "35",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"SdtId": "0",
"IsHeader": "false",
"HeaderXValue": "0",
"HeaderYValue": "0"
},
"message": ""
}
Event ID 300 —
Fields #
| Name | Description |
|---|---|
OutputType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "46",
"opcode": "36",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OutputType": "0"
},
"message": ""
}
Event ID 301 —
Fields #
| Name | Description |
|---|---|
UseBackgroundLoading Boolean | — |
IsReadOnly Boolean | — |
IsPlainText Boolean | — |
Encoding Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "301",
"version": "0",
"level": "4",
"task": "46",
"opcode": "37",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UseBackgroundLoading": "false",
"IsReadOnly": "false",
"IsPlainText": "false",
"Encoding": "0"
},
"message": ""
}
Event ID 302 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "46",
"opcode": "38",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 303 —
Fields #
| Name | Description |
|---|---|
IsvpdodGlobalDot Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "46",
"opcode": "39",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsvpdodGlobalDot": "false"
},
"message": ""
}
Event ID 304 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "46",
"opcode": "40",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 305 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "46",
"opcode": "41",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 306 —
Fields #
| Name | Description |
|---|---|
fDefaultViewWebScaling Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "49",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDefaultViewWebScaling": "false"
},
"message": ""
}
Event ID 307 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
Wwd UnicodeString | — |
Pct Zoom Double | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "307",
"version": "1",
"level": "4",
"task": "11",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:35:41.425107900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "14136",
"thread_id": "13320"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x25ACDCD2D80",
"Wwd": "Low Res Page",
"Pct Zoom": "10.000000"
},
"message": ""
}
Event ID 308 —
Fields #
| Name | Description |
|---|---|
MsForHitTesting UInt64 | — |
CountOfWindowlessNetUI UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "46",
"opcode": "42",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MsForHitTesting": "0",
"CountOfWindowlessNetUI": "0"
},
"message": ""
}
Event ID 309 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "52",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 310 —
Fields #
| Name | Description |
|---|---|
fProtected Boolean | — |
fEmptyIdentity Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "52",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fProtected": "false",
"fEmptyIdentity": "false"
},
"message": ""
}
Event ID 311 —
Fields #
| Name | Description |
|---|---|
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "311",
"version": "0",
"level": "4",
"task": "50",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 312 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "45",
"opcode": "20",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 313 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
docKind UInt32 | — |
SQMDocID GUID | — |
DocumentId UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "313",
"version": "0",
"level": "4",
"task": "9",
"opcode": "18",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:57:27.606864300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x2CA3EA2C1D0",
"docKind": "0x1",
"SQMDocID": "{eb36f39b-65d1-4e9f-bec3-ebc6abbde1b0}",
"DocumentId": "2063860877"
},
"message": ""
}
Event ID 314 —
Fields #
| Name | Description |
|---|---|
obi Int32 | — |
ioid Int32 | — |
dispid Int32 | — |
Invoke UnicodeString | — |
ClassName UnicodeString | — |
MethodPropName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "314",
"version": "0",
"level": "4",
"task": "54",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"obi": "0",
"ioid": "0",
"dispid": "0",
"Invoke": "",
"ClassName": "",
"MethodPropName": ""
},
"message": ""
}
Event ID 315 —
Fields #
| Name | Description |
|---|---|
RevokedSession GUID | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "315",
"version": "0",
"level": "4",
"task": "52",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RevokedSession": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 316 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "316",
"version": "0",
"level": "4",
"task": "52",
"opcode": "13",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 317 —
Fields #
| Name | Description |
|---|---|
fThinAutoCorrectArrowType Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "317",
"version": "0",
"level": "4",
"task": "24",
"opcode": "19",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fThinAutoCorrectArrowType": "false"
},
"message": ""
}
Event ID 321 —
Fields #
| Name | Description |
|---|---|
x Scroll Int32 | — |
y Scroll Int32 | — |
Pct Zoom Double | — |
In DM Boolean | — |
In VM Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "321",
"version": "0",
"level": "4",
"task": "11",
"opcode": "31",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:35:41.465852200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "14136",
"thread_id": "13320"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "0",
"y Scroll": "0",
"Pct Zoom": "100.000000",
"In DM": "false",
"In VM": "false"
},
"message": ""
}
Event ID 322 —
Fields #
| Name | Description |
|---|---|
x Scroll Int32 | — |
y Scroll Int32 | — |
Pct Zoom Double | — |
In DM Boolean | — |
In VM Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "322",
"version": "0",
"level": "4",
"task": "11",
"opcode": "32",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:30.227811100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "679",
"y Scroll": "93",
"Pct Zoom": "100.000000",
"In DM": "false",
"In VM": "false"
},
"message": ""
}
Event ID 323 —
Fields #
| Name | Description |
|---|---|
unknownUnsupported UInt32 | — |
cssTableBackgroundImage UInt32 | — |
cssASpanPaddingBottom UInt32 | — |
cssASpanMarginBottom UInt32 | — |
cssDivASpanDimensions UInt32 | — |
cssPosition UInt32 | — |
htmlTableBackgroundImage UInt32 | — |
htmlForm UInt32 | — |
tableHeaderOrFooter UInt32 | — |
tableWiderThan61Cols UInt32 | — |
tableColspan UInt32 | — |
tableCaption UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "323",
"version": "0",
"level": "4",
"task": "46",
"opcode": "43",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"unknownUnsupported": "0",
"cssTableBackgroundImage": "0",
"cssASpanPaddingBottom": "0",
"cssASpanMarginBottom": "0",
"cssDivASpanDimensions": "0",
"cssPosition": "0",
"htmlTableBackgroundImage": "0",
"htmlForm": "0",
"tableHeaderOrFooter": "0",
"tableWiderThan61Cols": "0",
"tableColspan": "0",
"tableCaption": "0"
},
"message": ""
}
Event ID 324 —
Fields #
| Name | Description |
|---|---|
dk Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "324",
"version": "0",
"level": "5",
"task": "55",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dk": "0"
},
"message": ""
}
Event ID 325 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "325",
"version": "0",
"level": "5",
"task": "55",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 326 —
Fields #
| Name | Description |
|---|---|
id UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "326",
"version": "1",
"level": "5",
"task": "55",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"id": ""
},
"message": ""
}
Event ID 327 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "327",
"version": "0",
"level": "5",
"task": "55",
"opcode": "13",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 328 —
Event ID 329 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "329",
"version": "0",
"level": "5",
"task": "55",
"opcode": "15",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 330 —
Fields #
| Name | Description |
|---|---|
Dismissal Reason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "330",
"version": "1",
"level": "5",
"task": "55",
"opcode": "16",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dismissal Reason": "0"
},
"message": ""
}
Event ID 331 —
Fields #
| Name | Description |
|---|---|
cAtm Int32 | — |
dk Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "331",
"version": "0",
"level": "5",
"task": "55",
"opcode": "17",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cAtm": "0",
"dk": "0"
},
"message": ""
}
Event ID 332 —
Fields #
| Name | Description |
|---|---|
cAtm Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "332",
"version": "0",
"level": "5",
"task": "55",
"opcode": "17",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cAtm": "0"
},
"message": ""
}
Event ID 333 —
Fields #
| Name | Description |
|---|---|
Name UnicodeString | — |
fPass Boolean | — |
msecTimeTaken UInt64 | — |
tInterrupted Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "333",
"version": "1",
"level": "4",
"task": "45",
"opcode": "21",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": "",
"fPass": "false",
"msecTimeTaken": "0",
"tInterrupted": "0"
},
"message": ""
}
Event ID 334 —
Fields #
| Name | Description |
|---|---|
AllowAutoRM Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "334",
"version": "0",
"level": "4",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AllowAutoRM": "false"
},
"message": ""
}
Event ID 335 —
Fields #
| Name | Description |
|---|---|
Old Value Boolean | — |
New Value Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "335",
"version": "0",
"level": "4",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Old Value": "false",
"New Value": "false"
},
"message": ""
}
Event ID 336 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
Old Pct Zoom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "336",
"version": "1",
"level": "4",
"task": "49",
"opcode": "15",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"Old Pct Zoom": "0"
},
"message": ""
}
Event ID 337 —
Fields #
| Name | Description |
|---|---|
tbt UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "337",
"version": "0",
"level": "4",
"task": "10",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tbt": "0"
},
"message": ""
}
Event ID 338 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "338",
"version": "0",
"level": "4",
"task": "10",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 339 —
Fields #
| Name | Description |
|---|---|
leftDelta UInt32 | — |
rightDelta UInt32 | — |
topDelta UInt32 | — |
bottomDelta UInt32 | — |
widthE1o UInt32 | — |
widthE2o UInt32 | — |
heightE1o UInt32 | — |
heightE2o UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "339",
"version": "0",
"level": "4",
"task": "8",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"leftDelta": "0",
"rightDelta": "0",
"topDelta": "0",
"bottomDelta": "0",
"widthE1o": "0",
"widthE2o": "0",
"heightE1o": "0",
"heightE2o": "0"
},
"message": ""
}
Event ID 340 —
Fields #
| Name | Description |
|---|---|
rstyp UInt32 | — |
xsz UnicodeString | — |
timeoutLength UInt64 | — |
corlid UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "340",
"version": "0",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"rstyp": "0",
"xsz": "",
"timeoutLength": "0",
"corlid": "0"
},
"message": ""
}
Event ID 341 —
Fields #
| Name | Description |
|---|---|
rstyp UInt32 | — |
xsz UnicodeString | — |
fActive Boolean | — |
corlid UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "341",
"version": "0",
"level": "4",
"task": "1",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"rstyp": "0",
"xsz": "",
"fActive": "false",
"corlid": "0"
},
"message": ""
}
Event ID 342 —
Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "342",
"version": "0",
"level": "4",
"task": "11",
"opcode": "33",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:51:59.006744500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": " 2"
},
"message": ""
}
Event ID 343 —
Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "343",
"version": "0",
"level": "4",
"task": "11",
"opcode": "34",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:33.398966500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": " 5"
},
"message": ""
}
Event ID 344 —
Fields #
| Name | Description |
|---|---|
X Distance Scrolled Int32 | — |
Y Distance Scrolled Int32 | — |
Direct Manipulation Boolean | — |
Thumb Used Boolean | — |
Preview Shown Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "344",
"version": "1",
"level": "4",
"task": "56",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"X Distance Scrolled": "0",
"Y Distance Scrolled": "0",
"Direct Manipulation": "false",
"Thumb Used": "false",
"Preview Shown": "false"
},
"message": ""
}
Event ID 345 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "345",
"version": "0",
"level": "4",
"task": "46",
"opcode": "44",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 346 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "346",
"version": "0",
"level": "4",
"task": "46",
"opcode": "45",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 347 —
Fields #
| Name | Description |
|---|---|
ForceInline Reason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "347",
"version": "0",
"level": "4",
"task": "46",
"opcode": "46",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ForceInline Reason": "0"
},
"message": ""
}
Event ID 348 —
Fields #
| Name | Description |
|---|---|
Total Notifications UInt32 | — |
Added Notifications UInt32 | — |
Removed Notifications UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "348",
"version": "0",
"level": "5",
"task": "55",
"opcode": "18",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Total Notifications": "0",
"Added Notifications": "0",
"Removed Notifications": "0"
},
"message": ""
}
Event ID 349 —
Fields #
| Name | Description |
|---|---|
Total Notifications UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "349",
"version": "0",
"level": "5",
"task": "55",
"opcode": "19",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Total Notifications": "0"
},
"message": ""
}
Event ID 350 —
Fields #
| Name | Description |
|---|---|
DirtyCode UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "350",
"version": "0",
"level": "4",
"task": "46",
"opcode": "47",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DirtyCode": "0"
},
"message": ""
}
Event ID 351 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "46",
"opcode": "48",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 352 —
Fields #
| Name | Description |
|---|---|
Itap Int32 | — |
HeightSpecified Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "57",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Itap": "0",
"HeightSpecified": "false"
},
"message": ""
}
Event ID 353 —
Fields #
| Name | Description |
|---|---|
Itap Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "353",
"version": "0",
"level": "4",
"task": "57",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Itap": "0"
},
"message": ""
}
Event ID 354 —
Fields #
| Name | Description |
|---|---|
Timer Duration (msec) UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "354",
"version": "0",
"level": "4",
"task": "11",
"opcode": "35",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Timer Duration (msec)": "0"
},
"message": ""
}
Event ID 355 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "355",
"version": "0",
"level": "4",
"task": "11",
"opcode": "36",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 356 —
Fields #
| Name | Description |
|---|---|
sti Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "356",
"version": "0",
"level": "4",
"task": "46",
"opcode": "49",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sti": "0"
},
"message": ""
}
Event ID 357 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "357",
"version": "0",
"level": "4",
"task": "45",
"opcode": "22",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 358 —
Fields #
| Name | Description |
|---|---|
message UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "358",
"version": "0",
"level": "4",
"task": "45",
"opcode": "23",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"message": "0"
},
"message": ""
}
Event ID 359 —
Fields #
| Name | Description |
|---|---|
commandline UnicodeString | — |
fMainExe Boolean | — |
fSafeMode Boolean | — |
fOleLaunchedUs Boolean | — |
fOleAutomation Boolean | — |
fMacroOnCmdLine Boolean | — |
fLoadAddIns Boolean | — |
fOnly1DDEDcl Boolean | — |
fOpenAsNew Boolean | — |
fReadWriteOnSave Boolean | — |
fRestore Boolean | — |
fNormalDotSafe Boolean | — |
fDotEvt Boolean | — |
fMacroSwitch Boolean | — |
fOpenedDrp Boolean | — |
fDocRecoveryWorkPane Boolean | — |
fShowOutspace Boolean | — |
fShowAllDrps Boolean | — |
fDidCrashRecoveryLastTime Boolean | — |
fRestoringFromRestart Boolean | — |
fFreezeDryEnabled Boolean | — |
cdrpGroups Int32 | — |
cdrpResolvedWithOthers Int32 | — |
cdrpRepaired Int32 | — |
cdrpSavedOnCrash Int32 | — |
cmdLineFlagsExtended UInt32 | — |
fGlobalDotMatchesDefault Boolean | — |
fInterrupted Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "359",
"version": "4",
"level": "4",
"task": "45",
"opcode": "24",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"commandline": "",
"fMainExe": "false",
"fSafeMode": "false",
"fOleLaunchedUs": "false",
"fOleAutomation": "false",
"fMacroOnCmdLine": "false",
"fLoadAddIns": "false",
"fOnly1DDEDcl": "false",
"fOpenAsNew": "false",
"fReadWriteOnSave": "false",
"fRestore": "false",
"fNormalDotSafe": "false",
"fDotEvt": "false",
"fMacroSwitch": "false",
"fOpenedDrp": "false",
"fDocRecoveryWorkPane": "false",
"fShowOutspace": "false",
"fShowAllDrps": "false",
"fDidCrashRecoveryLastTime": "false",
"fRestoringFromRestart": "false",
"fFreezeDryEnabled": "false",
"cdrpGroups": "0",
"cdrpResolvedWithOthers": "0",
"cdrpRepaired": "0",
"cdrpSavedOnCrash": "0",
"cmdLineFlagsExtended": "0",
"fGlobalDotMatchesDefault": "false",
"fInterrupted": "false"
},
"message": ""
}
Event ID 360 —
Fields #
| Name | Description |
|---|---|
cFootnoteObjects UInt64 | — |
cEndnoteObjects UInt64 | — |
cTrackedChangeObjects UInt64 | — |
cCommentObjects UInt64 | — |
cRtcPresenceObjects UInt64 | — |
cCoauthLockObjects UInt64 | — |
cAtnObjects UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "360",
"version": "0",
"level": "4",
"task": "14",
"opcode": "15",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cFootnoteObjects": "0",
"cEndnoteObjects": "0",
"cTrackedChangeObjects": "0",
"cCommentObjects": "0",
"cRtcPresenceObjects": "0",
"cCoauthLockObjects": "0",
"cAtnObjects": "0"
},
"message": ""
}
Event ID 361 —
Fields #
| Name | Description |
|---|---|
fReply Boolean | — |
Event ID 362 —
Event ID 363 —
Event ID 364 —
Event ID 365 —
Fields #
| Name | Description |
|---|---|
fComment Boolean | — |
fCommentPopout Boolean | — |
Event ID 366 —
Fields #
| Name | Description |
|---|---|
fReply Boolean | — |
Event ID 367 —
Fields #
| Name | Description |
|---|---|
fAllComments Boolean | — |
Event ID 368 —
Fields #
| Name | Description |
|---|---|
fBtnCe Boolean | — |
fSettingToDone Boolean | — |
Event ID 369 —
Fields #
| Name | Description |
|---|---|
flTagReplaced Boolean | — |
Event ID 370 —
Fields #
| Name | Description |
|---|---|
fPartFound Boolean | — |
Event ID 371 —
Fields #
| Name | Description |
|---|---|
cHsp UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "371",
"version": "0",
"level": "4",
"task": "46",
"opcode": "50",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cHsp": "0"
},
"message": ""
}
Event ID 372 —
Fields #
| Name | Description |
|---|---|
cE2o UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "372",
"version": "0",
"level": "4",
"task": "46",
"opcode": "51",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cE2o": "0"
},
"message": ""
}
Event ID 373 —
Fields #
| Name | Description |
|---|---|
SuggestionNumber Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "373",
"version": "0",
"level": "4",
"task": "24",
"opcode": "20",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuggestionNumber": "0"
},
"message": ""
}
Event ID 374 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "374",
"version": "0",
"level": "4",
"task": "24",
"opcode": "21",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 375 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "375",
"version": "0",
"level": "4",
"task": "24",
"opcode": "22",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 376 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "376",
"version": "0",
"level": "4",
"task": "24",
"opcode": "23",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 377 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "377",
"version": "0",
"level": "4",
"task": "24",
"opcode": "24",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 378 —
Fields #
| Name | Description |
|---|---|
HyperlinkDestinationType UInt32 | — |
FromAnchorTag Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "378",
"version": "0",
"level": "4",
"task": "46",
"opcode": "52",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkDestinationType": "0",
"FromAnchorTag": "false"
},
"message": ""
}
Event ID 379 —
Fields #
| Name | Description |
|---|---|
HyperlinkDestinationType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "379",
"version": "0",
"level": "4",
"task": "46",
"opcode": "53",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkDestinationType": "0"
},
"message": ""
}
Event ID 380 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
numberOfEntities Int32 | — |
Event ID 381 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
entityId UnicodeString | — |
Event ID 382 —
Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | — |
Dlg ID UInt64 | — |
Cmd Name UnicodeString | — |
FCI UInt32 | — |
TCID UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "382",
"version": "0",
"level": "4",
"task": "10",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0"
},
"message": ""
}
Event ID 383 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "383",
"version": "0",
"level": "4",
"task": "46",
"opcode": "56",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 384 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "384",
"version": "0",
"level": "4",
"task": "46",
"opcode": "57",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 385 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "385",
"version": "0",
"level": "4",
"task": "46",
"opcode": "58",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 386 —
Fields #
| Name | Description |
|---|---|
cPartsLoaded UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "386",
"version": "0",
"level": "4",
"task": "46",
"opcode": "59",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cPartsLoaded": "0"
},
"message": ""
}
Event ID 387 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "387",
"version": "0",
"level": "4",
"task": "46",
"opcode": "60",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 388 —
Fields #
| Name | Description |
|---|---|
HostedControl Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "388",
"version": "0",
"level": "4",
"task": "46",
"opcode": "61",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HostedControl": "0x0"
},
"message": ""
}
Event ID 389 —
Fields #
| Name | Description |
|---|---|
HostedControl Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "389",
"version": "0",
"level": "4",
"task": "46",
"opcode": "62",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HostedControl": "0x0"
},
"message": ""
}
Event ID 390 —
Fields #
| Name | Description |
|---|---|
fTruncationNeeded Boolean | — |
fCallSucceeded Boolean | — |
addtionalSpaceNeeded Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "390",
"version": "0",
"level": "4",
"task": "46",
"opcode": "63",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fTruncationNeeded": "false",
"fCallSucceeded": "false",
"addtionalSpaceNeeded": "0"
},
"message": ""
}
Event ID 391 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "391",
"version": "0",
"level": "4",
"task": "54",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 392 —
Fields #
| Name | Description |
|---|---|
CardCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "392",
"version": "0",
"level": "4",
"task": "46",
"opcode": "64",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardCount": "0"
},
"message": ""
}
Event ID 393 —
Fields #
| Name | Description |
|---|---|
CardCount UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "393",
"version": "0",
"level": "4",
"task": "46",
"opcode": "64",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardCount": "0"
},
"message": ""
}
Event ID 394 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
CardId UInt32 | — |
dxaLeftOffset UInt64 | — |
dxaRightOffset UInt64 | — |
dyaTopOffset UInt64 | — |
dyaBottomOffset UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "394",
"version": "0",
"level": "4",
"task": "46",
"opcode": "65",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0",
"dxaLeftOffset": "0",
"dxaRightOffset": "0",
"dyaTopOffset": "0",
"dyaBottomOffset": "0"
},
"message": ""
}
Event ID 395 —
Fields #
| Name | Description |
|---|---|
PartsToRemove UInt64 | — |
CardId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "395",
"version": "0",
"level": "4",
"task": "46",
"opcode": "67",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartsToRemove": "0",
"CardId": "0"
},
"message": ""
}
Event ID 396 —
Fields #
| Name | Description |
|---|---|
PartsToRemove UInt64 | — |
CardId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "396",
"version": "0",
"level": "4",
"task": "46",
"opcode": "67",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartsToRemove": "0",
"CardId": "0"
},
"message": ""
}
Event ID 397 —
Fields #
| Name | Description |
|---|---|
CardIdToReplace UInt32 | — |
CardsToRemove UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "397",
"version": "0",
"level": "4",
"task": "46",
"opcode": "68",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardIdToReplace": "0",
"CardsToRemove": "0"
},
"message": ""
}
Event ID 398 —
Fields #
| Name | Description |
|---|---|
CardIdToReplace UInt32 | — |
CardsToRemove UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "398",
"version": "0",
"level": "4",
"task": "46",
"opcode": "68",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardIdToReplace": "0",
"CardsToRemove": "0"
},
"message": ""
}
Event ID 399 —
Fields #
| Name | Description |
|---|---|
Enable Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "399",
"version": "0",
"level": "4",
"task": "46",
"opcode": "69",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Enable": "false"
},
"message": ""
}
Event ID 400 —
Fields #
| Name | Description |
|---|---|
Active Boolean | — |
PartId UInt32 | — |
PartSdtId UInt32 | — |
PartReadOnly Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "400",
"version": "0",
"level": "4",
"task": "46",
"opcode": "70",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Active": "false",
"PartId": "0",
"PartSdtId": "0",
"PartReadOnly": "false"
},
"message": ""
}
Event ID 401 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
CardId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "401",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 402 —
Fields #
| Name | Description |
|---|---|
Succeeded Boolean | — |
LoadAborted Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "402",
"version": "0",
"level": "4",
"task": "46",
"opcode": "23",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false",
"LoadAborted": "false"
},
"message": ""
}
Event ID 403 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
PartId UInt32 | — |
PartSdtId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "403",
"version": "0",
"level": "4",
"task": "46",
"opcode": "71",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"PartId": "0",
"PartSdtId": "0"
},
"message": ""
}
Event ID 404 —
Fields #
| Name | Description |
|---|---|
PartId UInt32 | — |
PartSdtId UInt32 | — |
DraftName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "404",
"version": "0",
"level": "4",
"task": "46",
"opcode": "72",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"PartSdtId": "0",
"DraftName": ""
},
"message": ""
}
Event ID 405 —
Fields #
| Name | Description |
|---|---|
ResultSize Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "405",
"version": "0",
"level": "4",
"task": "46",
"opcode": "73",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ResultSize": "0"
},
"message": ""
}
Event ID 406 —
Fields #
| Name | Description |
|---|---|
HyperlinkProtocol UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "406",
"version": "0",
"level": "4",
"task": "46",
"opcode": "74",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkProtocol": "0"
},
"message": ""
}
Event ID 407 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
PartId UInt32 | — |
PartSdtId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "407",
"version": "1",
"level": "4",
"task": "46",
"opcode": "75",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"PartId": "0",
"PartSdtId": "0"
},
"message": ""
}
Event ID 408 —
Fields #
| Name | Description |
|---|---|
PartId UInt32 | — |
PartSdtId UInt32 | — |
Succeeded Boolean | — |
DyDip Int32 | — |
DxDip Int32 | — |
ScaleUI Float | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "408",
"version": "0",
"level": "4",
"task": "46",
"opcode": "75",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"PartSdtId": "0",
"Succeeded": "false",
"DyDip": "0",
"DxDip": "0",
"ScaleUI": "0.0"
},
"message": ""
}
Event ID 409 —
Fields #
| Name | Description |
|---|---|
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "409",
"version": "0",
"level": "4",
"task": "46",
"opcode": "76",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 410 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "410",
"version": "0",
"level": "4",
"task": "46",
"opcode": "77",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 411 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "411",
"version": "0",
"level": "4",
"task": "46",
"opcode": "78",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 412 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "412",
"version": "0",
"level": "4",
"task": "46",
"opcode": "79",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 413 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
dxdipMargin Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "413",
"version": "1",
"level": "4",
"task": "46",
"opcode": "79",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"dxdipMargin": "0"
},
"message": ""
}
Event ID 414 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "414",
"version": "0",
"level": "4",
"task": "46",
"opcode": "81",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 415 —
Fields #
| Name | Description |
|---|---|
fHeader Boolean | — |
ControlHandle UInt64 | — |
HostParentHandle UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "415",
"version": "0",
"level": "4",
"task": "46",
"opcode": "82",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fHeader": "false",
"ControlHandle": "0",
"HostParentHandle": "0"
},
"message": ""
}
Event ID 416 —
Fields #
| Name | Description |
|---|---|
ScaleUI Float | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "416",
"version": "0",
"level": "4",
"task": "46",
"opcode": "83",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ScaleUI": "0.0"
},
"message": ""
}
Event ID 417 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
CardId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "417",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 418 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
CardId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "418",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 419 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
DusecConversionTime UInt64 | — |
E1oCount UInt32 | — |
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "419",
"version": "0",
"level": "4",
"task": "46",
"opcode": "84",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DusecConversionTime": "0",
"E1oCount": "0",
"Succeeded": "false"
},
"message": ""
}
Event ID 420 —
Fields #
| Name | Description |
|---|---|
Success Boolean | — |
icf UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "420",
"version": "0",
"level": "4",
"task": "58",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 421 —
Fields #
| Name | Description |
|---|---|
Success Boolean | — |
icf UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "421",
"version": "0",
"level": "4",
"task": "58",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 422 —
Fields #
| Name | Description |
|---|---|
Success Boolean | — |
icf UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "422",
"version": "0",
"level": "4",
"task": "58",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 423 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "423",
"version": "0",
"level": "4",
"task": "59",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 424 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "424",
"version": "0",
"level": "4",
"task": "59",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 425 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "425",
"version": "0",
"level": "4",
"task": "59",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 426 —
Fields #
| Name | Description |
|---|---|
fSuccess Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "426",
"version": "0",
"level": "4",
"task": "60",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSuccess": "false"
},
"message": ""
}
Event ID 427 —
Fields #
| Name | Description |
|---|---|
ifld Int32 | — |
cpMacPdodClone Int32 | — |
fCacheAllHspAtOnce Boolean | — |
fInline Boolean | — |
fPseudoInline Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "427",
"version": "0",
"level": "4",
"task": "8",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ifld": "0",
"cpMacPdodClone": "0",
"fCacheAllHspAtOnce": "false",
"fInline": "false",
"fPseudoInline": "false"
},
"message": ""
}
Event ID 428 —
Fields #
| Name | Description |
|---|---|
usecSystemUptime UInt64 | — |
usecUserCpuTime UInt64 | — |
usecSystemCpuTime UInt64 | — |
usecProcessCpuTime UInt64 | — |
usecMainThreadCpuTime UInt64 | — |
maxrss Int64 | — |
ixrss Int64 | — |
idrss Int64 | — |
isrss Int64 | — |
minflt Int64 | — |
majflt Int64 | — |
nswap Int64 | — |
inblock Int64 | — |
oublock Int64 | — |
msgsnd Int64 | — |
msgrcv Int64 | — |
nsignals Int64 | — |
nvcsw Int64 | — |
nivcsw Int64 | — |
fGetrusageSuccess Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "428",
"version": "0",
"level": "4",
"task": "45",
"opcode": "25",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usecSystemUptime": "0",
"usecUserCpuTime": "0",
"usecSystemCpuTime": "0",
"usecProcessCpuTime": "0",
"usecMainThreadCpuTime": "0",
"maxrss": "0",
"ixrss": "0",
"idrss": "0",
"isrss": "0",
"minflt": "0",
"majflt": "0",
"nswap": "0",
"inblock": "0",
"oublock": "0",
"msgsnd": "0",
"msgrcv": "0",
"nsignals": "0",
"nvcsw": "0",
"nivcsw": "0",
"fGetrusageSuccess": "false"
},
"message": ""
}
Event ID 429 —
Fields #
| Name | Description |
|---|---|
cpFirst Int32 | — |
cpLim Int32 | — |
Event ID 430 —
Fields #
| Name | Description |
|---|---|
cWhiteSpaces Int32 | — |
cSymbols Int32 | — |
Event ID 431 —
Fields #
| Name | Description |
|---|---|
pmwd Pointer | — |
pwwd Pointer | — |
hwnd Pointer | — |
View Type UnicodeString | — |
Count of MWDs Int32 | — |
MWD PunkWindow Pointer | — |
fServerObjPunkWindow Boolean | — |
pdod Pointer | — |
dk UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "431",
"version": "1",
"level": "4",
"task": "59",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": "",
"Count of MWDs": "0",
"MWD PunkWindow": "0x0",
"fServerObjPunkWindow": "false",
"pdod": "0x0",
"dk": ""
},
"message": ""
}
Event ID 432 —
Fields #
| Name | Description |
|---|---|
Found Doc Kind UnicodeString | — |
Original Doc Kind UnicodeString | — |
BookMark Class UInt16 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "432",
"version": "0",
"level": "4",
"task": "53",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Found Doc Kind": "",
"Original Doc Kind": "",
"BookMark Class": "0"
},
"message": ""
}
Event ID 433 —
Fields #
| Name | Description |
|---|---|
dypAdjust Int32 | — |
ypHostedTop Int32 | — |
dypScrollable Int32 | — |
ypScrollerOffset Int32 | — |
dypRootHeight Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "433",
"version": "0",
"level": "4",
"task": "46",
"opcode": "85",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dypAdjust": "0",
"ypHostedTop": "0",
"dypScrollable": "0",
"ypScrollerOffset": "0",
"dypRootHeight": "0"
},
"message": ""
}
Event ID 435 —
Fields #
| Name | Description |
|---|---|
hpl Pointer | — |
idpci UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "435",
"version": "0",
"level": "4",
"task": "24",
"opcode": "27",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hpl": "0x0",
"idpci": "0"
},
"message": ""
}
Event ID 436 —
Fields #
| Name | Description |
|---|---|
hpl Pointer | — |
idpci UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "436",
"version": "0",
"level": "2",
"task": "24",
"opcode": "28",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hpl": "0x0",
"idpci": "0"
},
"message": ""
}
Event ID 437 —
Fields #
| Name | Description |
|---|---|
fCannotDeterminePivot Boolean | — |
fNoContextAllowable Boolean | — |
fContextReduced Boolean | — |
fContextReducedToShort Boolean | — |
fContextNaturallyTooShort Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "437",
"version": "0",
"level": "4",
"task": "24",
"opcode": "29",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fCannotDeterminePivot": "false",
"fNoContextAllowable": "false",
"fContextReduced": "false",
"fContextReducedToShort": "false",
"fContextNaturallyTooShort": "false"
},
"message": ""
}
Event ID 438 —
Fields #
| Name | Description |
|---|---|
flt Int32 | — |
Reason Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "438",
"version": "0",
"level": "4",
"task": "44",
"opcode": "13",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"Reason": "0"
},
"message": ""
}
Event ID 439 —
Fields #
| Name | Description |
|---|---|
fAutoOpen Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "439",
"version": "0",
"level": "4",
"task": "24",
"opcode": "30",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAutoOpen": "false"
},
"message": ""
}
Event ID 440 —
Fields #
| Name | Description |
|---|---|
fAutoOpen Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "440",
"version": "0",
"level": "4",
"task": "24",
"opcode": "31",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAutoOpen": "false"
},
"message": ""
}
Event ID 441 —
Fields #
| Name | Description |
|---|---|
fPlan Boolean → boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "441",
"version": "0",
"level": "5",
"task": "29",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPlan": "false"
},
"message": ""
}
Event ID 1000 —
Fields #
| Name | Description |
|---|---|
docKind UInt32 | — |
fHeader Boolean | — |
ihdt UInt32 | — |
cpStart Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
fDropCap Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1000",
"version": "0",
"level": "200",
"task": "16",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"fDropCap": "false"
},
"message": ""
}
Event ID 1001 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1001",
"version": "0",
"level": "200",
"task": "16",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1002 —
Fields #
| Name | Description |
|---|---|
LrgKind UnicodeString | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1002",
"version": "0",
"level": "200",
"task": "16",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LrgKind": "",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1003 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1003",
"version": "0",
"level": "200",
"task": "16",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1030 —
Fields #
| Name | Description |
|---|---|
docAnchorKind UInt32 | — |
fHeader Boolean | — |
ihdt UInt32 | — |
cpAnchor Int32 | — |
SpxKind UnicodeString | — |
xlLeft Int32 | — |
ylTop Int32 | — |
xlRight Int32 | — |
ylBottom Int32 | — |
xlFull Int32 | — |
ylFull Int32 | — |
fIgnorePositionPTS Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1030",
"version": "0",
"level": "200",
"task": "16",
"opcode": "41",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docAnchorKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpAnchor": "0",
"SpxKind": "",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"xlFull": "0",
"ylFull": "0",
"fIgnorePositionPTS": "false"
},
"message": ""
}
Event ID 1031 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1031",
"version": "0",
"level": "200",
"task": "16",
"opcode": "42",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1040 —
Fields #
| Name | Description |
|---|---|
docKind UInt32 | — |
cpStart Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
lstFlow UInt8 | — |
heightRef Int32 | — |
heightPres Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1040",
"version": "0",
"level": "200",
"task": "16",
"opcode": "51",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"lstFlow": "0",
"heightRef": "0",
"heightPres": "0"
},
"message": ""
}
Event ID 1041 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1041",
"version": "0",
"level": "200",
"task": "16",
"opcode": "52",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1050 —
Fields #
| Name | Description |
|---|---|
docKind UInt32 | — |
cpStart Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
lstFlow UInt8 | — |
heightRef Int32 | — |
heightPres Int32 | — |
upLimAutonumberingText Int32 | — |
upLimLineProper Int32 | — |
upLimLine Int32 | — |
breakEndr UInt16 | — |
fForcedBreak Boolean | — |
fTopEnable Boolean | — |
fBottomEnable Boolean | — |
fBetweenTop Boolean | — |
fBetweenBottom Boolean | — |
fVolatile Boolean | — |
fPicture Boolean | — |
fHandAtn Boolean | — |
fFirstLineCp Boolean | — |
fSplatSub Boolean | — |
fSfx Boolean | — |
lbrCRJ Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1050",
"version": "0",
"level": "200",
"task": "16",
"opcode": "100",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"lstFlow": "0",
"heightRef": "0",
"heightPres": "0",
"upLimAutonumberingText": "0",
"upLimLineProper": "0",
"upLimLine": "0",
"breakEndr": "0",
"fForcedBreak": "false",
"fTopEnable": "false",
"fBottomEnable": "false",
"fBetweenTop": "false",
"fBetweenBottom": "false",
"fVolatile": "false",
"fPicture": "false",
"fHandAtn": "false",
"fFirstLineCp": "false",
"fSplatSub": "false",
"fSfx": "false",
"lbrCRJ": "0"
},
"message": ""
}
Event ID 1051 —
Fields #
| Name | Description |
|---|---|
lstFlow UInt8 | — |
durReservedLeft Int32 | — |
durRightIndentBreak Int32 | — |
durRightIndentJustify Int32 | — |
durHyphenationZone Int32 | — |
lsbrj UInt8 | — |
lskj UInt8 | — |
lskal UInt8 | — |
durAutoDecimalTab Int32 | — |
fVisiCondHyphens Boolean | — |
fVisiParaMarks Boolean | — |
fVisiSpaces Boolean | — |
fVisiTabs Boolean | — |
fVisiSplats Boolean | — |
fVisiBreaks Boolean | — |
fPunctStartLine Boolean | — |
fHangingPunct Boolean | — |
fApplyBreakingRules Boolean | — |
fApplyOpticalAlignment Boolean | — |
fPresSuppressWiggle Boolean | — |
fAutonumber Boolean | — |
fAutoDecimalTab Boolean | — |
fUnderlineTrailSpacesRM Boolean | — |
fSpacesInfluenceHeight Boolean | — |
fAllowSplatLine Boolean | — |
fForceBreakAsNext Boolean | — |
fCheckTruncateBefore Boolean | — |
fAllowHyphenation Boolean | — |
fDrawInLogicalOrder Boolean | — |
fTreatHyphenAsRegular Boolean | — |
fWrapTrailingSpaces Boolean | — |
fWrapAllSpaces Boolean | — |
fForgetLastTabAlignment Boolean | — |
fIndentChangesHyphenZone Boolean | — |
fNoPunctAfterAutoNumber Boolean | — |
fResolveTabsAsWord97 Boolean | — |
fIgnoreHeightOfEOL Boolean | — |
fSpecialFirstLine Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1051",
"version": "0",
"level": "200",
"task": "16",
"opcode": "101",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lstFlow": "0",
"durReservedLeft": "0",
"durRightIndentBreak": "0",
"durRightIndentJustify": "0",
"durHyphenationZone": "0",
"lsbrj": "0",
"lskj": "0",
"lskal": "0",
"durAutoDecimalTab": "0",
"fVisiCondHyphens": "false",
"fVisiParaMarks": "false",
"fVisiSpaces": "false",
"fVisiTabs": "false",
"fVisiSplats": "false",
"fVisiBreaks": "false",
"fPunctStartLine": "false",
"fHangingPunct": "false",
"fApplyBreakingRules": "false",
"fApplyOpticalAlignment": "false",
"fPresSuppressWiggle": "false",
"fAutonumber": "false",
"fAutoDecimalTab": "false",
"fUnderlineTrailSpacesRM": "false",
"fSpacesInfluenceHeight": "false",
"fAllowSplatLine": "false",
"fForceBreakAsNext": "false",
"fCheckTruncateBefore": "false",
"fAllowHyphenation": "false",
"fDrawInLogicalOrder": "false",
"fTreatHyphenAsRegular": "false",
"fWrapTrailingSpaces": "false",
"fWrapAllSpaces": "false",
"fForgetLastTabAlignment": "false",
"fIndentChangesHyphenZone": "false",
"fNoPunctAfterAutoNumber": "false",
"fResolveTabsAsWord97": "false",
"fIgnoreHeightOfEOL": "false",
"fSpecialFirstLine": "false"
},
"message": ""
}
Event ID 1052 —
Fields #
| Name | Description |
|---|---|
edge UInt8 | — |
brcType Int32 | — |
dptLineWidth Int32 | — |
dptSpace Int32 | — |
fShadow Boolean | — |
fFrame Boolean | — |
fPdvv Boolean | — |
heightRef Int32 | — |
heightPres Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1052",
"version": "0",
"level": "200",
"task": "16",
"opcode": "102",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"edge": "0",
"brcType": "0",
"dptLineWidth": "0",
"dptSpace": "0",
"fShadow": "false",
"fFrame": "false",
"fPdvv": "false",
"heightRef": "0",
"heightPres": "0"
},
"message": ""
}
Event ID 1053 —
Fields #
| Name | Description |
|---|---|
Text UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1053",
"version": "1",
"level": "200",
"task": "16",
"opcode": "103",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Text": ""
},
"message": ""
}
Event ID 1060 —
Fields #
| Name | Description |
|---|---|
ipgd Int32 | — |
cpStart Int32 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
VerticalAlign UInt16 | — |
fVertical Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1060",
"version": "0",
"level": "200",
"task": "16",
"opcode": "130",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"cpStart": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"VerticalAlign": "0",
"fVertical": "false"
},
"message": ""
}
Event ID 1061 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1061",
"version": "0",
"level": "200",
"task": "16",
"opcode": "131",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1070 —
Fields #
| Name | Description |
|---|---|
docKind UInt32 | — |
fHeader Boolean | — |
ihdt UInt32 | — |
cpStart Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1070",
"version": "0",
"level": "200",
"task": "16",
"opcode": "140",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1071 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1071",
"version": "0",
"level": "200",
"task": "16",
"opcode": "141",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1080 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1080",
"version": "0",
"level": "200",
"task": "16",
"opcode": "150",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1081 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1081",
"version": "0",
"level": "200",
"task": "16",
"opcode": "151",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1090 —
Fields #
| Name | Description |
|---|---|
ipgdCur Int32 | — |
pgnNext Int32 | — |
fLandscape Boolean | — |
duPageES Int32 | — |
dvPageES Int32 | — |
fSlicedPage Boolean | — |
cpLim Int32 | — |
ylTopMargin Int32 | — |
ylBottomMargin Int32 | — |
xlLeftMargin Int32 | — |
xlRightMargin Int32 | — |
fEmptyPage Boolean | — |
fHasBubbles Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1090",
"version": "0",
"level": "200",
"task": "16",
"opcode": "170",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgdCur": "0",
"pgnNext": "0",
"fLandscape": "false",
"duPageES": "0",
"dvPageES": "0",
"fSlicedPage": "false",
"cpLim": "0",
"ylTopMargin": "0",
"ylBottomMargin": "0",
"xlLeftMargin": "0",
"xlRightMargin": "0",
"fEmptyPage": "false",
"fHasBubbles": "false"
},
"message": ""
}
Event ID 1091 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1091",
"version": "0",
"level": "200",
"task": "16",
"opcode": "171",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1148 —
Fields #
| Name | Description |
|---|---|
printer UnicodeString | — |
driver UnicodeString | — |
fUsePrinterMetrics Boolean | — |
xdpi Int32 | — |
ydpi Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1148",
"version": "0",
"level": "200",
"task": "16",
"opcode": "198",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"printer": "",
"driver": "",
"fUsePrinterMetrics": "false",
"xdpi": "0",
"ydpi": "0"
},
"message": ""
}
Event ID 1149 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1149",
"version": "0",
"level": "200",
"task": "16",
"opcode": "199",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1150 —
Fields #
| Name | Description |
|---|---|
dodKind UInt32 | — |
ihdt UInt32 | — |
cpFirst Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
fDropCap Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1150",
"version": "0",
"level": "200",
"task": "15",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dodKind": "0",
"ihdt": "0",
"cpFirst": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"fDropCap": "false"
},
"message": ""
}
Event ID 1151 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1151",
"version": "0",
"level": "200",
"task": "15",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1152 —
Fields #
| Name | Description |
|---|---|
DRK Int32 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1152",
"version": "0",
"level": "200",
"task": "15",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DRK": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1153 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1153",
"version": "0",
"level": "200",
"task": "15",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1160 —
Fields #
| Name | Description |
|---|---|
dodKind UInt32 | — |
ihdt UInt32 | — |
cpAnchor Int32 | — |
drdoKind UInt64 | — |
left Int32 | — |
top Int32 | — |
right Int32 | — |
bottom Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1160",
"version": "0",
"level": "200",
"task": "15",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dodKind": "0",
"ihdt": "0",
"cpAnchor": "0",
"drdoKind": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1161 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1161",
"version": "0",
"level": "200",
"task": "15",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1170 —
Fields #
| Name | Description |
|---|---|
cpFirst Int32 | — |
cpLim Int32 | — |
left Int32 | — |
top Int32 | — |
dxp Int32 | — |
dyp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1170",
"version": "0",
"level": "200",
"task": "15",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpFirst": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"dxp": "0",
"dyp": "0"
},
"message": ""
}
Event ID 1171 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1171",
"version": "0",
"level": "200",
"task": "15",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1180 —
Fields #
| Name | Description |
|---|---|
ipgd Int32 | — |
xlLeft Int32 | — |
ylTop Int32 | — |
xlRight Int32 | — |
ylBottom Int32 | — |
fLandscape Boolean | — |
fGoodClient Boolean | — |
yaTopMargin Int32 | — |
dyaBottomMargin Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1180",
"version": "0",
"level": "200",
"task": "15",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"fLandscape": "false",
"fGoodClient": "false",
"yaTopMargin": "0",
"dyaBottomMargin": "0"
},
"message": ""
}
Event ID 1181 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1181",
"version": "0",
"level": "200",
"task": "15",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1185 —
Fields #
| Name | Description |
|---|---|
pabd Pointer → HexInt64 | — |
cpFirst Int32 → int | — |
cpLim Int32 → int | — |
fInsertAbdInPlcAbd Boolean → boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1185",
"version": "0",
"level": "200",
"task": "15",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pabd": "0x0",
"cpFirst": "0",
"cpLim": "0",
"fInsertAbdInPlcAbd": "false"
},
"message": ""
}
Event ID 1190 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1190",
"version": "0",
"level": "4",
"task": "43",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1191 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1191",
"version": "0",
"level": "4",
"task": "43",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1192 —
Fields #
| Name | Description |
|---|---|
cxpInch Int32 | — |
cypInch Int32 | — |
cxtInch Int32 | — |
cytInch Int32 | — |
fticmOut Int32 | — |
fticmBase Int32 | — |
pctZoom Int32 | — |
ViewType UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1192",
"version": "1",
"level": "4",
"task": "43",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cxpInch": "0",
"cypInch": "0",
"cxtInch": "0",
"cytInch": "0",
"fticmOut": "0",
"fticmBase": "0",
"pctZoom": "0",
"ViewType": ""
},
"message": ""
}
Event ID 1193 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1193",
"version": "0",
"level": "4",
"task": "43",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1194 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1194",
"version": "0",
"level": "4",
"task": "43",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1195 —
Fields #
| Name | Description |
|---|---|
ipgd Int32 | — |
xlLeft Int32 | — |
ylTop Int32 | — |
xlRight Int32 | — |
ylBottom Int32 | — |
yaTopMargin Int32 | — |
dyaBottomMargin Int32 | — |
dmOrient Int32 | — |
fGoodClient Boolean | — |
cpFirst Int32 | — |
cpLim Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1195",
"version": "0",
"level": "4",
"task": "43",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"yaTopMargin": "0",
"dyaBottomMargin": "0",
"dmOrient": "0",
"fGoodClient": "false",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1196 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1196",
"version": "0",
"level": "4",
"task": "43",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1197 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1197",
"version": "0",
"level": "4",
"task": "43",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1198 —
Fields #
| Name | Description |
|---|---|
xpLeft Int32 | — |
ypTop Int32 | — |
dxp Int32 | — |
dyp Int32 | — |
cpMin Int32 | — |
dcp Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1198",
"version": "0",
"level": "4",
"task": "43",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xpLeft": "0",
"ypTop": "0",
"dxp": "0",
"dyp": "0",
"cpMin": "0",
"dcp": "0"
},
"message": ""
}
Event ID 1199 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1199",
"version": "0",
"level": "4",
"task": "43",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1200 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1200",
"version": "0",
"level": "4",
"task": "43",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1201 —
Fields #
| Name | Description |
|---|---|
drk Int32 | — |
dodKind UInt32 | — |
xl Int32 | — |
yl Int32 | — |
dxl Int32 | — |
dyl Int32 | — |
xt Int32 | — |
yt Int32 | — |
dxt Int32 | — |
dyt Int32 | — |
cpFirst Int32 | — |
cpLim Int32 | — |
fDropCap Boolean | — |
ihdt UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1201",
"version": "0",
"level": "4",
"task": "43",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"xt": "0",
"yt": "0",
"dxt": "0",
"dyt": "0",
"cpFirst": "0",
"cpLim": "0",
"fDropCap": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1202 —
Fields #
| Name | Description |
|---|---|
drk Int32 | — |
dodKind UInt32 | — |
xl Int32 | — |
yl Int32 | — |
dxl Int32 | — |
dyl Int32 | — |
xt Int32 | — |
yt Int32 | — |
dxt Int32 | — |
dyt Int32 | — |
cpFirst Int32 | — |
cpLim Int32 | — |
fDropCap Boolean | — |
ihdt UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1202",
"version": "0",
"level": "4",
"task": "43",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"xt": "0",
"yt": "0",
"dxt": "0",
"dyt": "0",
"cpFirst": "0",
"cpLim": "0",
"fDropCap": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1203 —
Fields #
| Name | Description |
|---|---|
drk Int32 | — |
dodKind UInt32 | — |
cpAnchor Int32 | — |
drdoKind UInt64 | — |
xl Int32 | — |
yl Int32 | — |
dxl Int32 | — |
dyl Int32 | — |
fHdr Boolean | — |
ihdt UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1203",
"version": "0",
"level": "4",
"task": "43",
"opcode": "23",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"cpAnchor": "0",
"drdoKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"fHdr": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1204 —
Fields #
| Name | Description |
|---|---|
drk Int32 | — |
drkx Int32 | — |
xl Int32 | — |
yl Int32 | — |
dxl Int32 | — |
dyl Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1204",
"version": "0",
"level": "4",
"task": "43",
"opcode": "24",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"drkx": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0"
},
"message": ""
}
Event ID 1205 —
Fields #
| Name | Description |
|---|---|
drk Int32 | — |
drkx Int32 | — |
xl Int32 | — |
yl Int32 | — |
dxl Int32 | — |
dyl Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1205",
"version": "0",
"level": "4",
"task": "43",
"opcode": "26",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"drkx": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0"
},
"message": ""
}
Event ID 1206 —
Fields #
| Name | Description |
|---|---|
docAnchorKind UInt32 | — |
fHeader Boolean | — |
ihdt UInt32 | — |
cpAnchor Int32 | — |
SpxKind UnicodeString | — |
xlFull Int32 | — |
ylFull Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1206",
"version": "0",
"level": "4",
"task": "43",
"opcode": "29",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docAnchorKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpAnchor": "0",
"SpxKind": "",
"xlFull": "0",
"ylFull": "0"
},
"message": ""
}
Event ID 1207 —
Fields #
| Name | Description |
|---|---|
dvpAscent Int32 | — |
dvrAscent Int32 | — |
dvpDescent Int32 | — |
dvrDescent Int32 | — |
dvpMultiLineHeight Int32 | — |
dvrMultiLineHeight Int32 | — |
dvpAscentAutoNumber Int32 | — |
dvrAscentAutoNumber Int32 | — |
dvpDescentAutoNumber Int32 | — |
dvrDescentAutoNumber Int32 | — |
durContent Int32 | — |
cpLimToContinue Int32 | — |
cpLimToStay Int32 | — |
dcpDepend Int32 | — |
endres Int32 | — |
vaAdvance Int32 | — |
fAdvanced Boolean | — |
fFirstLineInPara Boolean | — |
fTabInMarginExLine Boolean | — |
fForcedBreak Boolean | — |
fNoCSSInlineContent Boolean | — |
fEllipsis Boolean | — |
fNonTextObjectPresent Boolean | — |
fAnmPresent Boolean | — |
EffectsFlags UInt32 | — |
kysr Int32 | — |
wchYsr Int32 | — |
wchYsr2 Int32 | — |
lshq Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1207",
"version": "0",
"level": "4",
"task": "43",
"opcode": "30",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dvpAscent": "0",
"dvrAscent": "0",
"dvpDescent": "0",
"dvrDescent": "0",
"dvpMultiLineHeight": "0",
"dvrMultiLineHeight": "0",
"dvpAscentAutoNumber": "0",
"dvrAscentAutoNumber": "0",
"dvpDescentAutoNumber": "0",
"dvrDescentAutoNumber": "0",
"durContent": "0",
"cpLimToContinue": "0",
"cpLimToStay": "0",
"dcpDepend": "0",
"endres": "0",
"vaAdvance": "0",
"fAdvanced": "false",
"fFirstLineInPara": "false",
"fTabInMarginExLine": "false",
"fForcedBreak": "false",
"fNoCSSInlineContent": "false",
"fEllipsis": "false",
"fNonTextObjectPresent": "false",
"fAnmPresent": "false",
"EffectsFlags": "0",
"kysr": "0",
"wchYsr": "0",
"wchYsr2": "0",
"lshq": "0"
},
"message": ""
}
Event ID 1208 —
Fields #
| Name | Description |
|---|---|
upStartLineOriginal Int64 | — |
upStartLine Int64 | — |
upLimAutonumberingText Int64 | — |
upStartMainText Int64 | — |
upStartLineProper Int64 | — |
upLimLineProper Int64 | — |
upLimLine Int64 | — |
upRightMargin Int64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1208",
"version": "0",
"level": "4",
"task": "43",
"opcode": "31",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"upStartLineOriginal": "0",
"upStartLine": "0",
"upLimAutonumberingText": "0",
"upStartMainText": "0",
"upStartLineProper": "0",
"upLimLineProper": "0",
"upLimLine": "0",
"upRightMargin": "0"
},
"message": ""
}
Event ID 1228 —
Fields #
| Name | Description |
|---|---|
xdpi Int32 | — |
ydpi Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1228",
"version": "0",
"level": "200",
"task": "15",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xdpi": "0",
"ydpi": "0"
},
"message": ""
}
Event ID 1229 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1229",
"version": "0",
"level": "200",
"task": "15",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1300 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1300",
"version": "0",
"level": "100",
"task": "19",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1301 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1301",
"version": "0",
"level": "100",
"task": "19",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1302 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1302",
"version": "0",
"level": "100",
"task": "19",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1303 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1303",
"version": "0",
"level": "100",
"task": "19",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1304 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1304",
"version": "0",
"level": "100",
"task": "19",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1305 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1305",
"version": "0",
"level": "100",
"task": "19",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1306 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1306",
"version": "0",
"level": "100",
"task": "19",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1307 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1307",
"version": "0",
"level": "100",
"task": "19",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1308 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1308",
"version": "0",
"level": "100",
"task": "19",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1309 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1309",
"version": "0",
"level": "100",
"task": "19",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1310 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1310",
"version": "0",
"level": "100",
"task": "19",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1311 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1311",
"version": "0",
"level": "100",
"task": "19",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1312 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1312",
"version": "0",
"level": "100",
"task": "19",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1313 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1313",
"version": "0",
"level": "100",
"task": "19",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1314 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1314",
"version": "0",
"level": "100",
"task": "19",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1315 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1315",
"version": "0",
"level": "100",
"task": "19",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1316 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1316",
"version": "0",
"level": "100",
"task": "19",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1317 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1317",
"version": "0",
"level": "100",
"task": "19",
"opcode": "27",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1318 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1318",
"version": "0",
"level": "100",
"task": "19",
"opcode": "28",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1319 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1319",
"version": "0",
"level": "100",
"task": "19",
"opcode": "29",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1320 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1320",
"version": "0",
"level": "100",
"task": "19",
"opcode": "30",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1321 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1321",
"version": "0",
"level": "100",
"task": "19",
"opcode": "31",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1322 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1322",
"version": "0",
"level": "100",
"task": "19",
"opcode": "32",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1323 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1323",
"version": "0",
"level": "100",
"task": "19",
"opcode": "33",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1324 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1324",
"version": "0",
"level": "100",
"task": "19",
"opcode": "34",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1325 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1325",
"version": "0",
"level": "100",
"task": "19",
"opcode": "35",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1326 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1326",
"version": "0",
"level": "100",
"task": "19",
"opcode": "36",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1327 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1327",
"version": "0",
"level": "100",
"task": "19",
"opcode": "37",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1329 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
ppj Pointer | — |
fCanceledByUser Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1329",
"version": "1",
"level": "4",
"task": "19",
"opcode": "39",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"ppj": "0x0",
"fCanceledByUser": "false"
},
"message": ""
}
Event ID 1330 —
Fields #
| Name | Description |
|---|---|
fMacro Boolean | — |
numPages Int32 | — |
rangeType Int32 | — |
rangeSz UnicodeString | — |
jobParity Int32 | — |
jobParitySz UnicodeString | — |
numCopies Int32 | — |
fCollate Boolean | — |
fDuplex Boolean | — |
source Int32 | — |
sourceSz UnicodeString | — |
fPrintToFile Boolean | — |
pgsPerSheet Int32 | — |
dmPaper Int32 | — |
numSections Int32 | — |
width UInt64 | — |
height UInt64 | — |
lMargin UInt64 | — |
rMargin UInt64 | — |
tMargin UInt64 | — |
bMargin UInt64 | — |
dmOrient Int32 | — |
dmOrientSz UnicodeString | — |
prType UnicodeString | — |
szPrinterDev UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1330",
"version": "1",
"level": "4",
"task": "19",
"opcode": "40",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fMacro": "false",
"numPages": "0",
"rangeType": "0",
"rangeSz": "",
"jobParity": "0",
"jobParitySz": "",
"numCopies": "0",
"fCollate": "false",
"fDuplex": "false",
"source": "0",
"sourceSz": "",
"fPrintToFile": "false",
"pgsPerSheet": "0",
"dmPaper": "0",
"numSections": "0",
"width": "0",
"height": "0",
"lMargin": "0",
"rMargin": "0",
"tMargin": "0",
"bMargin": "0",
"dmOrient": "0",
"dmOrientSz": "",
"prType": "",
"szPrinterDev": ""
},
"message": ""
}
Event ID 1331 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
grfpr UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1331",
"version": "1",
"level": "100",
"task": "19",
"opcode": "41",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"grfpr": "0"
},
"message": ""
}
Event ID 1332 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1332",
"version": "0",
"level": "100",
"task": "19",
"opcode": "42",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1333 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1333",
"version": "0",
"level": "200",
"task": "19",
"opcode": "43",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1334 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1334",
"version": "0",
"level": "100",
"task": "19",
"opcode": "44",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1335 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1335",
"version": "0",
"level": "200",
"task": "19",
"opcode": "45",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1336 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1336",
"version": "0",
"level": "100",
"task": "19",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1337 —
Fields #
| Name | Description |
|---|---|
ppj Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1337",
"version": "0",
"level": "200",
"task": "19",
"opcode": "47",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1338 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1338",
"version": "0",
"level": "100",
"task": "19",
"opcode": "48",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1339 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1339",
"version": "0",
"level": "100",
"task": "19",
"opcode": "49",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1340 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1340",
"version": "0",
"level": "100",
"task": "19",
"opcode": "50",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1341 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
desiredPage Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1341",
"version": "0",
"level": "100",
"task": "19",
"opcode": "51",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0",
"desiredPage": "0"
},
"message": ""
}
Event ID 1342 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1342",
"version": "0",
"level": "100",
"task": "19",
"opcode": "52",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1343 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1343",
"version": "0",
"level": "100",
"task": "19",
"opcode": "53",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1344 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1344",
"version": "0",
"level": "100",
"task": "19",
"opcode": "54",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1345 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
PTCompletion Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1345",
"version": "0",
"level": "100",
"task": "19",
"opcode": "55",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0",
"PTCompletion": "0"
},
"message": ""
}
Event ID 1346 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1346",
"version": "0",
"level": "100",
"task": "19",
"opcode": "56",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1347 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1347",
"version": "0",
"level": "100",
"task": "19",
"opcode": "57",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1348 —
Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1348",
"version": "0",
"level": "100",
"task": "19",
"opcode": "58",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1349 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1349",
"version": "0",
"level": "100",
"task": "19",
"opcode": "59",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1350 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1350",
"version": "0",
"level": "100",
"task": "19",
"opcode": "60",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1351 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1351",
"version": "0",
"level": "100",
"task": "19",
"opcode": "61",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1352 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
ipgd Int32 | — |
dxdipPage Int32 | — |
dydipPage Int32 | — |
xdipContent Int32 | — |
ydipContent Int32 | — |
dxdipContent Int32 | — |
dydipContent Int32 | — |
fPrintMarkup Boolean | — |
fPrintBgImages Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1352",
"version": "1",
"level": "100",
"task": "19",
"opcode": "62",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"ipgd": "0",
"dxdipPage": "0",
"dydipPage": "0",
"xdipContent": "0",
"ydipContent": "0",
"dxdipContent": "0",
"dydipContent": "0",
"fPrintMarkup": "false",
"fPrintBgImages": "false"
},
"message": ""
}
Event ID 1353 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1353",
"version": "0",
"level": "100",
"task": "19",
"opcode": "67",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1354 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
ipgd Int32 | — |
dxpPreview Int32 | — |
dypPreview Int32 | — |
xpPrintable Int32 | — |
ypPrintable Int32 | — |
dxpPrintable Int32 | — |
dypPrintable Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1354",
"version": "1",
"level": "100",
"task": "19",
"opcode": "63",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"ipgd": "0",
"dxpPreview": "0",
"dypPreview": "0",
"xpPrintable": "0",
"ypPrintable": "0",
"dxpPrintable": "0",
"dypPrintable": "0"
},
"message": ""
}
Event ID 1355 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1355",
"version": "0",
"level": "100",
"task": "19",
"opcode": "68",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1356 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
pPrintDocuemntPackageTarget Pointer | — |
dxaPage Int32 | — |
dyaPage Int32 | — |
xdipContent Int32 | — |
ydipContent Int32 | — |
dxdipContent Int32 | — |
dydipContent Int32 | — |
printRange Int32 | — |
customRange UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1356",
"version": "2",
"level": "100",
"task": "19",
"opcode": "64",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"pPrintDocuemntPackageTarget": "0x0",
"dxaPage": "0",
"dyaPage": "0",
"xdipContent": "0",
"ydipContent": "0",
"dxdipContent": "0",
"dydipContent": "0",
"printRange": "0",
"customRange": ""
},
"message": ""
}
Event ID 1357 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1357",
"version": "0",
"level": "100",
"task": "19",
"opcode": "38",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1358 —
Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | — |
completion Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1358",
"version": "0",
"level": "100",
"task": "19",
"opcode": "65",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"completion": "0"
},
"message": ""
}
Event ID 1359 —
Fields #
| Name | Description |
|---|---|
ipgdMacNew Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1359",
"version": "0",
"level": "100",
"task": "19",
"opcode": "66",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgdMacNew": "0"
},
"message": ""
}
Event ID 1360 —
Fields #
| Name | Description |
|---|---|
PrintSettingUpdated UnicodeString | — |
InOutspace Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1360",
"version": "0",
"level": "4",
"task": "19",
"opcode": "69",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PrintSettingUpdated": "",
"InOutspace": "false"
},
"message": ""
}
Event ID 1361 —
Fields #
| Name | Description |
|---|---|
fFileSize UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1361",
"version": "0",
"level": "4",
"task": "19",
"opcode": "70",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fFileSize": "0"
},
"message": ""
}
Event ID 1362 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
SqmDocId GUID | — |
cIntervals UInt32 | — |
Bucket1-Min-Msec UInt64 | — |
Bucket2-Min-Msec UInt64 | — |
Bucket3-Min-Msec UInt64 | — |
Bucket4-Min-Msec UInt64 | — |
Bucket5-Min-Msec UInt64 | — |
Bucket6-Min-Msec UInt64 | — |
Bucket7-Min-Msec UInt64 | — |
Bucket8-Min-Msec UInt64 | — |
Bucket9-Min-Msec UInt64 | — |
Bucket10-Min-Msec UInt64 | — |
Bucket1-Count UInt64 | — |
Bucket2-Count UInt64 | — |
Bucket3-Count UInt64 | — |
Bucket4-Count UInt64 | — |
Bucket5-Count UInt64 | — |
Bucket6-Count UInt64 | — |
Bucket7-Count UInt64 | — |
Bucket8-Count UInt64 | — |
Bucket9-Count UInt64 | — |
Bucket10-Count UInt64 | — |
TopUnresponsiveDuration1-Msec UInt64 | — |
TopUnresponsiveDuration2-Msec UInt64 | — |
TopUnresponsiveDuration3-Msec UInt64 | — |
TopUnresponsiveDuration4-Msec UInt64 | — |
TopUnresponsiveDuration5-Msec UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1362",
"version": "0",
"level": "4",
"task": "19",
"opcode": "71",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0"
},
"message": ""
}
Event ID 1363 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1363",
"version": "0",
"level": "50",
"task": "19",
"opcode": "72",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1364 —
Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1364",
"version": "0",
"level": "50",
"task": "19",
"opcode": "73",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1365 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1365",
"version": "0",
"level": "100",
"task": "19",
"opcode": "74",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1366 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1366",
"version": "0",
"level": "100",
"task": "19",
"opcode": "75",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1367 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1367",
"version": "0",
"level": "100",
"task": "19",
"opcode": "76",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1368 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1368",
"version": "0",
"level": "100",
"task": "19",
"opcode": "77",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1369 —
Fields #
| Name | Description |
|---|---|
MacPMSessionError Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1369",
"version": "0",
"level": "2",
"task": "19",
"opcode": "78",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MacPMSessionError": "0"
},
"message": ""
}
Event ID 1370 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1370",
"version": "0",
"level": "4",
"task": "19",
"opcode": "79",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1371 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1371",
"version": "0",
"level": "4",
"task": "19",
"opcode": "80",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1372 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1372",
"version": "0",
"level": "4",
"task": "19",
"opcode": "81",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1373 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1373",
"version": "0",
"level": "4",
"task": "19",
"opcode": "82",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1374 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1374",
"version": "0",
"level": "4",
"task": "19",
"opcode": "83",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1375 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1375",
"version": "0",
"level": "4",
"task": "19",
"opcode": "84",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1376 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1376",
"version": "0",
"level": "4",
"task": "19",
"opcode": "85",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1377 —
Fields #
| Name | Description |
|---|---|
E2oType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1377",
"version": "0",
"level": "100",
"task": "19",
"opcode": "86",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E2oType": "0"
},
"message": ""
}
Event ID 1378 —
Fields #
| Name | Description |
|---|---|
FTransparentFill Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1378",
"version": "0",
"level": "100",
"task": "19",
"opcode": "87",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FTransparentFill": "false"
},
"message": ""
}
Event ID 1400 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1400",
"version": "0",
"level": "50",
"task": "30",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1401 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Eaten Boolean | — |
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1401",
"version": "0",
"level": "50",
"task": "30",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"Eaten": "false",
"Succeeded": "false"
},
"message": ""
}
Event ID 1402 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1402",
"version": "0",
"level": "50",
"task": "30",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1403 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Eaten Boolean | — |
Succeeded Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1403",
"version": "0",
"level": "50",
"task": "30",
"opcode": "13",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"Eaten": "false",
"Succeeded": "false"
},
"message": ""
}
Event ID 1404 —
Fields #
| Name | Description |
|---|---|
FunctionName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "1404",
"version": "0",
"level": "50",
"task": "30",
"opcode": "14",
"keywords": 9223372036854906880,
"time_created": "2026-03-14T21:52:26.283529400+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FunctionName": "UIMTS::GetActiveView"
},
"message": ""
}
Event ID 1405 —
Fields #
| Name | Description |
|---|---|
FunctionName UnicodeString | — |
lid Int32 | — |
HResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "1405",
"version": "0",
"level": "50",
"task": "30",
"opcode": "15",
"keywords": 9223372036854906880,
"time_created": "2026-03-14T21:52:26.283532500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FunctionName": "UIMTS::GetActiveView",
"lid": "1033",
"HResult": "0"
},
"message": ""
}
Event ID 1406 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1406",
"version": "0",
"level": "50",
"task": "30",
"opcode": "16",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1407 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1407",
"version": "0",
"level": "50",
"task": "30",
"opcode": "17",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1408 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1408",
"version": "0",
"level": "50",
"task": "30",
"opcode": "18",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1409 —
Fields #
| Name | Description |
|---|---|
lid Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1409",
"version": "0",
"level": "50",
"task": "30",
"opcode": "19",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1410 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1410",
"version": "0",
"level": "5",
"task": "30",
"opcode": "20",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1411 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1411",
"version": "0",
"level": "5",
"task": "30",
"opcode": "21",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1412 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1412",
"version": "0",
"level": "5",
"task": "30",
"opcode": "22",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1413 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1413",
"version": "0",
"level": "5",
"task": "30",
"opcode": "23",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1414 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1414",
"version": "0",
"level": "5",
"task": "30",
"opcode": "24",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1415 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1415",
"version": "0",
"level": "5",
"task": "30",
"opcode": "25",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1416 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1416",
"version": "0",
"level": "5",
"task": "30",
"opcode": "26",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1417 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1417",
"version": "0",
"level": "5",
"task": "30",
"opcode": "27",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1418 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1418",
"version": "0",
"level": "5",
"task": "30",
"opcode": "28",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1419 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1419",
"version": "0",
"level": "5",
"task": "30",
"opcode": "29",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1420 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
corId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1420",
"version": "1",
"level": "5",
"task": "30",
"opcode": "30",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1421 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
corId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1421",
"version": "1",
"level": "5",
"task": "30",
"opcode": "31",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1422 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
corId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1422",
"version": "1",
"level": "5",
"task": "30",
"opcode": "32",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1423 —
Fields #
| Name | Description |
|---|---|
cBatchEdit UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1423",
"version": "0",
"level": "5",
"task": "30",
"opcode": "33",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cBatchEdit": "0"
},
"message": ""
}
Event ID 1424 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1424",
"version": "0",
"level": "5",
"task": "30",
"opcode": "34",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1425 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1425",
"version": "0",
"level": "5",
"task": "30",
"opcode": "35",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1436 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
cpFirst UInt32 | — |
cpLim UInt32 | — |
grfsel UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1436",
"version": "0",
"level": "5",
"task": "30",
"opcode": "36",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"cpFirst": "0",
"cpLim": "0",
"grfsel": "0"
},
"message": ""
}
Event ID 1437 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
cpMac UInt32 | — |
dk UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1437",
"version": "0",
"level": "5",
"task": "30",
"opcode": "37",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"cpMac": "0",
"dk": "0"
},
"message": ""
}
Event ID 1438 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1438",
"version": "0",
"level": "5",
"task": "30",
"opcode": "38",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1439 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
corId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1439",
"version": "1",
"level": "5",
"task": "30",
"opcode": "39",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1440 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1440",
"version": "0",
"level": "5",
"task": "30",
"opcode": "40",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1441 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1441",
"version": "0",
"level": "5",
"task": "30",
"opcode": "41",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1442 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1442",
"version": "0",
"level": "5",
"task": "30",
"opcode": "42",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1443 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1443",
"version": "0",
"level": "5",
"task": "30",
"opcode": "43",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1444 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1444",
"version": "0",
"level": "5",
"task": "30",
"opcode": "44",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1445 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1445",
"version": "0",
"level": "5",
"task": "30",
"opcode": "45",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1446 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1446",
"version": "0",
"level": "5",
"task": "30",
"opcode": "46",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1447 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1447",
"version": "0",
"level": "5",
"task": "30",
"opcode": "47",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1448 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1448",
"version": "0",
"level": "5",
"task": "30",
"opcode": "48",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1449 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1449",
"version": "0",
"level": "5",
"task": "30",
"opcode": "49",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1450 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1450",
"version": "0",
"level": "5",
"task": "30",
"opcode": "50",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1451 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1451",
"version": "0",
"level": "5",
"task": "30",
"opcode": "51",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1452 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1452",
"version": "0",
"level": "5",
"task": "30",
"opcode": "52",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1453 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1453",
"version": "0",
"level": "5",
"task": "30",
"opcode": "53",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1454 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1454",
"version": "0",
"level": "5",
"task": "30",
"opcode": "54",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1455 —
Fields #
| Name | Description |
|---|---|
logId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1455",
"version": "0",
"level": "5",
"task": "30",
"opcode": "55",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1456 —
Fields #
| Name | Description |
|---|---|
cp UInt32 | — |
ccp UInt32 | — |
cvText UInt32 | — |
cvBack UInt32 | — |
cvUl UInt32 | — |
kul UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1456",
"version": "0",
"level": "5",
"task": "30",
"opcode": "56",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cp": "0",
"ccp": "0",
"cvText": "0",
"cvBack": "0",
"cvUl": "0",
"kul": "0"
},
"message": ""
}
Event ID 1457 —
Fields #
| Name | Description |
|---|---|
lid UInt32 | — |
fRevMarkingPdod UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1457",
"version": "0",
"level": "5",
"task": "30",
"opcode": "57",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"fRevMarkingPdod": "0"
},
"message": ""
}
Event ID 1458 —
Fields #
| Name | Description |
|---|---|
Pdod Pointer | — |
DocKind UnicodeString | — |
Lid UInt32 | — |
Cicero Boolean | — |
IMMForced Boolean | — |
CiceroAvailable Boolean | — |
UIMName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1458",
"version": "0",
"level": "4",
"task": "30",
"opcode": "58",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DocKind": "",
"Lid": "0",
"Cicero": "false",
"IMMForced": "false",
"CiceroAvailable": "false",
"UIMName": ""
},
"message": ""
}
Event ID 1459 —
Fields #
| Name | Description |
|---|---|
cpFirstChange Int32 | — |
cpLimChange Int32 | — |
cpFirstUrb Int32 | — |
cpLimUrb Int32 | — |
cpFirstComp Int32 | — |
cpLimComp Int32 | — |
Lid UInt32 | — |
UIMName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1459",
"version": "0",
"level": "4",
"task": "30",
"opcode": "59",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpFirstChange": "0",
"cpLimChange": "0",
"cpFirstUrb": "0",
"cpLimUrb": "0",
"cpFirstComp": "0",
"cpLimComp": "0",
"Lid": "0",
"UIMName": ""
},
"message": ""
}
Event ID 1460 —
Fields #
| Name | Description |
|---|---|
correlationId UInt32 | — |
messagePostDelay UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1460",
"version": "0",
"level": "4",
"task": "30",
"opcode": "60",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationId": "0",
"messagePostDelay": "0"
},
"message": ""
}
Event ID 1500 —
Fields #
| Name | Description |
|---|---|
fSearchWord UInt32 | — |
fSearchCase UInt32 | — |
fSndsLike UInt32 | — |
fFuzzy UInt32 | — |
fMatchByte UInt32 | — |
searchStringLength Int32 | — |
InReadmode Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1500",
"version": "2",
"level": "4",
"task": "40",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSearchWord": "0",
"fSearchCase": "0",
"fSndsLike": "0",
"fFuzzy": "0",
"fMatchByte": "0",
"searchStringLength": "0",
"InReadmode": "false"
},
"message": ""
}
Event ID 1501 —
Fields #
| Name | Description |
|---|---|
Next Boolean | — |
FindEventId Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1501",
"version": "0",
"level": "4",
"task": "40",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Next": "false",
"FindEventId": "0"
},
"message": ""
}
Event ID 1502 —
Fields #
| Name | Description |
|---|---|
CloseWithFindBarButton Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1502",
"version": "0",
"level": "4",
"task": "40",
"opcode": "13",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CloseWithFindBarButton": "false"
},
"message": ""
}
Event ID 1503 —
Fields #
| Name | Description |
|---|---|
CSearchResults Int32 | — |
fResult Boolean | — |
fResultInComment Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1503",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CSearchResults": "0",
"fResult": "false",
"fResultInComment": "false"
},
"message": ""
}
Event ID 1504 —
Fields #
| Name | Description |
|---|---|
ReplaceQueryLength Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1504",
"version": "0",
"level": "4",
"task": "40",
"opcode": "15",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReplaceQueryLength": "0"
},
"message": ""
}
Event ID 1505 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1505",
"version": "0",
"level": "4",
"task": "40",
"opcode": "16",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1506 —
Fields #
| Name | Description |
|---|---|
ReplaceQueryLength Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1506",
"version": "0",
"level": "4",
"task": "40",
"opcode": "15",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReplaceQueryLength": "0"
},
"message": ""
}
Event ID 1507 —
Fields #
| Name | Description |
|---|---|
cReplaces Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1507",
"version": "0",
"level": "4",
"task": "40",
"opcode": "16",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cReplaces": "0"
},
"message": ""
}
Event ID 1508 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1508",
"version": "0",
"level": "4",
"task": "40",
"opcode": "17",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1509 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fCommentsInPane Boolean | — |
findReplaceMode UInt32 | — |
fSearchInComment Boolean | — |
cHits UInt32 | — |
Event ID 1510 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1510",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1511 —
Fields #
| Name | Description |
|---|---|
fFindInComments Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1511",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fFindInComments": "false"
},
"message": ""
}
Event ID 2000 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2028",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2029 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2029",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2030 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2030",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2031 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2031",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2032 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2060",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2061 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2061",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2062 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2062",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2063 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2063",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2064 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2092",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2093 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2093",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2094 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2094",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2095 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2095",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2500 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2500",
"version": "0",
"level": "4",
"task": "11",
"opcode": "28",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2501 —
Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2501",
"version": "1",
"level": "4",
"task": "11",
"opcode": "29",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": "0"
},
"message": ""
}
Event ID 2502 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2502",
"version": "0",
"level": "4",
"task": "11",
"opcode": "30",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2504 —
Fields #
| Name | Description |
|---|---|
MessageId UInt32 | — |
ClientType Int32 | — |
AuthorId UnicodeString | — |
DocumentId UInt64 | — |
OpKind Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2504",
"version": "1",
"level": "4",
"task": "51",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"ClientType": "0",
"AuthorId": "",
"DocumentId": "0",
"OpKind": "0"
},
"message": ""
}
Event ID 2505 —
Fields #
| Name | Description |
|---|---|
MessageId UInt32 | — |
ClientType Int32 | — |
AuthorId UnicodeString | — |
OpResult Int32 | — |
ParaID UInt32 | — |
OpKind Int32 | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2505",
"version": "3",
"level": "4",
"task": "51",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"ClientType": "0",
"AuthorId": "",
"OpResult": "0",
"ParaID": "0",
"OpKind": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 2600 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
ParaId UInt32 | — |
RtcOn Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2600",
"version": "1",
"level": "4",
"task": "51",
"opcode": "18",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"ParaId": "0",
"RtcOn": "false"
},
"message": ""
}
Event ID 2601 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ParaId UInt32 | — |
AnalyzeAndDoResult Int32 | — |
AnalyzeAndDoResultString UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2601",
"version": "1",
"level": "4",
"task": "51",
"opcode": "19",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ParaId": "0",
"AnalyzeAndDoResult": "0",
"AnalyzeAndDoResultString": ""
},
"message": ""
}
Event ID 2602 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2602",
"version": "0",
"level": "4",
"task": "51",
"opcode": "20",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2603 —
Fields #
| Name | Description |
|---|---|
cParasReverted UInt32 | — |
cCpTraversed UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2603",
"version": "0",
"level": "4",
"task": "51",
"opcode": "21",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cParasReverted": "0",
"cCpTraversed": "0"
},
"message": ""
}
Event ID 2604 —
Fields #
| Name | Description |
|---|---|
MessageId UInt32 | — |
AuthorId UnicodeString | — |
DocumentId UInt64 | — |
SelType UInt32 | — |
ParaId UInt32 | — |
TextId UInt32 | — |
CaretPos UInt32 | — |
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2604",
"version": "0",
"level": "4",
"task": "51",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"DocumentId": "0",
"SelType": "0",
"ParaId": "0",
"TextId": "0",
"CaretPos": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 2605 —
Fields #
| Name | Description |
|---|---|
MessageId UInt32 | — |
AuthorId UnicodeString | — |
fSetPresence Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2605",
"version": "1",
"level": "4",
"task": "51",
"opcode": "13",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"fSetPresence": "false"
},
"message": ""
}
Event ID 2606 —
Fields #
| Name | Description |
|---|---|
RbodQueueSize UInt32 | — |
fReplay Boolean | — |
fUnpause Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2606",
"version": "0",
"level": "5",
"task": "51",
"opcode": "14",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodQueueSize": "0",
"fReplay": "false",
"fUnpause": "false"
},
"message": ""
}
Event ID 2607 —
Fields #
| Name | Description |
|---|---|
CountRbodProccessed UInt32 | — |
fRet Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2607",
"version": "0",
"level": "5",
"task": "51",
"opcode": "15",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CountRbodProccessed": "0",
"fRet": "false"
},
"message": ""
}
Event ID 2609 —
Fields #
| Name | Description |
|---|---|
GuidFileId GUID | — |
pdod Pointer | — |
pIRtcConnection Pointer | — |
pioldoc Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2609",
"version": "1",
"level": "4",
"task": "51",
"opcode": "16",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"pIRtcConnection": "0x0",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 2610 —
Fields #
| Name | Description |
|---|---|
GuidFileId GUID | — |
pIRtcConnection Pointer | — |
DusecEffectiveRTCSessionDuration UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2610",
"version": "1",
"level": "4",
"task": "51",
"opcode": "17",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pIRtcConnection": "0x0",
"DusecEffectiveRTCSessionDuration": "0"
},
"message": ""
}
Event ID 2611 —
Fields #
| Name | Description |
|---|---|
MessageId UInt32 | — |
AuthorId UnicodeString | — |
DocumentId UInt64 | — |
OpKind Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2611",
"version": "0",
"level": "5",
"task": "51",
"opcode": "22",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"DocumentId": "0",
"OpKind": "0"
},
"message": ""
}
Event ID 2612 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2612",
"version": "0",
"level": "5",
"task": "51",
"opcode": "23",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2613 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fPlayUnpausedDocument Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2613",
"version": "1",
"level": "4",
"task": "51",
"opcode": "24",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fPlayUnpausedDocument": "false"
},
"message": ""
}
Event ID 2614 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2614",
"version": "0",
"level": "4",
"task": "51",
"opcode": "25",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2615 —
Fields #
| Name | Description |
|---|---|
actt Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2615",
"version": "0",
"level": "4",
"task": "51",
"opcode": "26",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"actt": "0"
},
"message": ""
}
Event ID 2616 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
dusecAliveTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2616",
"version": "0",
"level": "4",
"task": "51",
"opcode": "27",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecAliveTime": "0"
},
"message": ""
}
Event ID 2617 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
dusecDeadTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2617",
"version": "0",
"level": "4",
"task": "51",
"opcode": "28",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecDeadTime": "0"
},
"message": ""
}
Event ID 2618 —
Fields #
| Name | Description |
|---|---|
fSpec Boolean | — |
xchSpec Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2618",
"version": "0",
"level": "4",
"task": "51",
"opcode": "29",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSpec": "false",
"xchSpec": "0"
},
"message": ""
}
Event ID 2619 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ibstshort Int32 | — |
fBroken Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2619",
"version": "0",
"level": "4",
"task": "51",
"opcode": "30",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ibstshort": "0",
"fBroken": "false"
},
"message": ""
}
Event ID 2620 —
Fields #
| Name | Description |
|---|---|
fStart Boolean | — |
fCanRtc Boolean | — |
fAlwaysSaveActivated Boolean | — |
HR Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2620",
"version": "0",
"level": "4",
"task": "51",
"opcode": "31",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"fCanRtc": "false",
"fAlwaysSaveActivated": "false",
"HR": "0"
},
"message": ""
}
Event ID 2621 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
pcoa Pointer | — |
Automatic Boolean | — |
OptInSource Int32 | — |
Response Boolean | — |
AlwaysAsk Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2621",
"version": "1",
"level": "4",
"task": "51",
"opcode": "32",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcoa": "0x0",
"Automatic": "false",
"OptInSource": "0",
"Response": "false",
"AlwaysAsk": "false"
},
"message": ""
}
Event ID 2622 —
Fields #
| Name | Description |
|---|---|
Bssck Int32 | — |
count Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2622",
"version": "0",
"level": "4",
"task": "51",
"opcode": "33",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Bssck": "0",
"count": "0"
},
"message": ""
}
Event ID 2623 —
Fields #
| Name | Description |
|---|---|
cpIn Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2623",
"version": "0",
"level": "5",
"task": "51",
"opcode": "34",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpIn": "0"
},
"message": ""
}
Event ID 2624 —
Fields #
| Name | Description |
|---|---|
cpOut Int32 | — |
cFetch Int32 | — |
scps Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2624",
"version": "0",
"level": "5",
"task": "51",
"opcode": "35",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpOut": "0",
"cFetch": "0",
"scps": "0"
},
"message": ""
}
Event ID 2625 —
Fields #
| Name | Description |
|---|---|
cpIn Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2625",
"version": "0",
"level": "5",
"task": "51",
"opcode": "36",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpIn": "0"
},
"message": ""
}
Event ID 2626 —
Fields #
| Name | Description |
|---|---|
cpOut Int32 | — |
cFetch Int32 | — |
scps Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2626",
"version": "0",
"level": "5",
"task": "51",
"opcode": "37",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpOut": "0",
"cFetch": "0",
"scps": "0"
},
"message": ""
}
Event ID 2627 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2627",
"version": "0",
"level": "4",
"task": "51",
"opcode": "38",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2628 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2628",
"version": "0",
"level": "4",
"task": "51",
"opcode": "39",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0"
},
"message": ""
}
Event ID 2629 —
Fields #
| Name | Description |
|---|---|
pthis Pointer | — |
pdodMain Pointer | — |
pdod Pointer | — |
cpFirst Int32 | — |
cpLim Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2629",
"version": "0",
"level": "5",
"task": "51",
"opcode": "40",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pthis": "0x0",
"pdodMain": "0x0",
"pdod": "0x0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 2630 —
Fields #
| Name | Description |
|---|---|
pthis Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2630",
"version": "0",
"level": "5",
"task": "51",
"opcode": "41",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pthis": "0x0"
},
"message": ""
}
Event ID 2631 —
Fields #
| Name | Description |
|---|---|
cParasDeleted UInt64 | — |
cParasDelMax Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2631",
"version": "0",
"level": "5",
"task": "51",
"opcode": "42",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cParasDeleted": "0",
"cParasDelMax": "0"
},
"message": ""
}
Event ID 2632 —
Fields #
| Name | Description |
|---|---|
FirstReason Int32 | — |
GrfReasons UInt64 | — |
pdod Pointer | — |
cpFirstOld Int32 | — |
cpLimOld Int32 | — |
cpFirstNew Int32 | — |
cpLimNew Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2632",
"version": "0",
"level": "4",
"task": "51",
"opcode": "43",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FirstReason": "0",
"GrfReasons": "0",
"pdod": "0x0",
"cpFirstOld": "0",
"cpLimOld": "0",
"cpFirstNew": "0",
"cpLimNew": "0"
},
"message": ""
}
Event ID 2633 —
Fields #
| Name | Description |
|---|---|
GuidFileId GUID | — |
pdod Pointer | — |
pcoa Pointer | — |
pIRtcConnection Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2633",
"version": "0",
"level": "4",
"task": "51",
"opcode": "44",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"pcoa": "0x0",
"pIRtcConnection": "0x0"
},
"message": ""
}
Event ID 2634 —
Fields #
| Name | Description |
|---|---|
pcoa Pointer | — |
pIRtcConnection Pointer | — |
DusecRTCContentHandlerDuration UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2634",
"version": "1",
"level": "4",
"task": "51",
"opcode": "45",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pcoa": "0x0",
"pIRtcConnection": "0x0",
"DusecRTCContentHandlerDuration": "0"
},
"message": ""
}
Event ID 2635 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
dusecAliveTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2635",
"version": "0",
"level": "4",
"task": "51",
"opcode": "46",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecAliveTime": "0"
},
"message": ""
}
Event ID 2636 —
Fields #
| Name | Description |
|---|---|
pdodMain Pointer | — |
dusecDeadTime UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2636",
"version": "0",
"level": "4",
"task": "51",
"opcode": "47",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecDeadTime": "0"
},
"message": ""
}
Event ID 2637 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2637",
"version": "0",
"level": "4",
"task": "51",
"opcode": "48",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2638 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2638",
"version": "0",
"level": "4",
"task": "51",
"opcode": "49",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2639 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ClientType Int32 | — |
fPresence Boolean | — |
cReceived UInt64 | — |
cLost UInt64 | — |
cUnordered UInt64 | — |
cDelayedStart UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2639",
"version": "0",
"level": "4",
"task": "51",
"opcode": "50",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ClientType": "0",
"fPresence": "false",
"cReceived": "0",
"cLost": "0",
"cUnordered": "0",
"cDelayedStart": "0"
},
"message": ""
}
Event ID 2640 —
Fields #
| Name | Description |
|---|---|
fAlive Boolean | — |
DeadReason Int32 | — |
pdod Pointer | — |
pdodMain Pointer | — |
paraid UInt32 | — |
dusecAliveDeadTime UInt64 | — |
InitialOpResult Int32 | — |
InitialOpKind Int32 | — |
InitialClientType Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2640",
"version": "2",
"level": "4",
"task": "51",
"opcode": "51",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAlive": "false",
"DeadReason": "0",
"pdod": "0x0",
"pdodMain": "0x0",
"paraid": "0",
"dusecAliveDeadTime": "0",
"InitialOpResult": "0",
"InitialOpKind": "0",
"InitialClientType": "0"
},
"message": ""
}
Event ID 2641 —
Fields #
| Name | Description |
|---|---|
RbodIdentifier UnicodeString | — |
OpKind Int32 | — |
fPresence Boolean | — |
MessageId UInt32 | — |
usecCreateTime UInt64 | — |
usecInsertTime UInt64 | — |
usecCoalesceTime UInt64 | — |
usecSerializeTime UInt64 | — |
usecBroadcastTime UInt64 | — |
dusecCreateToBroadcastTime UInt64 | — |
usecAckTime UInt64 | — |
dusecRoundtripTime UInt64 | — |
retryBucket UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2641",
"version": "1",
"level": "4",
"task": "51",
"opcode": "52",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodIdentifier": "",
"OpKind": "0",
"fPresence": "false",
"MessageId": "0",
"usecCreateTime": "0",
"usecInsertTime": "0",
"usecCoalesceTime": "0",
"usecSerializeTime": "0",
"usecBroadcastTime": "0",
"dusecCreateToBroadcastTime": "0",
"usecAckTime": "0",
"dusecRoundtripTime": "0",
"retryBucket": "0"
},
"message": ""
}
Event ID 2642 —
Fields #
| Name | Description |
|---|---|
RbodIdentifier UnicodeString | — |
OpKind Int32 | — |
MessageId UInt32 | — |
usecCreateTime UInt64 | — |
usecInsertTime UInt64 | — |
usecProcessAllRbodsTime UInt64 | — |
usecRorDoIfPossibleTime UInt64 | — |
dusecReceiveToPlayTime UInt64 | — |
OpResult Int32 | — |
Paused Boolean | — |
UnderPauseEffect Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2642",
"version": "0",
"level": "4",
"task": "51",
"opcode": "53",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodIdentifier": "",
"OpKind": "0",
"MessageId": "0",
"usecCreateTime": "0",
"usecInsertTime": "0",
"usecProcessAllRbodsTime": "0",
"usecRorDoIfPossibleTime": "0",
"dusecReceiveToPlayTime": "0",
"OpResult": "0",
"Paused": "false",
"UnderPauseEffect": "false"
},
"message": ""
}
Event ID 2643 —
Fields #
| Name | Description |
|---|---|
FeatureGateOn Boolean | — |
pdodMain Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2643",
"version": "0",
"level": "4",
"task": "51",
"opcode": "54",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FeatureGateOn": "false",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 2644 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2644",
"version": "0",
"level": "4",
"task": "51",
"opcode": "55",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2645 —
Fields #
| Name | Description |
|---|---|
PresenceTextType UInt32 | — |
AggregationHelper Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2645",
"version": "0",
"level": "4",
"task": "51",
"opcode": "56",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PresenceTextType": "0",
"AggregationHelper": "0"
},
"message": ""
}
Event ID 2646 —
Fields #
| Name | Description |
|---|---|
UnknownEditorTime UInt32 | — |
fNeverKnown Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2646",
"version": "0",
"level": "4",
"task": "51",
"opcode": "57",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UnknownEditorTime": "0",
"fNeverKnown": "false"
},
"message": ""
}
Event ID 2650 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2650",
"version": "0",
"level": "4",
"task": "51",
"opcode": "61",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2651 —
Fields #
| Name | Description |
|---|---|
fPresence Boolean | — |
GuidFileId GUID | — |
ParaId UInt32 | — |
cParaIds UInt32 | — |
cSequence UInt32 | — |
cUnordered UInt32 | — |
cLost UInt32 | — |
usecInBuffer UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2651",
"version": "0",
"level": "4",
"task": "51",
"opcode": "62",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnordered": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2652 —
Fields #
| Name | Description |
|---|---|
fPresence Boolean | — |
GuidFileId GUID | — |
ParaId UInt32 | — |
cParaIds UInt32 | — |
cSequence UInt32 | — |
cUnordered UInt32 | — |
cLost UInt32 | — |
usecInBuffer UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2652",
"version": "0",
"level": "4",
"task": "51",
"opcode": "63",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnordered": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2653 —
Fields #
| Name | Description |
|---|---|
fPresence Boolean | — |
GuidFileId GUID | — |
ParaId UInt32 | — |
cParaIds UInt32 | — |
cSequence UInt32 | — |
cUnorderedResolved UInt32 | — |
cLost UInt32 | — |
usecInBuffer UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2653",
"version": "0",
"level": "4",
"task": "51",
"opcode": "64",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnorderedResolved": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2654 —
Fields #
| Name | Description |
|---|---|
fPresence Boolean | — |
GuidFileId GUID | — |
ParaId UInt32 | — |
drwmidss UInt32 | — |
dusecDelay UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2654",
"version": "0",
"level": "4",
"task": "51",
"opcode": "65",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"drwmidss": "0",
"dusecDelay": "0"
},
"message": ""
}
Event ID 2900 —
Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | — |
pdod Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2900",
"version": "0",
"level": "4",
"task": "53",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 2901 —
Fields #
| Name | Description |
|---|---|
NoProofRegion UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2901",
"version": "0",
"level": "4",
"task": "24",
"opcode": "25",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NoProofRegion": "0"
},
"message": ""
}
Event ID 2902 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
lang UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2902",
"version": "0",
"level": "4",
"task": "61",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"lang": ""
},
"message": ""
}
Event ID 2903 —
Fields #
| Name | Description |
|---|---|
Lid UInt16 | — |
fIsDifferentLangSelected Boolean | — |
fIsNoProofChecked Boolean | — |
fIsAutoDetectUnchecked Boolean | — |
fIsSetDefaultPressed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2903",
"version": "0",
"level": "4",
"task": "24",
"opcode": "26",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Lid": "0",
"fIsDifferentLangSelected": "false",
"fIsNoProofChecked": "false",
"fIsAutoDetectUnchecked": "false",
"fIsSetDefaultPressed": "false"
},
"message": ""
}
Event ID 2904 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pdod Pointer | — |
cp Int32 | — |
itap Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2904",
"version": "0",
"level": "2",
"task": "53",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pdod": "0x0",
"cp": "0",
"itap": "0"
},
"message": ""
}
Event ID 2905 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
pdod Pointer | — |
cp Int32 | — |
itap Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2905",
"version": "0",
"level": "3",
"task": "53",
"opcode": "13",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pdod": "0x0",
"cp": "0",
"itap": "0"
},
"message": ""
}
Event ID 2906 —
Fields #
| Name | Description |
|---|---|
fVisible Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2906",
"version": "0",
"level": "4",
"task": "62",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fVisible": "false"
},
"message": ""
}
Event ID 2907 —
Fields #
| Name | Description |
|---|---|
fMoving Boolean | — |
xPos Double | — |
yPos Double | — |
xMaxOffset Double | — |
yMaxOffset Double | — |
xZoom Double | — |
yZoom Double | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2907",
"version": "0",
"level": "5",
"task": "62",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fMoving": "false",
"xPos": "0.0",
"yPos": "0.0",
"xMaxOffset": "0.0",
"yMaxOffset": "0.0",
"xZoom": "0.0",
"yZoom": "0.0"
},
"message": ""
}
Event ID 2908 —
Fields #
| Name | Description |
|---|---|
fVisible Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2908",
"version": "0",
"level": "4",
"task": "62",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fVisible": "false"
},
"message": ""
}
Event ID 2909 —
Fields #
| Name | Description |
|---|---|
XszName UnicodeString | — |
XszPayload UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2909",
"version": "0",
"level": "4",
"task": "63",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"XszName": "",
"XszPayload": ""
},
"message": ""
}
Event ID 2910 —
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
pdod Pointer | — |
wkViewKind UInt32 | — |
fIsMotherWwd Boolean | — |
fInListWwd Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "2910",
"version": "0",
"level": "4",
"task": "64",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-14T21:57:27.602330200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0x248B244",
"pdod": "0x2CA3EA2C1D0",
"wkViewKind": " 2048",
"fIsMotherWwd": "true",
"fInListWwd": "true"
},
"message": ""
}
Event ID 2911 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
lTagBkmk UInt64 | — |
fHasAtMention Boolean | — |
fCommentSelChangeFG Boolean | — |
Event ID 2912 —
Fields #
| Name | Description |
|---|---|
fGlobalDotMatchesDefault Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "2912",
"version": "0",
"level": "4",
"task": "45",
"opcode": "26",
"keywords": 9223372036858970112,
"time_created": "2026-03-14T22:34:52.702361800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fGlobalDotMatchesDefault": "false"
},
"message": ""
}
Event ID 2913 —
Fields #
| Name | Description |
|---|---|
fDifferentDoc Boolean | — |
fUiaNodeAllowed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2913",
"version": "0",
"level": "4",
"task": "70",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDifferentDoc": "false",
"fUiaNodeAllowed": "false"
},
"message": ""
}
Event ID 3000 —
Fields #
| Name | Description |
|---|---|
Device UnicodeString | — |
Mode UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3000",
"version": "0",
"level": "4",
"task": "65",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Device": "",
"Mode": "0"
},
"message": ""
}
Event ID 3001 —
Fields #
| Name | Description |
|---|---|
Devmode UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3001",
"version": "0",
"level": "100",
"task": "65",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Devmode": ""
},
"message": ""
}
Event ID 3002 —
Fields #
| Name | Description |
|---|---|
Devmode UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3002",
"version": "0",
"level": "100",
"task": "65",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Devmode": ""
},
"message": ""
}
Event ID 3003 —
Fields #
| Name | Description |
|---|---|
ReturnValue Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3003",
"version": "0",
"level": "4",
"task": "65",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReturnValue": "0"
},
"message": ""
}
Event ID 3004 —
Fields #
| Name | Description |
|---|---|
ReturnValue Int32 | — |
Index Int32 | — |
DC Pointer | — |
fError Boolean | — |
fFaking Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3004",
"version": "0",
"level": "4",
"task": "65",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReturnValue": "0",
"Index": "0",
"DC": "0x0",
"fError": "false",
"fFaking": "false"
},
"message": ""
}
Event ID 3005 —
Fields #
| Name | Description |
|---|---|
RetVal Boolean | — |
Printer UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3005",
"version": "0",
"level": "5",
"task": "65",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RetVal": "false",
"Printer": ""
},
"message": ""
}
Event ID 3006 —
Fields #
| Name | Description |
|---|---|
fQuery Boolean | — |
fFakePrinterNameOK Boolean | — |
fHaveDefaultPrinterName Boolean | — |
fEmptyPrinterName Boolean | — |
RetVal Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3006",
"version": "0",
"level": "5",
"task": "65",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fQuery": "false",
"fFakePrinterNameOK": "false",
"fHaveDefaultPrinterName": "false",
"fEmptyPrinterName": "false",
"RetVal": "false"
},
"message": ""
}
Event ID 3007 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3007",
"version": "0",
"level": "5",
"task": "65",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3008 —
Fields #
| Name | Description |
|---|---|
Driver UnicodeString | — |
Device UnicodeString | — |
Port UnicodeString | — |
Devmode UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3008",
"version": "0",
"level": "5",
"task": "65",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Driver": "",
"Device": "",
"Port": "",
"Devmode": ""
},
"message": ""
}
Event ID 3009 —
Fields #
| Name | Description |
|---|---|
RetVal Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3009",
"version": "0",
"level": "5",
"task": "65",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RetVal": "false"
},
"message": ""
}
Event ID 3010 —
Fields #
| Name | Description |
|---|---|
DCIn Pointer | — |
Devmode UnicodeString | — |
DCOut Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3010",
"version": "0",
"level": "5",
"task": "65",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DCIn": "0x0",
"Devmode": "",
"DCOut": "0x0"
},
"message": ""
}
Event ID 3011 —
Fields #
| Name | Description |
|---|---|
DC Pointer | — |
RetVal Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3011",
"version": "0",
"level": "5",
"task": "65",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DC": "0x0",
"RetVal": "false"
},
"message": ""
}
Event ID 3012 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3012",
"version": "0",
"level": "5",
"task": "65",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3013 —
Fields #
| Name | Description |
|---|---|
Printer UnicodeString | — |
Index UInt32 | — |
fOutput Boolean | — |
fDevmode Boolean | — |
ReturnValue Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3013",
"version": "0",
"level": "5",
"task": "65",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Printer": "",
"Index": "0",
"fOutput": "false",
"fDevmode": "false",
"ReturnValue": "0"
},
"message": ""
}
Event ID 3014 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3014",
"version": "0",
"level": "5",
"task": "65",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3015 —
Fields #
| Name | Description |
|---|---|
Printer UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3015",
"version": "0",
"level": "5",
"task": "65",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Printer": ""
},
"message": ""
}
Event ID 3016 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3016",
"version": "0",
"level": "5",
"task": "65",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 30291 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30291",
"version": "1",
"level": "1",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30292 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30292",
"version": "1",
"level": "2",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30293 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30293",
"version": "1",
"level": "3",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30294 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30294",
"version": "1",
"level": "4",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30295 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30295",
"version": "1",
"level": "5",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30296 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30296",
"version": "1",
"level": "16",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30297 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30297",
"version": "1",
"level": "50",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30298 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30298",
"version": "1",
"level": "100",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30299 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30299",
"version": "1",
"level": "200",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30300 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30300",
"version": "1",
"level": "1",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30301 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30301",
"version": "1",
"level": "2",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30302 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30302",
"version": "1",
"level": "3",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30303 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30303",
"version": "1",
"level": "4",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30304 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30304",
"version": "1",
"level": "5",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30305 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30305",
"version": "1",
"level": "16",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30306 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30306",
"version": "1",
"level": "50",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30307 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30307",
"version": "1",
"level": "100",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30308 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30308",
"version": "1",
"level": "200",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30309 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30309",
"version": "1",
"level": "1",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30310 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30310",
"version": "1",
"level": "2",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30311 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30311",
"version": "1",
"level": "3",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30312 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30312",
"version": "1",
"level": "4",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30313 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30313",
"version": "1",
"level": "5",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30314 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30314",
"version": "1",
"level": "16",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30315 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30315",
"version": "1",
"level": "50",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30316 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30316",
"version": "1",
"level": "100",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30317 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30317",
"version": "1",
"level": "200",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30318 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30318",
"version": "1",
"level": "1",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30319 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30319",
"version": "1",
"level": "2",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30320 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30320",
"version": "1",
"level": "3",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30321 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30321",
"version": "1",
"level": "4",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30322 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30322",
"version": "1",
"level": "5",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30323 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30323",
"version": "1",
"level": "16",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30324 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30324",
"version": "1",
"level": "50",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30325 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30325",
"version": "1",
"level": "100",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30326 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30326",
"version": "1",
"level": "200",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30327 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30327",
"version": "1",
"level": "1",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30328 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30328",
"version": "1",
"level": "2",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30329 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30329",
"version": "1",
"level": "3",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30330 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30330",
"version": "1",
"level": "4",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30331 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30331",
"version": "1",
"level": "5",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30332 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30332",
"version": "1",
"level": "16",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30333 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30333",
"version": "1",
"level": "50",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30334 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30334",
"version": "1",
"level": "100",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30335 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30335",
"version": "1",
"level": "200",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30336 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30336",
"version": "1",
"level": "1",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30337 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30337",
"version": "1",
"level": "2",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30338 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30338",
"version": "1",
"level": "3",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30339 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30339",
"version": "1",
"level": "4",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30340 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30340",
"version": "1",
"level": "5",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30341 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30341",
"version": "1",
"level": "16",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30342 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30342",
"version": "1",
"level": "50",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30343 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30343",
"version": "1",
"level": "100",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30344 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30344",
"version": "1",
"level": "200",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30345 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30345",
"version": "1",
"level": "1",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30346 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30346",
"version": "1",
"level": "2",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30347 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30347",
"version": "1",
"level": "3",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30348 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30348",
"version": "1",
"level": "4",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30349 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30349",
"version": "1",
"level": "5",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30350 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30350",
"version": "1",
"level": "16",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30351 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30351",
"version": "1",
"level": "50",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30352 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30352",
"version": "1",
"level": "100",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30353 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30353",
"version": "1",
"level": "200",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30354 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30354",
"version": "1",
"level": "1",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30355 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30355",
"version": "1",
"level": "2",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30356 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30356",
"version": "1",
"level": "3",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30357 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30357",
"version": "1",
"level": "4",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30358 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30358",
"version": "1",
"level": "5",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30359 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30359",
"version": "1",
"level": "16",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30360 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30360",
"version": "1",
"level": "50",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30361 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30361",
"version": "1",
"level": "100",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30362 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30362",
"version": "1",
"level": "200",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30363 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30363",
"version": "1",
"level": "1",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30364 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30364",
"version": "1",
"level": "2",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30365 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30365",
"version": "1",
"level": "3",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30366 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30366",
"version": "1",
"level": "4",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30367 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30367",
"version": "1",
"level": "5",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30368 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30368",
"version": "1",
"level": "16",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30369 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30369",
"version": "1",
"level": "50",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30370 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30370",
"version": "1",
"level": "100",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30371 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30371",
"version": "1",
"level": "200",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30372 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30372",
"version": "1",
"level": "1",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30373 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30373",
"version": "1",
"level": "2",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30374 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30374",
"version": "1",
"level": "3",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30375 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30375",
"version": "1",
"level": "4",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30376 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30376",
"version": "1",
"level": "5",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30377 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30377",
"version": "1",
"level": "16",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30378 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30378",
"version": "1",
"level": "50",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30379 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30379",
"version": "1",
"level": "100",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30380 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30380",
"version": "1",
"level": "200",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30381 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30381",
"version": "1",
"level": "1",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30382 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30382",
"version": "1",
"level": "2",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30383 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30383",
"version": "1",
"level": "3",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30384 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30384",
"version": "1",
"level": "4",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30385 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30385",
"version": "1",
"level": "5",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30386 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30386",
"version": "1",
"level": "16",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30387 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30387",
"version": "1",
"level": "50",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30388 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30388",
"version": "1",
"level": "100",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30389 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30389",
"version": "1",
"level": "200",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30390 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30390",
"version": "1",
"level": "1",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30391 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30391",
"version": "1",
"level": "2",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30392 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30392",
"version": "1",
"level": "3",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30393 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30393",
"version": "1",
"level": "4",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30394 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30394",
"version": "1",
"level": "5",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30395 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30395",
"version": "1",
"level": "16",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30396 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30396",
"version": "1",
"level": "50",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30397 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30397",
"version": "1",
"level": "100",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30398 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30398",
"version": "1",
"level": "200",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30399 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30399",
"version": "1",
"level": "1",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30400 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30400",
"version": "1",
"level": "2",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30401 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30401",
"version": "1",
"level": "3",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30402 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30402",
"version": "1",
"level": "4",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30403 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30403",
"version": "1",
"level": "5",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30404 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30404",
"version": "1",
"level": "16",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30405 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30405",
"version": "1",
"level": "50",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30406 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30406",
"version": "1",
"level": "100",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30407 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30407",
"version": "1",
"level": "200",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30408 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30408",
"version": "1",
"level": "1",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30409 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30409",
"version": "1",
"level": "2",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30410 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30410",
"version": "1",
"level": "3",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30411 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30411",
"version": "1",
"level": "4",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30412 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30412",
"version": "1",
"level": "5",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30413 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30413",
"version": "1",
"level": "16",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30414 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30414",
"version": "1",
"level": "50",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30415 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30415",
"version": "1",
"level": "100",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30416 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30416",
"version": "1",
"level": "200",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30417 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30417",
"version": "1",
"level": "1",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30418 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30418",
"version": "1",
"level": "2",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30419 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30419",
"version": "1",
"level": "3",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30420 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30420",
"version": "1",
"level": "4",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30421 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30421",
"version": "1",
"level": "5",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30422 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30422",
"version": "1",
"level": "16",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30423 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30423",
"version": "1",
"level": "50",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30424 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30424",
"version": "1",
"level": "100",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30425 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30425",
"version": "1",
"level": "200",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30426 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30426",
"version": "1",
"level": "1",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30427 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30427",
"version": "1",
"level": "2",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30428 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30428",
"version": "1",
"level": "3",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30429 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30429",
"version": "1",
"level": "4",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30430 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30430",
"version": "1",
"level": "5",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30431 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30431",
"version": "1",
"level": "16",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30432 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30432",
"version": "1",
"level": "50",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30433 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30433",
"version": "1",
"level": "100",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30434 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30434",
"version": "1",
"level": "200",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30435 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30435",
"version": "1",
"level": "1",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30436 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30436",
"version": "1",
"level": "2",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30437 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30437",
"version": "1",
"level": "3",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30438 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30438",
"version": "1",
"level": "4",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30439 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30439",
"version": "1",
"level": "5",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30440 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30440",
"version": "1",
"level": "16",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30441 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30441",
"version": "1",
"level": "50",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30442 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30442",
"version": "1",
"level": "100",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30443 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30443",
"version": "1",
"level": "200",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30444 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30444",
"version": "1",
"level": "1",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30445 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30445",
"version": "1",
"level": "2",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30446 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30446",
"version": "1",
"level": "3",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30447 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30447",
"version": "1",
"level": "4",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30448 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30448",
"version": "1",
"level": "5",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30449 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30449",
"version": "1",
"level": "16",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30450 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30450",
"version": "1",
"level": "50",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30451 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30451",
"version": "1",
"level": "100",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30452 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30452",
"version": "1",
"level": "200",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30453 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30453",
"version": "1",
"level": "1",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30454 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30454",
"version": "1",
"level": "2",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30455 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30455",
"version": "1",
"level": "3",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30456 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30456",
"version": "1",
"level": "4",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30457 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30457",
"version": "1",
"level": "5",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30458 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30458",
"version": "1",
"level": "16",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30459 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30459",
"version": "1",
"level": "50",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30460 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30460",
"version": "1",
"level": "100",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30461 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30461",
"version": "1",
"level": "200",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30462 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30462",
"version": "1",
"level": "1",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30463 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30463",
"version": "1",
"level": "2",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30464 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30464",
"version": "1",
"level": "3",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30465 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30465",
"version": "1",
"level": "4",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30466 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30466",
"version": "1",
"level": "5",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30467 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30467",
"version": "1",
"level": "16",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30468 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30468",
"version": "1",
"level": "50",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30469 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30469",
"version": "1",
"level": "100",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30470 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30470",
"version": "1",
"level": "200",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30471 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30471",
"version": "1",
"level": "1",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30472 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30472",
"version": "1",
"level": "2",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30473 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30473",
"version": "1",
"level": "3",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30474 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30474",
"version": "1",
"level": "4",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30475 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30475",
"version": "1",
"level": "5",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30476 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30476",
"version": "1",
"level": "16",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30477 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30477",
"version": "1",
"level": "50",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30478 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30478",
"version": "1",
"level": "100",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30479 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30479",
"version": "1",
"level": "200",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30480 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30480",
"version": "1",
"level": "1",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30481 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30481",
"version": "1",
"level": "2",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30482 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30482",
"version": "1",
"level": "3",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30483 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30483",
"version": "1",
"level": "4",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30484 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30484",
"version": "1",
"level": "5",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30485 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30485",
"version": "1",
"level": "16",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30486 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30486",
"version": "1",
"level": "50",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30487 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30487",
"version": "1",
"level": "100",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30488 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30488",
"version": "1",
"level": "200",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30489 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30489",
"version": "1",
"level": "1",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30490 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30490",
"version": "1",
"level": "2",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30491 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30491",
"version": "1",
"level": "3",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30492 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30492",
"version": "1",
"level": "4",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30493 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30493",
"version": "1",
"level": "5",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30494 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30494",
"version": "1",
"level": "16",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30495 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30495",
"version": "1",
"level": "50",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30496 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30496",
"version": "1",
"level": "100",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30497 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30497",
"version": "1",
"level": "200",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30498 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30498",
"version": "1",
"level": "1",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30499 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30499",
"version": "1",
"level": "2",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30500 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30500",
"version": "1",
"level": "3",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30501 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30501",
"version": "1",
"level": "4",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30502 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30502",
"version": "1",
"level": "5",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30503 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30503",
"version": "1",
"level": "16",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30504 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30504",
"version": "1",
"level": "50",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30505 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30505",
"version": "1",
"level": "100",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30506 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30506",
"version": "1",
"level": "200",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30507 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30507",
"version": "1",
"level": "1",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30508 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30508",
"version": "1",
"level": "2",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30509 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30509",
"version": "1",
"level": "3",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30510 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30510",
"version": "1",
"level": "4",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30511 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30511",
"version": "1",
"level": "5",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30512 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30512",
"version": "1",
"level": "16",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30513 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30513",
"version": "1",
"level": "50",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30514 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30514",
"version": "1",
"level": "100",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30515 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30515",
"version": "1",
"level": "200",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30516 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30516",
"version": "1",
"level": "1",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30517 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30517",
"version": "1",
"level": "2",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30518 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30518",
"version": "1",
"level": "3",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30519 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30519",
"version": "1",
"level": "4",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30520 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30520",
"version": "1",
"level": "5",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30521 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30521",
"version": "1",
"level": "16",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30522 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30522",
"version": "1",
"level": "50",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30523 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30523",
"version": "1",
"level": "100",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30524 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30524",
"version": "1",
"level": "200",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30525 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30525",
"version": "1",
"level": "1",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30526 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30526",
"version": "1",
"level": "2",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30527 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30527",
"version": "1",
"level": "3",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30528 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30528",
"version": "1",
"level": "4",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30529 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30529",
"version": "1",
"level": "5",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30530 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30530",
"version": "1",
"level": "16",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30531 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30531",
"version": "1",
"level": "50",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30532 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30532",
"version": "1",
"level": "100",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30533 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30533",
"version": "1",
"level": "200",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30534 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30534",
"version": "1",
"level": "1",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30535 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30535",
"version": "1",
"level": "2",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30536 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30536",
"version": "1",
"level": "3",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30537 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30537",
"version": "1",
"level": "4",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30538 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30538",
"version": "1",
"level": "5",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30539 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30539",
"version": "1",
"level": "16",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30540 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30540",
"version": "1",
"level": "50",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30541 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30541",
"version": "1",
"level": "100",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30542 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30542",
"version": "1",
"level": "200",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30543 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30543",
"version": "1",
"level": "1",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30544 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30544",
"version": "1",
"level": "2",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30545 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30545",
"version": "1",
"level": "3",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30546 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30546",
"version": "1",
"level": "4",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30547 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30547",
"version": "1",
"level": "5",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30548 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30548",
"version": "1",
"level": "16",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30549 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30549",
"version": "1",
"level": "50",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30550 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30550",
"version": "1",
"level": "100",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30551 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30551",
"version": "1",
"level": "200",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30552 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30552",
"version": "1",
"level": "1",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30553 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30553",
"version": "1",
"level": "2",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30554 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30554",
"version": "1",
"level": "3",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30555 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30555",
"version": "1",
"level": "4",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30556 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30556",
"version": "1",
"level": "5",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30557 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30557",
"version": "1",
"level": "16",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30558 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30558",
"version": "1",
"level": "50",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30559 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30559",
"version": "1",
"level": "100",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30560 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30560",
"version": "1",
"level": "200",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30561 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30561",
"version": "1",
"level": "1",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30562 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30562",
"version": "1",
"level": "2",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30563 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30563",
"version": "1",
"level": "3",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30564 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30564",
"version": "1",
"level": "4",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30565 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30565",
"version": "1",
"level": "5",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30566 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30566",
"version": "1",
"level": "16",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30567 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30567",
"version": "1",
"level": "50",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30568 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30568",
"version": "1",
"level": "100",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30569 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30569",
"version": "1",
"level": "200",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30570 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30570",
"version": "1",
"level": "1",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30571 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30571",
"version": "1",
"level": "2",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30572 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30572",
"version": "1",
"level": "3",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30573 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30573",
"version": "1",
"level": "4",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30574 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30574",
"version": "1",
"level": "5",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30575 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30575",
"version": "1",
"level": "16",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30576 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30576",
"version": "1",
"level": "50",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30577 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30577",
"version": "1",
"level": "100",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30578 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30578",
"version": "1",
"level": "200",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}