Microsoft-Office-Word3
450 events across 1 channel
Event ID 0 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "0",
"version": "0",
"level": "4",
"task": "1",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1 —
Fields #
| Name | Description |
|---|---|
receivingClientVclokId GUID | — |
sendingClientVclokId GUID | — |
senderSaveActionGuid GUID | — |
sendingClientVclokValueMin UInt32 | — |
sendingClientVclokValueMax UInt32 | — |
uploadDuration UInt64 | — |
rtcPacketArrivalToMergeDuration UInt64 | — |
rtcPacketArrivalToDownloadStartDuration UInt64 | — |
downloadStartToEndDuration UInt64 | — |
downloadEndToMergeDuration UInt64 | — |
mergeToDisplayDuration UInt64 | — |
e2eDuration UInt64 | — |
deepSleepDuration UInt64 | — |
mergeStartToEndDuration UInt64 | — |
downloadBranchNotificationDuration UInt64 | — |
idleDuration UInt64 | — |
loadDuration UInt64 | — |
fMergedContent Boolean | — |
rtcBrkSenderDuration UInt64 | — |
rtcBrkE2EDuration UInt64 | — |
idleDocLoadEndToMergeStartDuration UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "1",
"version": "8",
"level": "4",
"task": "1",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"senderSaveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokValueMin": "0",
"sendingClientVclokValueMax": "0",
"uploadDuration": "0",
"rtcPacketArrivalToMergeDuration": "0",
"rtcPacketArrivalToDownloadStartDuration": "0",
"downloadStartToEndDuration": "0",
"downloadEndToMergeDuration": "0",
"mergeToDisplayDuration": "0",
"e2eDuration": "0",
"deepSleepDuration": "0",
"mergeStartToEndDuration": "0",
"downloadBranchNotificationDuration": "0",
"idleDuration": "0",
"loadDuration": "0",
"fMergedContent": "false",
"rtcBrkSenderDuration": "0",
"rtcBrkE2EDuration": "0",
"idleDocLoadEndToMergeStartDuration": "0"
},
"message": ""
}
Event ID 2 —
Fields #
| Name | Description |
|---|---|
receivingClientVclokId GUID | — |
sendingClientVclokId GUID | — |
sendingClientVclokValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2",
"version": "0",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokValue": "0"
},
"message": ""
}
Event ID 3 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "3",
"version": "0",
"level": "4",
"task": "1",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4 —
Fields #
| Name | Description |
|---|---|
savingClientVclokId GUID | — |
savingClientVclokValueMin UInt32 | — |
savingClientVclokValueMax UInt32 | — |
uploadDuration UInt64 | — |
editToUploadTimeMicroseconds UInt64 | — |
rtcBrkEditToUploadTimeMicroseconds UInt64 | — |
saveToUploadInitTimeMicroseconds UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "4",
"version": "1",
"level": "4",
"task": "1",
"opcode": "14",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"savingClientVclokValueMin": "0",
"savingClientVclokValueMax": "0",
"uploadDuration": "0",
"editToUploadTimeMicroseconds": "0",
"rtcBrkEditToUploadTimeMicroseconds": "0",
"saveToUploadInitTimeMicroseconds": "0"
},
"message": ""
}
Event ID 5 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "5",
"version": "0",
"level": "5",
"task": "2",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 6 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "6",
"version": "0",
"level": "5",
"task": "2",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 7 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "7",
"version": "0",
"level": "5",
"task": "2",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 8 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "8",
"version": "0",
"level": "5",
"task": "2",
"opcode": "13",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 9 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "9",
"version": "0",
"level": "5",
"task": "2",
"opcode": "14",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 10 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "10",
"version": "0",
"level": "5",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 11 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "11",
"version": "0",
"level": "5",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 12 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "12",
"version": "0",
"level": "5",
"task": "2",
"opcode": "16",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 13 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "13",
"version": "0",
"level": "5",
"task": "2",
"opcode": "17",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 14 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "14",
"version": "0",
"level": "5",
"task": "3",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 15 —
Fields #
| Name | Description |
|---|---|
Dismissal Reason UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "15",
"version": "0",
"level": "5",
"task": "3",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dismissal Reason": "0"
},
"message": ""
}
Event ID 16 —
Fields #
| Name | Description |
|---|---|
savingClientVclokId GUID | — |
savingClientVclokValue UInt32 | — |
saveTimeMicroseconds UInt64 | — |
rtcBrkEditToSaveTimeMicroseconds UInt64 | — |
editToSaveTimeMicroseconds UInt64 | — |
firstRtcBrkEditId GUID | — |
firstEditId GUID | — |
minOcsAutoSaveIntervalMicroseconds UInt64 | — |
idleAutoSaveDelayTimeMicroseconds UInt64 | — |
autoSaveIdleToSaveTimeMicroseconds UInt64 | — |
deepSleepDurationMicroseconds UInt64 | — |
saveActionGuid GUID | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "16",
"version": "5",
"level": "4",
"task": "1",
"opcode": "15",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"savingClientVclokValue": "0",
"saveTimeMicroseconds": "0",
"rtcBrkEditToSaveTimeMicroseconds": "0",
"editToSaveTimeMicroseconds": "0",
"firstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"firstEditId": "{00000000-0000-0000-0000-000000000000}",
"minOcsAutoSaveIntervalMicroseconds": "0",
"idleAutoSaveDelayTimeMicroseconds": "0",
"autoSaveIdleToSaveTimeMicroseconds": "0",
"deepSleepDurationMicroseconds": "0",
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 18 —
Fields #
| Name | Description |
|---|---|
fDocHasFormsField Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "18",
"version": "0",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDocHasFormsField": "false"
},
"message": ""
}
Event ID 20 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
pdod Pointer | — |
dk UnicodeString | — |
cpFirst Int32 | — |
cpLim Int32 | — |
grftr UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "20",
"version": "1",
"level": "5",
"task": "6",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:52:32.892257500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"pdod": "0x1FF3C67AD60",
"dk": "Doc",
"cpFirst": "-1",
"cpLim": "-1",
"grftr": " 1"
},
"message": ""
}
Event ID 21 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
dk UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "21",
"version": "0",
"level": "5",
"task": "6",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": ""
},
"message": ""
}
Event ID 22 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
dk UnicodeString | — |
cpFirst Int32 | — |
dcp Int32 | — |
grfef_low UInt32 | — |
grfef_high UInt32 | — |
grfef2_low UInt32 | — |
grfef2_high UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "22",
"version": "0",
"level": "5",
"task": "6",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": "",
"cpFirst": "0",
"dcp": "0",
"grfef_low": "0",
"grfef_high": "0",
"grfef2_low": "0",
"grfef2_high": "0"
},
"message": ""
}
Event ID 23 —
Fields #
| Name | Description |
|---|---|
drk UnicodeString | — |
Bounding Box UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "23",
"version": "0",
"level": "5",
"task": "6",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "",
"Bounding Box": ""
},
"message": ""
}
Event ID 24 —
Fields #
| Name | Description |
|---|---|
drk UnicodeString | — |
Bounding Box UnicodeString | — |
Rectangles UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "24",
"version": "0",
"level": "50",
"task": "6",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:51:50.468738700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "DirtyAll DR",
"Bounding Box": "(733, 163)+[83 x 33]\n",
"Rectangles": "(733, 163)+[83 x 33]\n"
},
"message": ""
}
Event ID 25 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
pdod Pointer | — |
dk UnicodeString | — |
cpFirst Int32 | — |
dcp Int32 | — |
fNoLayoutChange Boolean | — |
fSelectionChange Boolean | — |
fUpdateArtvNVersion Boolean | — |
fDirtyMtxi Boolean | — |
grfef_low UInt32 | — |
grfef_high UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "25",
"version": "1",
"level": "50",
"task": "6",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:56:14.893026300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"pdod": "0x1FF3C67AD60",
"dk": "Doc",
"cpFirst": "287",
"dcp": "4",
"fNoLayoutChange": "false",
"fSelectionChange": "false",
"fUpdateArtvNVersion": "false",
"fDirtyMtxi": "false",
"grfef_low": " 0",
"grfef_high": " 0"
},
"message": ""
}
Event ID 26 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
AutoCreateEventHandler UInt32 | — |
tSucceeded Int32 | — |
fDocRenamed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "26",
"version": "2",
"level": "4",
"task": "5",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 27 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
AutoCreateEventHandler UInt32 | — |
tSucceeded Int32 | — |
fDocRenamed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "27",
"version": "2",
"level": "4",
"task": "5",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 28 —
Fields #
| Name | Description |
|---|---|
Tag UInt32 | — |
pdod Pointer | — |
AutoCreateEventHandler UInt32 | — |
tSucceeded Int32 | — |
fDocRenamed Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "28",
"version": "2",
"level": "4",
"task": "5",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 30 —
Fields #
| Name | Description |
|---|---|
Reason for Conflict UInt32 | — |
fciUser UInt32 | — |
fciCoauth UInt32 | — |
User CA type UInt32 | — |
camoUser.cp UInt32 | — |
camoUser.dcpOld UInt32 | — |
camoUser.dcpNew UInt32 | — |
camoCoauth.cp UInt32 | — |
camoCoauth.dcpOld UInt32 | — |
camoCoauth.dcpNew UInt32 | — |
fUndo Boolean | — |
fRepeat Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30",
"version": "1",
"level": "4",
"task": "4",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Reason for Conflict": "0",
"fciUser": "0",
"fciCoauth": "0",
"User CA type": "0",
"camoUser.cp": "0",
"camoUser.dcpOld": "0",
"camoUser.dcpNew": "0",
"camoCoauth.cp": "0",
"camoCoauth.dcpOld": "0",
"camoCoauth.dcpNew": "0",
"fUndo": "false",
"fRepeat": "false"
},
"message": ""
}
Event ID 31 —
Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | — |
IdomoMacUsk UInt32 | — |
idomoUndoLim UInt32 | — |
idomoRedoLim UInt32 | — |
idomoFirst UInt32 | — |
cdomo UInt32 | — |
UAD.fci UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "31",
"version": "0",
"level": "2",
"task": "4",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"IdomoMacUsk": "0",
"idomoUndoLim": "0",
"idomoRedoLim": "0",
"idomoFirst": "0",
"cdomo": "0",
"UAD.fci": "0"
},
"message": ""
}
Event ID 100 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
fPrivateInvalRgn Boolean | — |
Sum of Pixel Count for Rects UInt32 | — |
Bounding Box Pixel Count UInt32 | — |
Rectangles UnicodeString | — |
Bounding Box UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "100",
"version": "1",
"level": "50",
"task": "6",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:51:50.468726700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"fPrivateInvalRgn": "true",
"Sum of Pixel Count for Rects": "0xAB3",
"Bounding Box Pixel Count": "0xAB3",
"Rectangles": "(661, 180)+[83 x 33]\n",
"Bounding Box": "(661, 180)+[83 x 33]\n"
},
"message": ""
}
Event ID 101 —
Fields #
| Name | Description |
|---|---|
pwwd Pointer | — |
ppr Pointer | — |
grfrpu UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "101",
"version": "1",
"level": "5",
"task": "6",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"ppr": "0x0",
"grfrpu": "0"
},
"message": ""
}
Event ID 102 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
LinkedInResumeClassification UInt32 | — |
JobTitleMatch Boolean | — |
JobCityMatch Boolean | — |
JobStateMatch Boolean | — |
JobZipCodeMatch Boolean | — |
AuthorMatch Boolean | — |
Event ID 103 —
Fields #
| Name | Description |
|---|---|
LinkedInUserEnabled Boolean | — |
Event ID 104 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "104",
"version": "0",
"level": "4",
"task": "8",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 105 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "105",
"version": "0",
"level": "4",
"task": "8",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 150 —
Fields #
| Name | Description |
|---|---|
FlyoutType UInt32 | — |
Event ID 151 —
Fields #
| Name | Description |
|---|---|
fAppend Boolean | — |
cpInsertFirst Int32 | — |
cpInsertLim Int32 | — |
Event ID 152 —
Fields #
| Name | Description |
|---|---|
cpInsertFirst Int32 | — |
cpInsertLim Int32 | — |
Event ID 153 —
Fields #
| Name | Description |
|---|---|
cpInsertFirst Int32 | — |
cpInsertLim Int32 | — |
Event ID 154 —
Fields #
| Name | Description |
|---|---|
fRegionContainsE2O Boolean | — |
Event ID 155 —
Event ID 156 —
Event ID 250 —
Fields #
| Name | Description |
|---|---|
xszText UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "250",
"version": "0",
"level": "4",
"task": "64",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszText": ""
},
"message": ""
}
Event ID 251 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "64",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 300 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "65",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 301 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "301",
"version": "0",
"level": "4",
"task": "65",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 302 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "65",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 303 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "65",
"opcode": "13",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 304 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "65",
"opcode": "14",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 305 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "65",
"opcode": "15",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 306 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "65",
"opcode": "16",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 307 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "307",
"version": "0",
"level": "4",
"task": "65",
"opcode": "17",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 308 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "65",
"opcode": "18",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 309 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "65",
"opcode": "19",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 310 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "65",
"opcode": "20",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 311 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "311",
"version": "0",
"level": "4",
"task": "65",
"opcode": "21",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 312 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "65",
"opcode": "22",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 313 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "313",
"version": "0",
"level": "4",
"task": "65",
"opcode": "23",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 351 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
EntryType UInt32 | — |
ViewType UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "66",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"EntryType": "0",
"ViewType": ""
},
"message": ""
}
Event ID 352 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
ExitType UInt32 | — |
BackgroundColor UInt32 | — |
BackgroundType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "67",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ExitType": "0",
"BackgroundColor": "0",
"BackgroundType": "0"
},
"message": ""
}
Event ID 361 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "361",
"version": "0",
"level": "5",
"task": "68",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 362 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "362",
"version": "0",
"level": "5",
"task": "68",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 363 —
Fields #
| Name | Description |
|---|---|
NotifyUserResult UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "363",
"version": "0",
"level": "4",
"task": "68",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NotifyUserResult": "0"
},
"message": ""
}
Event ID 364 —
Fields #
| Name | Description |
|---|---|
ShowNotificationResult UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "364",
"version": "0",
"level": "4",
"task": "68",
"opcode": "13",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ShowNotificationResult": "0"
},
"message": ""
}
Event ID 365 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "365",
"version": "0",
"level": "4",
"task": "68",
"opcode": "14",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 366 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "366",
"version": "0",
"level": "5",
"task": "68",
"opcode": "15",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 367 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "367",
"version": "0",
"level": "5",
"task": "68",
"opcode": "16",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 368 —
Fields #
| Name | Description |
|---|---|
dwIndex UInt32 | — |
name UnicodeString | — |
dwType UInt32 | — |
cb UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "368",
"version": "0",
"level": "5",
"task": "68",
"opcode": "17",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwIndex": "0",
"name": "",
"dwType": "0",
"cb": "0"
},
"message": ""
}
Event ID 369 —
Fields #
| Name | Description |
|---|---|
dwCValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "369",
"version": "0",
"level": "5",
"task": "68",
"opcode": "18",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwCValue": "0"
},
"message": ""
}
Event ID 370 —
Fields #
| Name | Description |
|---|---|
dwValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "370",
"version": "0",
"level": "5",
"task": "68",
"opcode": "19",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwValue": "0"
},
"message": ""
}
Event ID 371 —
Fields #
| Name | Description |
|---|---|
GateValue Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "371",
"version": "0",
"level": "5",
"task": "68",
"opcode": "20",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 372 —
Fields #
| Name | Description |
|---|---|
GateValue Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "372",
"version": "0",
"level": "5",
"task": "68",
"opcode": "21",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 373 —
Fields #
| Name | Description |
|---|---|
secBootLengthThreshold UInt32 | — |
pctBootPercentageThreshold UInt32 | — |
AddinScenario UInt32 | — |
time UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "373",
"version": "0",
"level": "4",
"task": "68",
"opcode": "22",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"secBootLengthThreshold": "0",
"pctBootPercentageThreshold": "0",
"AddinScenario": "0",
"time": "0"
},
"message": ""
}
Event ID 374 —
Fields #
| Name | Description |
|---|---|
name UnicodeString | — |
fDisplay Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "374",
"version": "0",
"level": "5",
"task": "68",
"opcode": "23",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"fDisplay": "false"
},
"message": ""
}
Event ID 375 —
Fields #
| Name | Description |
|---|---|
name UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "375",
"version": "0",
"level": "5",
"task": "68",
"opcode": "24",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": ""
},
"message": ""
}
Event ID 376 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "376",
"version": "0",
"level": "4",
"task": "68",
"opcode": "25",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 377 —
Fields #
| Name | Description |
|---|---|
name UnicodeString | — |
FIsCOMAddin Boolean | — |
FIsGroupPolicyDisabled Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "377",
"version": "1",
"level": "5",
"task": "68",
"opcode": "26",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"FIsCOMAddin": "false",
"FIsGroupPolicyDisabled": "false"
},
"message": ""
}
Event ID 378 —
Fields #
| Name | Description |
|---|---|
name UnicodeString | — |
SelectedAction UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "378",
"version": "0",
"level": "4",
"task": "68",
"opcode": "27",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"SelectedAction": ""
},
"message": ""
}
Event ID 379 —
Fields #
| Name | Description |
|---|---|
dwConnect UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "379",
"version": "0",
"level": "5",
"task": "68",
"opcode": "28",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwConnect": "0"
},
"message": ""
}
Event ID 380 —
Fields #
| Name | Description |
|---|---|
dwPolicy UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "380",
"version": "0",
"level": "5",
"task": "68",
"opcode": "29",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwPolicy": "0"
},
"message": ""
}
Event ID 381 —
Fields #
| Name | Description |
|---|---|
GateValue Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "381",
"version": "0",
"level": "5",
"task": "68",
"opcode": "30",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 441 —
Fields #
| Name | Description |
|---|---|
areaPoints Float | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "441",
"version": "0",
"level": "4",
"task": "70",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"areaPoints": "0.0"
},
"message": ""
}
Event ID 451 —
Fields #
| Name | Description |
|---|---|
pdod Pointer | — |
fRTF Boolean | — |
callType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "451",
"version": "0",
"level": "4",
"task": "71",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fRTF": "false",
"callType": "0"
},
"message": ""
}
Event ID 461 —
Fields #
| Name | Description |
|---|---|
changes UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "461",
"version": "0",
"level": "4",
"task": "72",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"changes": "0"
},
"message": ""
}
Event ID 462 —
Fields #
| Name | Description |
|---|---|
changes UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "462",
"version": "0",
"level": "4",
"task": "73",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"changes": "0"
},
"message": ""
}
Event ID 463 —
Fields #
| Name | Description |
|---|---|
mrtTag UInt32 | — |
source UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "463",
"version": "0",
"level": "4",
"task": "74",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mrtTag": "0",
"source": "0"
},
"message": ""
}
Event ID 464 —
Fields #
| Name | Description |
|---|---|
property UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "464",
"version": "0",
"level": "4",
"task": "75",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"property": "0"
},
"message": ""
}
Event ID 471 —
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "471",
"version": "0",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 472 —
Fields #
| Name | Description |
|---|---|
CountOfRecipients UInt64 | — |
LinkPermissionType UInt32 | — |
CountOfRecipientsOptimizedAway UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "472",
"version": "0",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CountOfRecipients": "0",
"LinkPermissionType": "0",
"CountOfRecipientsOptimizedAway": "0"
},
"message": ""
}
Event ID 481 —
Fields #
| Name | Description |
|---|---|
featureDwTag UInt32 | — |
ProfilerModules UnicodeString | — |
ProfilerSamples UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "481",
"version": "0",
"level": "5",
"task": "9",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"featureDwTag": "0",
"ProfilerModules": "",
"ProfilerSamples": ""
},
"message": ""
}
Event ID 2000 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Event ID 2029 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
Pdod Pointer | — |
VoidPtr Pointer | — |
ETW_TrackbackTag UInt32 | — |
Event ID 2032 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Event ID 2061 —
Fields #
| Name | Description |
|---|---|
Message UnicodeString | — |
InfoString UnicodeString | — |
ErrIdOptional Int32 | — |
HROptional Int32 | — |
InfoOptDeci UInt64 | — |
InfoOptHex UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Event ID 2064 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Event ID 2093 —
Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | — |
InfoOptional2 UInt64 | — |
InfoOptional3 UInt64 | — |
InfoOptional4 UInt64 | — |
ETW_TrackbackTag UInt32 | — |
Event ID 30579 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30579",
"version": "1",
"level": "1",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30580 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30580",
"version": "1",
"level": "2",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30581 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30581",
"version": "1",
"level": "3",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30582 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30582",
"version": "1",
"level": "4",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30583 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30583",
"version": "1",
"level": "5",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30584 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30584",
"version": "1",
"level": "16",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30585 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30585",
"version": "1",
"level": "50",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30586 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30586",
"version": "1",
"level": "100",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30587 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30587",
"version": "1",
"level": "200",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30588 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30588",
"version": "1",
"level": "1",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30589 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30589",
"version": "1",
"level": "2",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30590 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30590",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30591 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30591",
"version": "1",
"level": "4",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30592 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30592",
"version": "1",
"level": "5",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30593 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30593",
"version": "1",
"level": "16",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30594 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30594",
"version": "1",
"level": "50",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30595 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30595",
"version": "1",
"level": "100",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30596 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30596",
"version": "1",
"level": "200",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30597 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30597",
"version": "1",
"level": "1",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30598 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30598",
"version": "1",
"level": "2",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30599 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30599",
"version": "1",
"level": "3",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30600 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30600",
"version": "1",
"level": "4",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30601 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30601",
"version": "1",
"level": "5",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30602 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30602",
"version": "1",
"level": "16",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30603 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30603",
"version": "1",
"level": "50",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30604 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30604",
"version": "1",
"level": "100",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30605 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30605",
"version": "1",
"level": "200",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30606 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30606",
"version": "1",
"level": "1",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30607 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30607",
"version": "1",
"level": "2",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30608 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30608",
"version": "1",
"level": "3",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30609 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30609",
"version": "1",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30610 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30610",
"version": "1",
"level": "5",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30611 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30611",
"version": "1",
"level": "16",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30612 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30612",
"version": "1",
"level": "50",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30613 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30613",
"version": "1",
"level": "100",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30614 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30614",
"version": "1",
"level": "200",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30615 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30615",
"version": "1",
"level": "1",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30616 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30616",
"version": "1",
"level": "2",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30617 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30617",
"version": "1",
"level": "3",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30618 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30618",
"version": "1",
"level": "4",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30619 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30619",
"version": "1",
"level": "5",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30620 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30620",
"version": "1",
"level": "16",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30621 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30621",
"version": "1",
"level": "50",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30622 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30622",
"version": "1",
"level": "100",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30623 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30623",
"version": "1",
"level": "200",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30624 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30624",
"version": "1",
"level": "1",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30625 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30625",
"version": "1",
"level": "2",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30626 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30626",
"version": "1",
"level": "3",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30627 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30627",
"version": "1",
"level": "4",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30628 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30628",
"version": "1",
"level": "5",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30629 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30629",
"version": "1",
"level": "16",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30630 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30630",
"version": "1",
"level": "50",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30631 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30631",
"version": "1",
"level": "100",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30632 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30632",
"version": "1",
"level": "200",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30633 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30633",
"version": "1",
"level": "1",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30634 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30634",
"version": "1",
"level": "2",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30635 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30635",
"version": "1",
"level": "3",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30636 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30636",
"version": "1",
"level": "4",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30637 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30637",
"version": "1",
"level": "5",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30638 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30638",
"version": "1",
"level": "16",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30639 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30639",
"version": "1",
"level": "50",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30640 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30640",
"version": "1",
"level": "100",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30641 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30641",
"version": "1",
"level": "200",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30642 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30642",
"version": "1",
"level": "1",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30643 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30643",
"version": "1",
"level": "2",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30644 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30644",
"version": "1",
"level": "3",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30645 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30645",
"version": "1",
"level": "4",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30646 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30646",
"version": "1",
"level": "5",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30647 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30647",
"version": "1",
"level": "16",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30648 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30648",
"version": "1",
"level": "50",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30649 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30649",
"version": "1",
"level": "100",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30650 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30650",
"version": "1",
"level": "200",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30651 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30651",
"version": "1",
"level": "1",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30652 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30652",
"version": "1",
"level": "2",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30653 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30653",
"version": "1",
"level": "3",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30654 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30654",
"version": "1",
"level": "4",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30655 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30655",
"version": "1",
"level": "5",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30656 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30656",
"version": "1",
"level": "16",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30657 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30657",
"version": "1",
"level": "50",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30658 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30658",
"version": "1",
"level": "100",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30659 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30659",
"version": "1",
"level": "200",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30660 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30660",
"version": "1",
"level": "1",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30661 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30661",
"version": "1",
"level": "2",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30662 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30662",
"version": "1",
"level": "3",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30663 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30663",
"version": "1",
"level": "4",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30664 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30664",
"version": "1",
"level": "5",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30665 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30665",
"version": "1",
"level": "16",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30666 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30666",
"version": "1",
"level": "50",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30667 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30667",
"version": "1",
"level": "100",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30668 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30668",
"version": "1",
"level": "200",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30669 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30669",
"version": "1",
"level": "1",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30670 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30670",
"version": "1",
"level": "2",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30671 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30671",
"version": "1",
"level": "3",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30672 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30672",
"version": "1",
"level": "4",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30673 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30673",
"version": "1",
"level": "5",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30674 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30674",
"version": "1",
"level": "16",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30675 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30675",
"version": "1",
"level": "50",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30676 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30676",
"version": "1",
"level": "100",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30677 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30677",
"version": "1",
"level": "200",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30678 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30678",
"version": "1",
"level": "1",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30679 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30679",
"version": "1",
"level": "2",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30680 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30680",
"version": "1",
"level": "3",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30681 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30681",
"version": "1",
"level": "4",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30682 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30682",
"version": "1",
"level": "5",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30683 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30683",
"version": "1",
"level": "16",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30684 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30684",
"version": "1",
"level": "50",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30685 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30685",
"version": "1",
"level": "100",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30686 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30686",
"version": "1",
"level": "200",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30687 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30687",
"version": "1",
"level": "1",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30688 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30688",
"version": "1",
"level": "2",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30689 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30689",
"version": "1",
"level": "3",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30690 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30690",
"version": "1",
"level": "4",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30691 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30691",
"version": "1",
"level": "5",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30692 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30692",
"version": "1",
"level": "16",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30693 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30693",
"version": "1",
"level": "50",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30694 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30694",
"version": "1",
"level": "100",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30695 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30695",
"version": "1",
"level": "200",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30696 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30696",
"version": "1",
"level": "1",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30697 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30697",
"version": "1",
"level": "2",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30698 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30698",
"version": "1",
"level": "3",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30699 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30699",
"version": "1",
"level": "4",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30700 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30700",
"version": "1",
"level": "5",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30701 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30701",
"version": "1",
"level": "16",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30702 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30702",
"version": "1",
"level": "50",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30703 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30703",
"version": "1",
"level": "100",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30704 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30704",
"version": "1",
"level": "200",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30705 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30705",
"version": "1",
"level": "1",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30706 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30706",
"version": "1",
"level": "2",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30707 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30707",
"version": "1",
"level": "3",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30708 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30708",
"version": "1",
"level": "4",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30709 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30709",
"version": "1",
"level": "5",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30710 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30710",
"version": "1",
"level": "16",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30711 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30711",
"version": "1",
"level": "50",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30712 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30712",
"version": "1",
"level": "100",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30713 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30713",
"version": "1",
"level": "200",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30714 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30714",
"version": "1",
"level": "1",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30715 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30715",
"version": "1",
"level": "2",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30716 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30716",
"version": "1",
"level": "3",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30717 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30717",
"version": "1",
"level": "4",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30718 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30718",
"version": "1",
"level": "5",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30719 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30719",
"version": "1",
"level": "16",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30720 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30720",
"version": "1",
"level": "50",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30721 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30721",
"version": "1",
"level": "100",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30722 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30722",
"version": "1",
"level": "200",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30723 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30723",
"version": "1",
"level": "1",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30724 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30724",
"version": "1",
"level": "2",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30725 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30725",
"version": "1",
"level": "3",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30726 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30726",
"version": "1",
"level": "4",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30727 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30727",
"version": "1",
"level": "5",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30728 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30728",
"version": "1",
"level": "16",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30729 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30729",
"version": "1",
"level": "50",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30730 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30730",
"version": "1",
"level": "100",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30731 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30731",
"version": "1",
"level": "200",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30732 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30732",
"version": "1",
"level": "1",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30733 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30733",
"version": "1",
"level": "2",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30734 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30734",
"version": "1",
"level": "3",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30735 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30735",
"version": "1",
"level": "4",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30736 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30736",
"version": "1",
"level": "5",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30737 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30737",
"version": "1",
"level": "16",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30738 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30738",
"version": "1",
"level": "50",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30739 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30739",
"version": "1",
"level": "100",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30740 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30740",
"version": "1",
"level": "200",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30741 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30741",
"version": "1",
"level": "1",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30742 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30742",
"version": "1",
"level": "2",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30743 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30743",
"version": "1",
"level": "3",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30744 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30744",
"version": "1",
"level": "4",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30745 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30745",
"version": "1",
"level": "5",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30746 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30746",
"version": "1",
"level": "16",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30747 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30747",
"version": "1",
"level": "50",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30748 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30748",
"version": "1",
"level": "100",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30749 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30749",
"version": "1",
"level": "200",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30750 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30750",
"version": "1",
"level": "1",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30751 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30751",
"version": "1",
"level": "2",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30752 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30752",
"version": "1",
"level": "3",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30753 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30753",
"version": "1",
"level": "4",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30754 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30754",
"version": "1",
"level": "5",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30755 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30755",
"version": "1",
"level": "16",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30756 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30756",
"version": "1",
"level": "50",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30757 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30757",
"version": "1",
"level": "100",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30758 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30758",
"version": "1",
"level": "200",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30759 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30759",
"version": "1",
"level": "1",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30760 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30760",
"version": "1",
"level": "2",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30761 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30761",
"version": "1",
"level": "3",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30762 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30762",
"version": "1",
"level": "4",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30763 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30763",
"version": "1",
"level": "5",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30764 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30764",
"version": "1",
"level": "16",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30765 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30765",
"version": "1",
"level": "50",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30766 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30766",
"version": "1",
"level": "100",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30767 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30767",
"version": "1",
"level": "200",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30768 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30768",
"version": "1",
"level": "1",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30769 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30769",
"version": "1",
"level": "2",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30770 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30770",
"version": "1",
"level": "3",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30771 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30771",
"version": "1",
"level": "4",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30772 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30772",
"version": "1",
"level": "5",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30773 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30773",
"version": "1",
"level": "16",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30774 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30774",
"version": "1",
"level": "50",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30775 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30775",
"version": "1",
"level": "100",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30776 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30776",
"version": "1",
"level": "200",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30777 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30777",
"version": "1",
"level": "1",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30778 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30778",
"version": "1",
"level": "2",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30779 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30779",
"version": "1",
"level": "3",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30780 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30780",
"version": "1",
"level": "4",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30781 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30781",
"version": "1",
"level": "5",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30782 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30782",
"version": "1",
"level": "16",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30783 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30783",
"version": "1",
"level": "50",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30784 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30784",
"version": "1",
"level": "100",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30785 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30785",
"version": "1",
"level": "200",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30786 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30786",
"version": "1",
"level": "1",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30787 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30787",
"version": "1",
"level": "2",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30788 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30788",
"version": "1",
"level": "3",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30789 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30789",
"version": "1",
"level": "4",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30790 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30790",
"version": "1",
"level": "5",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30791 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30791",
"version": "1",
"level": "16",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30792 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30792",
"version": "1",
"level": "50",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30793 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30793",
"version": "1",
"level": "100",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30794 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30794",
"version": "1",
"level": "200",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30795 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30795",
"version": "1",
"level": "1",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30796 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30796",
"version": "1",
"level": "2",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30797 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30797",
"version": "1",
"level": "3",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30798 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30798",
"version": "1",
"level": "4",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30799 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30799",
"version": "1",
"level": "5",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30800 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30800",
"version": "1",
"level": "16",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30801 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30801",
"version": "1",
"level": "50",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30802 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30802",
"version": "1",
"level": "100",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30803 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30803",
"version": "1",
"level": "200",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30804 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30804",
"version": "1",
"level": "1",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30805 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30805",
"version": "1",
"level": "2",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30806 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30806",
"version": "1",
"level": "3",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30807 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30807",
"version": "1",
"level": "4",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30808 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30808",
"version": "1",
"level": "5",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30809 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30809",
"version": "1",
"level": "16",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30810 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30810",
"version": "1",
"level": "50",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30811 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30811",
"version": "1",
"level": "100",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30812 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30812",
"version": "1",
"level": "200",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30813 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30813",
"version": "1",
"level": "1",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30814 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30814",
"version": "1",
"level": "2",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30815 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30815",
"version": "1",
"level": "3",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30816 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30816",
"version": "1",
"level": "4",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30817 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30817",
"version": "1",
"level": "5",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30818 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30818",
"version": "1",
"level": "16",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30819 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30819",
"version": "1",
"level": "50",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30820 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30820",
"version": "1",
"level": "100",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30821 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30821",
"version": "1",
"level": "200",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30822 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30822",
"version": "1",
"level": "1",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30823 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30823",
"version": "1",
"level": "2",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30824 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30824",
"version": "1",
"level": "3",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30825 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30825",
"version": "1",
"level": "4",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30826 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30826",
"version": "1",
"level": "5",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30827 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30827",
"version": "1",
"level": "16",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30828 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30828",
"version": "1",
"level": "50",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30829 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30829",
"version": "1",
"level": "100",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30830 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30830",
"version": "1",
"level": "200",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30831 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30832 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30833 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30834 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30835 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30836 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30837 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30838 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30839 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30840 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30841 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30842 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30843 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30844 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30845 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30846 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30847 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |
Event ID 30848 —
Fields #
| Name | Description |
|---|---|
tag UnicodeString | — |
xsz UnicodeString | — |