Microsoft-Windows-DAL-Provider

28 events across 2 channels

Event ID	Title	Channel
1	The Unencrypted request data for IPMI request NetFn.	Analytic
2	The Decrypted response data for IPMI request NetFn.	Analytic
3	Starts enumeration of PCSVDevice	Analytic
4	Stops enumeration of PCSVDevice	Analytic
5	Starts getting instance of PCSVDevice	Analytic
6	Stops getting instance of PCSVDevice	Analytic
7	Start RequestStateChange	Analytic
8	Stops RequestStateChange	Analytic
9	Starts SetOneTimeBootSource	Analytic
10	Stops SetOneTimeBootSource	Analytic
11	Result of PCSVDevice operation	Operational
15	Information on IPMI Sent Data	Analytic
16	Information on IPMI Received Data	Analytic
17	Get operations options	Operational
18	Starts ModifyPersistentBootConfigOrder	Analytic
19	Stops ModifyPersistentBootConfigOrder	Analytic
20	Starts ChangeBootConfiguration	Analytic
21	Stops ChangeBootConfiguration	Analytic
22	Starts ChangeNetworkConfiguration	Analytic
23	Stops ChangeNetworkConfiguration	Analytic
24	Starts ChangeUserPassword	Analytic
25	Stops ChangeUserPassword	Analytic
26	Starts getting PCSV device log	Analytic
27	Stops getting PCSV device log	Analytic
28	Starts clearing PCSV device log	Analytic
29	Stops clearing PCSV device log	Analytic
30	The request data for in-band IPMI request NetFn.	Analytic
31	The response data for in-band IPMI request NetFn.	Analytic

Event ID 1 — The Unencrypted request data for IPMI request NetFn.

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

The Unencrypted request data for IPMI request NetFn.

Message #

The Unencrypted request data for IPMI request %1

Fields #

Name	Description
`NetFn` UInt8	—
`CommandID` UInt8	—
`PacketSize` UInt32	—
`PacketData` Binary	—
`SessionId` UInt32	—
`SequenceNumber` UInt32	—

Event ID 2 — The Decrypted response data for IPMI request NetFn.

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

The Decrypted response data for IPMI request NetFn.

Message #

The Decrypted response data for IPMI request %1

Fields #

Name	Description
`NetFn` UInt8	—
`CommandID` UInt8	—
`PacketSize` UInt32	—
`PacketData` Binary	—
`SessionId` UInt32	—
`SequenceNumber` UInt32	—

Event ID 3 — Starts enumeration of PCSVDevice

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts enumeration of PCSVDevice.

Message #

Starts enumeration of PCSVDevice

Event ID 4 — Stops enumeration of PCSVDevice

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops enumeration of PCSVDevice.

Message #

Stops enumeration of PCSVDevice

Event ID 5 — Starts getting instance of PCSVDevice

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts getting instance of PCSVDevice.

Message #

Starts getting instance of PCSVDevice

Event ID 6 — Stops getting instance of PCSVDevice

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops getting instance of PCSVDevice.

Message #

Stops getting instance of PCSVDevice

Event ID 7 — Start RequestStateChange

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Start RequestStateChange.

Message #

Start RequestStateChange

Event ID 8 — Stops RequestStateChange

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops RequestStateChange.

Message #

Stops RequestStateChange

Event ID 9 — Starts SetOneTimeBootSource

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts SetOneTimeBootSource.

Message #

Starts SetOneTimeBootSource

Event ID 10 — Stops SetOneTimeBootSource

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops SetOneTimeBootSource.

Message #

Stops SetOneTimeBootSource

Event ID 11 — Result of PCSVDevice operation

Provider: Microsoft-Windows-DAL-Provider
Channel: Operational

Description

Result of PCSVDevice operation.

Message #

Result of PCSVDevice operation

Fields #

Name Description

MI_Result Int32 —

Name	Description
`MI_Result` Int32	—
`Operation` UnicodeString	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.

Operation UnicodeString

—

Known values

%%2456: Open key file.
%%2457: Delete key file.
%%2458: Read persisted key from file.
%%2459: Write persisted key to file.
%%2464: Export of persistent cryptographic key.
%%2465: Import of persistent cryptographic key.
%%2480: Open Key.
%%2481: Create Key.
%%2482: Delete Key.
%%2483: Encrypt.
%%2484: Decrypt.
%%2485: Sign hash.
%%2486: Secret agreement.
%%2487: Domain settings.
%%2488: Local settings.
%%2489: Add provider.
%%2490: Remove provider.
%%2491: Add context.
%%2492: Remove context.
%%2493: Add function.
%%2494: Remove function.
%%2495: Add function provider.
%%2496: Remove function provider.
%%2497: Add function property.
%%2498: Remove function property.
%%2499: Machine key.
%%2500: User key.
%%2501: Key Derivation.
%%2502: Claim Creation.
%%2503: Claim Verification.

Event ID 15 — Information on IPMI Sent Data

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Information on IPMI Sent Data.

Message #

Information on IPMI Sent Data

Fields #

Name	Description
`id` UInt8	—

Event ID 16 — Information on IPMI Received Data

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Information on IPMI Received Data.

Message #

Information on IPMI Received Data

Fields #

Name	Description
`id` UInt8	—

Event ID 17 — Get operations options

Provider: Microsoft-Windows-DAL-Provider
Channel: Operational

Description

Get operations options.

Message #

Get operations options

Fields #

Name	Description
`target` UnicodeString	—
`protocol` UInt16	—
`port` UInt16	—
`authentication` UInt16	—
`usessl` Boolean	—
`skipcacheck` Boolean	—
`skipcncheck` Boolean	—
`skiprevocationcheck` Boolean	—
`timeoutsec` UInt32	—

Event ID 18 — Starts ModifyPersistentBootConfigOrder

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts ModifyPersistentBootConfigOrder.

Message #

Starts ModifyPersistentBootConfigOrder

Event ID 19 — Stops ModifyPersistentBootConfigOrder

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops ModifyPersistentBootConfigOrder.

Message #

Stops ModifyPersistentBootConfigOrder

Event ID 20 — Starts ChangeBootConfiguration

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts ChangeBootConfiguration.

Message #

Starts ChangeBootConfiguration

Event ID 21 — Stops ChangeBootConfiguration

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops ChangeBootConfiguration.

Message #

Stops ChangeBootConfiguration

Event ID 22 — Starts ChangeNetworkConfiguration

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts ChangeNetworkConfiguration.

Message #

Starts ChangeNetworkConfiguration

Event ID 23 — Stops ChangeNetworkConfiguration

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops ChangeNetworkConfiguration.

Message #

Stops ChangeNetworkConfiguration

Event ID 24 — Starts ChangeUserPassword

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts ChangeUserPassword.

Message #

Starts ChangeUserPassword

Event ID 25 — Stops ChangeUserPassword

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops ChangeUserPassword.

Message #

Stops ChangeUserPassword

Event ID 26 — Starts getting PCSV device log

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts getting PCSV device log.

Message #

Starts getting PCSV device log

Event ID 27 — Stops getting PCSV device log

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops getting PCSV device log.

Message #

Stops getting PCSV device log

Event ID 28 — Starts clearing PCSV device log

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Starts clearing PCSV device log.

Message #

Starts clearing PCSV device log

Event ID 29 — Stops clearing PCSV device log

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

Stops clearing PCSV device log.

Message #

Stops clearing PCSV device log

Event ID 30 — The request data for in-band IPMI request NetFn.

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

The request data for in-band IPMI request NetFn.

Message #

The request data for in-band IPMI request %1

Fields #

Name	Description
`NetFn` UInt8	—
`CommandID` UInt8	—
`PacketSize` UInt32	—
`PacketData` Binary	—
`SessionId` UInt32	—
`SequenceNumber` UInt32	—

Event ID 31 — The response data for in-band IPMI request NetFn.

Provider: Microsoft-Windows-DAL-Provider
Channel: Analytic

Description

The response data for in-band IPMI request NetFn.

Message #

The response data for in-band IPMI request %1

Fields #

Name	Description
`NetFn` UInt8	—
`CommandID` UInt8	—
`PacketSize` UInt32	—
`PacketData` Binary	—
`SessionId` UInt32	—
`SequenceNumber` UInt32	—