Microsoft-Windows-DesktopActivityModerator
21 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 1 | Diagnostic | |
| 4 | Diagnostic | |
| 9 | Diagnostic | |
| 11 | Diagnostic | |
| 19 | Diagnostic | |
| 21 | Diagnostic | |
| 22 | Diagnostic | |
| 23 | Diagnostic | |
| 24 | Diagnostic | |
| 25 | Diagnostic | |
| 26 | Diagnostic | |
| 31 | Diagnostic | |
| 32 | Diagnostic | |
| 41 | Diagnostic | |
| 42 | Diagnostic | |
| 51 | Diagnostic | |
| 52 | Diagnostic | |
| 53 | Diagnostic | |
| 54 | Diagnostic | |
| 60 | Diagnostic | |
| 61 | Diagnostic |
Event ID 1 —
Event ID 4 —
Event ID 9 —
Fields
| Name | Description |
|---|---|
NTSTATUS | — |
Event ID 11 —
Event ID 19 —
Event ID 21 —
Fields
| Name | Description |
|---|---|
SuspendFlag | — |
Event ID 22 —
Fields
| Name | Description |
|---|---|
SuspendFlag | — |
Event ID 23 —
Fields
| Name | Description |
|---|---|
SuspendFlag | — |
Event ID 24 —
Fields
| Name | Description |
|---|---|
SuspendFlag | — |
Event ID 25 —
Fields
| Name | Description |
|---|---|
ActiveFlag | — |
Event ID 26 —
Fields
| Name | Description |
|---|---|
ActiveFlag | — |
Event ID 31 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
SessionId | — |
ImageFileNameLength | — |
ImageFileName | — |
CommandLineLength | — |
CommandLine | — |
Event ID 32 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
SessionId | — |
Event ID 41 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
SessionId | — |
ExemptGroup | — |
RegisterAtLaunch | — |
Event ID 42 —
Fields
| Name | Description |
|---|---|
PolicyRecords | — |
Event ID 51 —
Fields
| Name | Description |
|---|---|
State | — |
NTSTATUS | — |
WorkItemQueued | — |
Event ID 52 —
Fields
| Name | Description |
|---|---|
ClientState | — |
Event ID 53 —
Fields
| Name | Description |
|---|---|
Flags | — |
Event ID 54 —
Event ID 60 —
Fields
| Name | Description |
|---|---|
DeviceBucket | — |
ElapsedTimeMs | — |
FastIoCount | — |
SlowIoCount | — |
Event ID 61 —
Fields
| Name | Description |
|---|---|
DeviceType | — |
DeviceBucket | — |
ElapsedTime | — |
SlowIo | — |