Microsoft-Windows-DesktopActivityModerator

21 events across 1 channel

Event IDTitleChannel
1Diagnostic
4Diagnostic
9Diagnostic
11Diagnostic
19Diagnostic
21Diagnostic
22Diagnostic
23Diagnostic
24Diagnostic
25Diagnostic
26Diagnostic
31Diagnostic
32Diagnostic
41Diagnostic
42Diagnostic
51Diagnostic
52Diagnostic
53Diagnostic
54Diagnostic
60Diagnostic
61Diagnostic

Event ID 1 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Event ID 4 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Event ID 9 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
NTSTATUS

Event ID 11 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Event ID 19 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Event ID 21 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
SuspendFlag

Event ID 22 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
SuspendFlag

Event ID 23 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
SuspendFlag

Event ID 24 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
SuspendFlag

Event ID 25 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ActiveFlag

Event ID 26 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ActiveFlag

Event ID 31 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ProcessId
SessionId
ImageFileNameLength
ImageFileName
CommandLineLength
CommandLine

Event ID 32 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ProcessId
SessionId

Event ID 41 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ProcessId
SessionId
ExemptGroup
RegisterAtLaunch

Event ID 42 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
PolicyRecords

Event ID 51 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
State
NTSTATUS
WorkItemQueued

Event ID 52 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
ClientState

Event ID 53 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
Flags

Event ID 54 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Event ID 60 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
DeviceBucket
ElapsedTimeMs
FastIoCount
SlowIoCount

Event ID 61 —

Provider
Microsoft-Windows-DesktopActivityModerator
Channel
Diagnostic

Fields

NameDescription
DeviceType
DeviceBucket
ElapsedTime
SlowIo