detection.wiki

Microsoft-Windows-Diagnosis-WDI

3 events across 2 channels

Event IDTitleChannel
140The Diagnostic Policy Service encountered an error in file FileName, function …Debug
5016The Diagnostic Infrastructure just made a heap allocationOperational
5017The Diagnostic Infrastructure just freed a previously made heap allocationOperational

Event ID 140 — The Diagnostic Policy Service encountered an error in file FileName, function FunctionName, line LineNumber: ErrorMessage.

Provider
Microsoft-Windows-Diagnosis-WDI
Channel
Debug
Task
Debugtask
Opcode
Debugevent

Description

The Diagnostic Policy Service encountered an error in file FileName, function FunctionName, line LineNumber: ErrorMessage.

Message #

The Diagnostic Policy Service encountered an error in file %1, function %2, line %3: %4.

Fields #

NameDescription
FileName UnicodeString—
FunctionName UnicodeString—
LineNumber Int32—
ErrorMessage UnicodeString—

Event ID 5016 — The Diagnostic Infrastructure just made a heap allocation

Provider
Microsoft-Windows-Diagnosis-WDI
Channel
Operational

Description

The Diagnostic Infrastructure just made a heap allocation.

Message #

The Diagnostic Infrastructure just made a heap allocation

Fields #

NameDescription
FileName AnsiString—
Line UInt32—
Address Pointer—
Size Pointer—

Event ID 5017 — The Diagnostic Infrastructure just freed a previously made heap allocation

Provider
Microsoft-Windows-Diagnosis-WDI
Channel
Operational

Description

The Diagnostic Infrastructure just freed a previously made heap allocation.

Message #

The Diagnostic Infrastructure just freed a previously made heap allocation

Fields #

NameDescription
FileName AnsiString—
Line UInt32—
Address Pointer—