Microsoft-Windows-Dwm-Dwm

15 events across 1 channel

Event IDTitleChannel
1Diagnostic
2Diagnostic
3Diagnostic
4Diagnostic
5Diagnostic
6Diagnostic
7Diagnostic
8Diagnostic
9Diagnostic
10Diagnostic
11Diagnostic
12Diagnostic
13Diagnostic
14Diagnostic
15Diagnostic

Event ID 1 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
CompositionStateAndInput

Fields #

NameDescription
State UInt32
Input UInt32

Event ID 2 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
CompositionStateOutput

Fields #

NameDescription
State UInt32

Event ID 3 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
TraceGraphicsCapabilities

Fields #

NameDescription
Capability UInt32
Verified UInt32

Event ID 4 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
CompositionOverriden

Fields #

NameDescription
Flag UInt32

Event ID 5 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
CompositionEnabledByPolicy

Fields #

NameDescription
Flag UInt32

Event ID 6 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
RemotingCaps

Fields #

NameDescription
IsCapable UInt32
AllowDwmcoreInSession UInt32
RemoteAppEnabled UInt32
AllowDwmcoreInClient UInt32
AllowThemesInCLient UInt32

Event ID 7 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
SystemMemoryLockingThreshold

Event ID 8 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
SlowCompositionTime

Event ID 9 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
StartDWMTransport

Fields #

NameDescription
MilRemote UInt32

Event ID 10 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
StopDWMTransport

Event ID 11 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
AddGhost

Fields #

NameDescription
CGhostOrHwndToGhost Pointer

Event ID 12 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
DuplicateGhost

Fields #

NameDescription
CGhostOrHwndToGhost Pointer

Event ID 13 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
VetoCreateGhostWindow

Fields #

NameDescription
CGhostOrHwndToGhost Pointer

Event ID 14 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
PolicyOrModeChange

Fields #

NameDescription
StateBegin UInt32
StateEnd UInt32

Event ID 15 —

Provider
Microsoft-Windows-Dwm-Dwm
Channel
Diagnostic
Task
EstablishKernelRedirection