Microsoft-Windows-EnhancedStorage-EhStorTcgDrv

52 events across 2 channels

Event ID	Title	Channel
1	An operation has failed (hr, ErrorParam1, ErrorParam2, ErrorParam3).	System
2	An operation has failed (Win32Err, ErrorParam1, ErrorParam2, ErrorParam3).	System
3	An operation has failed (ErrorParam1, ErrorParam2, ErrorParam3, ErrorParam4).	System
4	Failed to allocate object.	System
5	Unexpected size.	System
6	Invalid data.	System
7	Device responded with an error status.	System
8	Bad device.	System
9	The function is not supported.	System
10	A TCG Command has returned an error.	System
11	A TCG Silo Command has returned an error.	System
12	A TCG Silo has returned the capabilities value of Capabilities.	System
13	The system has performed an authentication operation on an Enhanced Storage …	System
14	A TCG error has occurred.	System
100	The following informational event has occurred (Param1, Param2, Param3, Param4).	System
101	The following warning event has occurred (Param1, Param2, Param3, Param4).	System
102	The following error event has occurred (Param1, Param2, Param3, Param4).	System
103	An operation was performed on band id BandID of device DeviceLocation.	System
200	Get silo capabilities (SiloCmd=Param1).	Analytic
201	Get silo capabilities returned (SiloCmd=Param1, Status=Param2).	Analytic
202	Execute silo command (SiloCmd=SiloCmd).	Analytic
203	Excute silo command returned (SiloCmd=SiloCmd, Status=TcgCmd).	Analytic
204	Silo reset (SiloCmd=Param1).	Analytic
205	Silo reset returned (SiloCmd=Param1, Status=Param2).	Analytic
206	Ioctl: QueryCapabilities	Analytic
207	Ioctl: QueryCapabilities returned (Status=Param1).	Analytic
208	Ioctl: Activate	Analytic
209	Ioctl: Activate returned (Status=Param1).	Analytic
210	Ioctl: Revert	Analytic
211	Ioctl: Revert returned (Status=Param1).	Analytic
212	Ioctl: EnumBands	Analytic
213	Ioctl: EnumBands returned (Status=Param1).	Analytic
214	Ioctl: CreateBand	Analytic
215	Ioctl: CreateBand returned (Status=Param1).	Analytic
216	Ioctl: SetBandLocation	Analytic
217	Ioctl: SetBandLocation returned (Status=Param1).	Analytic
218	Ioctl: SetBandSecurity	Analytic
219	Ioctl: SetBandSecurity returned (Status=Param1).	Analytic
220	Ioctl: DeleteBand	Analytic
221	Ioctl: DeleteBand returned (Status=Param1).	Analytic
222	Ioctl: EraseBand	Analytic
223	Ioctl: EraseBand returned (Status=Param1).	Analytic
224	Ioctl: GetBandMetadata	Analytic
225	Ioctl: GetBandMetadata returned (Status=Param1).	Analytic
226	Ioctl: SetBandMetadata	Analytic
227	Ioctl: SetBandMetadata returned (Status=Param1).	Analytic
228	Ioctl: RelinquishSilo	Analytic
229	Ioctl: RelinquishSilo returned (Status=Param1).	Analytic
230	Ioctl: SetSid	Analytic
231	Ioctl: SetSid returned (Status=Param1).	Analytic
232	Ioctl: EraseAllBands	Analytic
233	Ioctl: EraseAllBands returned (Status=Param1).	Analytic

Event ID 1 — An operation has failed (hr, ErrorParam1, ErrorParam2, ErrorParam3).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

An operation has failed (hr, ErrorParam1, ErrorParam2, ErrorParam3).

Message #

An operation has failed (%3, %4, %5, %6).
%1
HResult: %2

Fields #

Name	Description
`HResult`	—
`Context` AnsiString	—
`hr` Int32	—
`ErrorParam1` HexInt32	—
`ErrorParam2` HexInt32	—
`ErrorParam3` HexInt32	—
`ErrorParam4` HexInt32	—

Event ID 2 — An operation has failed (Win32Err, ErrorParam1, ErrorParam2, ErrorParam3).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

An operation has failed (Win32Err, ErrorParam1, ErrorParam2, ErrorParam3).

Message #

An operation has failed (%3, %4, %5, %6).
%1
Win32Error: %2

Fields #

Name	Description
`Win32Error`	—
`Context` AnsiString	—
`Win32Err` UInt32	—
`ErrorParam1` HexInt32	—
`ErrorParam2` HexInt32	—
`ErrorParam3` HexInt32	—
`ErrorParam4` HexInt32	—

Event ID 3 — An operation has failed (ErrorParam1, ErrorParam2, ErrorParam3, ErrorParam4).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

An operation has failed (ErrorParam1, ErrorParam2, ErrorParam3, ErrorParam4).

Message #

An operation has failed (%3, %4, %5, %6).
%1
NTStatus: %2

Fields #

Name	Description
`NTStatus` HexInt32	—
`Context` AnsiString	—
`ErrorParam1` HexInt32	—
`ErrorParam2` HexInt32	—
`ErrorParam3` HexInt32	—
`ErrorParam4` HexInt32	—

Event ID 4 — Failed to allocate object.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

Failed to allocate object.

Message #

Failed to allocate object.
Object: %1
Size: %2

Fields #

Name	Description
`Object` AnsiString	—
`Size` UInt32	—
`ObjectName` AnsiString	—
`ObjectSize` UInt32	—

Event ID 5 — Unexpected size.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

Unexpected size.

Message #

Unexpected size.
Object: %1
Expected Size: %2
Actual Size: %3

Fields #

Name	Description
`Object` AnsiString	—
`Expected_Size` UInt32	—
`Actual_Size` UInt32	—
`Context` AnsiString	—
`ExpectedSize` UInt32	—
`ActualSize` UInt32	—

Event ID 6 — Invalid data.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

Invalid data.

Message #

Invalid data.
Name: %1
Value: %2

Fields #

Name	Description
`Name` AnsiString	—
`Value` HexInt32	—

Event ID 7 — Device responded with an error status.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

Device responded with an error status.

Message #

Device responded with an error status.
Status: %1

Fields #

Name	Description
`Status`	— NTSTATUS reference
`Name` AnsiString	—
`Value` HexInt32	—

Event ID 8 — Bad device.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

Bad device.

Message #

Bad device.
Device: %1
Reason: %2

Fields #

Name	Description
`Device` AnsiString	—
`Reason` AnsiString	—
`Name` AnsiString	—
`String` AnsiString	—

Event ID 9 — The function is not supported.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

The function is not supported.

Message #

The function is not supported.
Function: %1
Context: %2

Fields #

Name	Description
`Function` AnsiString	—
`Context` AnsiString	—
`Name` AnsiString	—
`String` AnsiString	—

Event ID 10 — A TCG Command has returned an error.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: TcgLib

Description

A TCG Command has returned an error.

Message #

A TCG Command has returned an error.
Desc: %1
Param1: %2
Param2: %3
Param3: %4
Param4: %5
Status: %6

Fields #

Name	Description
`Desc` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—
`Status` HexInt32	— NTSTATUS reference
`Description` AnsiString	—
`CmdStatus` HexInt32	—

Event ID 11 — A TCG Silo Command has returned an error.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: TcgLib

Description

A TCG Silo Command has returned an error.

Message #

A TCG Silo Command has returned an error.
%1
SiloCommand=%2, SiloStatus=%3
InvokingID=%4, MethodID=%5

Fields #

Name	Description
`Description` AnsiString	—
`SiloCommand` HexInt32	—
`SiloStatus` HexInt32	—
`TCGInvokingID` HexInt64	—
`TCGMethodID` HexInt64	—

Event ID 12 — A TCG Silo has returned the capabilities value of Capabilities.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

A TCG Silo has returned the capabilities value of Capabilities.

Message #

A TCG Silo has returned the capabilities value of %1.

Fields #

Name	Description
`Capabilities` HexInt32	—
`KeyProtectionMechanism` HexInt64	—
`MaxBandCount` UInt32	—
`BandMetadataSize` UInt32	—

Event ID 13 — The system has performed an authentication operation on an Enhanced Storage device.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

The system has performed an authentication operation on an Enhanced Storage device.

Message #

The system has performed an authentication operation on an Enhanced Storage device.
BandID=%1
Authorize=%2
Status=%3

Fields #

Name	Description
`BandID` UInt32	—
`Authorize` UInt32	—
`Status` HexInt32	— NTSTATUS reference

Event ID 14 — A TCG error has occurred.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: TcgLib

Description

A TCG error has occurred.

Message #

A TCG error has occurred.
Desc: %1
Param1: %2
Param2: %3
Param3: %4
Param4: %5

Fields #

Name	Description
`Desc` AnsiString	—
`Param1` UInt64	—
`Param2` UInt64	—
`Param3` UInt64	—
`Param4` UInt64	—
`Description` AnsiString	—

Event ID 100 — The following informational event has occurred (Param1, Param2, Param3, Param4).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

The following informational event has occurred (Param1, Param2, Param3, Param4).

Message #

The following informational event has occurred (%2, %3, %4, %5).
%1

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt32	—
`Param2` HexInt32	—
`Param3` HexInt32	—
`Param4` HexInt32	—

Event ID 101 — The following warning event has occurred (Param1, Param2, Param3, Param4).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

The following warning event has occurred (Param1, Param2, Param3, Param4).

Message #

The following warning event has occurred (%2, %3, %4, %5).
%1

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt32	—
`Param2` HexInt32	—
`Param3` HexInt32	—
`Param4` HexInt32	—

Event ID 102 — The following error event has occurred (Param1, Param2, Param3, Param4).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

The following error event has occurred (Param1, Param2, Param3, Param4).

Message #

The following error event has occurred (%2, %3, %4, %5).
%1

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt32	—
`Param2` HexInt32	—
`Param3` HexInt32	—
`Param4` HexInt32	—

Event ID 103 — An operation was performed on band id BandID of device DeviceLocation.

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: System
Task: Driver
Opcode: General

Description

An operation was performed on band id BandID of device DeviceLocation.

Message #

An operation was performed on band id %2 of device %1.                    
Parameter1Name: %3                    
Parameter1Value: %4                    
Parameter2Name: %5                    
Parameter2Value: %6                    
Parameter3Name: %7                    
Parameter3Value: %8                    
Parameter4Name: %9                    
Parameter4Value: %10

Fields #

Name	Description
`DeviceLocation` UnicodeString	—
`BandID` UInt32	—
`Parameter1Name` UnicodeString	—
`Parameter1Value` UInt64	—
`Parameter2Name` UnicodeString	—
`Parameter2Value` UInt64	—
`Parameter3Name` UnicodeString	—
`Parameter3Value` UInt64	—
`Parameter4Name` UnicodeString	—
`Parameter4Value` UInt64	—

Event ID 200 — Get silo capabilities (SiloCmd=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: GetSiloCaps
Opcode: Start

Description

Get silo capabilities (SiloCmd=Param1).

Message #

Get silo capabilities (SiloCmd=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 201 — Get silo capabilities returned (SiloCmd=Param1, Status=Param2).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: GetSiloCaps
Opcode: Stop

Description

Get silo capabilities returned (SiloCmd=Param1, Status=Param2).

Message #

Get silo capabilities returned (SiloCmd=%2, Status=%3).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 202 — Execute silo command (SiloCmd=SiloCmd).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: ExecuteSiloCmd
Opcode: Start

Description

Execute silo command (SiloCmd=SiloCmd).

Message #

Execute silo command (SiloCmd=%2).

Fields #

Name	Description
`Context` AnsiString	—
`SiloCmd` HexInt64	—
`TcgCmd` AnsiString	—
`Status` HexInt64	— NTSTATUS reference
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 203 — Excute silo command returned (SiloCmd=SiloCmd, Status=TcgCmd).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: ExecuteSiloCmd
Opcode: Stop

Description

Excute silo command returned (SiloCmd=SiloCmd, Status=TcgCmd).

Message #

Excute silo command returned (SiloCmd=%2, Status=%3).
InvokingId = %4
MethodId = %5

Fields #

Name	Description
`Context` AnsiString	—
`SiloCmd` HexInt64	—
`TcgCmd` AnsiString	—
`Status` HexInt64	— NTSTATUS reference
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 204 — Silo reset (SiloCmd=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: Reset
Opcode: Start

Description

Silo reset (SiloCmd=Param1).

Message #

Silo reset (SiloCmd=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 205 — Silo reset returned (SiloCmd=Param1, Status=Param2).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: Reset
Opcode: Stop

Description

Silo reset returned (SiloCmd=Param1, Status=Param2).

Message #

Silo reset returned (SiloCmd=%2, Status=%3).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 206 — Ioctl: QueryCapabilities

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlQueryCapabilities
Opcode: Start

Description

Ioctl: QueryCapabilities.

Message #

Ioctl: QueryCapabilities

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 207 — Ioctl: QueryCapabilities returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlQueryCapabilities
Opcode: Stop

Description

Ioctl: QueryCapabilities returned (Status=Param1).

Message #

Ioctl: QueryCapabilities returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 208 — Ioctl: Activate

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlActivate
Opcode: Start

Description

Ioctl: Activate.

Message #

Ioctl: Activate

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 209 — Ioctl: Activate returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlActivate
Opcode: Stop

Description

Ioctl: Activate returned (Status=Param1).

Message #

Ioctl: Activate returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 210 — Ioctl: Revert

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlRevert
Opcode: Start

Description

Ioctl: Revert.

Message #

Ioctl: Revert

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 211 — Ioctl: Revert returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlRevert
Opcode: Stop

Description

Ioctl: Revert returned (Status=Param1).

Message #

Ioctl: Revert returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 212 — Ioctl: EnumBands

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEnumerateBands
Opcode: Start

Description

Ioctl: EnumBands.

Message #

Ioctl: EnumBands

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 213 — Ioctl: EnumBands returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEnumerateBands
Opcode: Stop

Description

Ioctl: EnumBands returned (Status=Param1).

Message #

Ioctl: EnumBands returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 214 — Ioctl: CreateBand

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlCreateBand
Opcode: Start

Description

Ioctl: CreateBand.

Message #

Ioctl: CreateBand

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 215 — Ioctl: CreateBand returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlCreateBand
Opcode: Stop

Description

Ioctl: CreateBand returned (Status=Param1).

Message #

Ioctl: CreateBand returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 216 — Ioctl: SetBandLocation

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandLocation
Opcode: Start

Description

Ioctl: SetBandLocation.

Message #

Ioctl: SetBandLocation

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 217 — Ioctl: SetBandLocation returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandLocation
Opcode: Stop

Description

Ioctl: SetBandLocation returned (Status=Param1).

Message #

Ioctl: SetBandLocation returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 218 — Ioctl: SetBandSecurity

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandSecurity
Opcode: Start

Description

Ioctl: SetBandSecurity.

Message #

Ioctl: SetBandSecurity

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 219 — Ioctl: SetBandSecurity returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandSecurity
Opcode: Stop

Description

Ioctl: SetBandSecurity returned (Status=Param1).

Message #

Ioctl: SetBandSecurity returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 220 — Ioctl: DeleteBand

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlDeleteBand
Opcode: Start

Description

Ioctl: DeleteBand.

Message #

Ioctl: DeleteBand

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 221 — Ioctl: DeleteBand returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlDeleteBand
Opcode: Stop

Description

Ioctl: DeleteBand returned (Status=Param1).

Message #

Ioctl: DeleteBand returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 222 — Ioctl: EraseBand

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEraseBand
Opcode: Start

Description

Ioctl: EraseBand.

Message #

Ioctl: EraseBand

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 223 — Ioctl: EraseBand returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEraseBand
Opcode: Stop

Description

Ioctl: EraseBand returned (Status=Param1).

Message #

Ioctl: EraseBand returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 224 — Ioctl: GetBandMetadata

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlGetBandMetadata
Opcode: Start

Description

Ioctl: GetBandMetadata.

Message #

Ioctl: GetBandMetadata

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 225 — Ioctl: GetBandMetadata returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlGetBandMetadata
Opcode: Stop

Description

Ioctl: GetBandMetadata returned (Status=Param1).

Message #

Ioctl: GetBandMetadata returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 226 — Ioctl: SetBandMetadata

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandMetadata
Opcode: Start

Description

Ioctl: SetBandMetadata.

Message #

Ioctl: SetBandMetadata

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 227 — Ioctl: SetBandMetadata returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetBandMetadata
Opcode: Stop

Description

Ioctl: SetBandMetadata returned (Status=Param1).

Message #

Ioctl: SetBandMetadata returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 228 — Ioctl: RelinquishSilo

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlRelinquishSilo
Opcode: Start

Description

Ioctl: RelinquishSilo.

Message #

Ioctl: RelinquishSilo

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 229 — Ioctl: RelinquishSilo returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlRelinquishSilo
Opcode: Stop

Description

Ioctl: RelinquishSilo returned (Status=Param1).

Message #

Ioctl: RelinquishSilo returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 230 — Ioctl: SetSid

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetSid
Opcode: Start

Description

Ioctl: SetSid.

Message #

Ioctl: SetSid

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 231 — Ioctl: SetSid returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlSetSid
Opcode: Stop

Description

Ioctl: SetSid returned (Status=Param1).

Message #

Ioctl: SetSid returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 232 — Ioctl: EraseAllBands

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEraseAllBands
Opcode: Start

Description

Ioctl: EraseAllBands.

Message #

Ioctl: EraseAllBands

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—

Event ID 233 — Ioctl: EraseAllBands returned (Status=Param1).

Provider: Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Channel: Analytic
Task: IoctlEraseAllBands
Opcode: Stop

Description

Ioctl: EraseAllBands returned (Status=Param1).

Message #

Ioctl: EraseAllBands returned (Status=%2).

Fields #

Name	Description
`Context` AnsiString	—
`Param1` HexInt64	—
`Param2` HexInt64	—
`Param3` HexInt64	—
`Param4` HexInt64	—