Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf

237 events across 1 channel

Event IDTitleChannel
10Operational
11Operational
12Operational
13Operational
14Operational
15Operational
16Operational
17Operational
18Operational
19Operational
20Operational
21Operational
22Operational
23Operational
24Operational
25Operational
26Operational
27Operational
28Operational
29Operational
30Operational
31Operational
32Operational
33Operational
34Operational
35Operational
36Operational
37Operational
38Operational
39Operational
40Operational
41Operational
42Operational
43Operational
44Operational
45Operational
46Operational
47Operational
48Operational
49Operational
50Operational
51Operational
52Operational
53Operational
54Operational
55Operational
56Operational
57Operational
58Operational
59Operational
60Operational
61Operational
62Operational
63Operational
64Operational
65Operational
66Operational
67Operational
68Operational
69Operational
70Operational
71Operational
72Operational
73Operational
74Operational
75Operational
76Operational
77Operational
78Operational
79Operational
80Operational
81Operational
82Operational
83Operational
84Operational
85Operational
86Operational
87Operational
88Operational
89Operational
90Operational
91Operational
92Operational
93Operational
94Operational
95Operational
96Operational
97Operational
98Operational
99Operational
100Operational
101Operational
102Operational
103Operational
104Operational
105Operational
106Operational
107Operational
108Operational
109Operational
110Operational
111Operational
112Operational
113Operational
114Operational
115Operational
116Operational
117Operational
118Operational
119Operational
120Operational
121Operational
122Operational
123Operational
124Operational
125Operational
126Operational
127Operational
128Operational
129Operational
130Operational
131Operational
132Operational
133Operational
134Operational
135Operational
136Operational
137Operational
138Operational
139Operational
140Operational
141Operational
142Operational
143Operational
144Operational
145Operational
146Operational
147Operational
148Operational
149Operational
150Operational
151Operational
152Operational
153Operational
154Operational
155Operational
156Operational
157Operational
158Operational
159Operational
160Operational
161Operational
162Operational
163Operational
164Operational
165Operational
166Operational
167Operational
168Operational
169Operational
170Operational
171Operational
172Operational
173Operational
174Operational
175Operational
176Operational
177Operational
178Operational
179Operational
180Operational
181Operational
182Operational
183Operational
184Operational
185Operational
186Operational
187Operational
188Operational
189Operational
190Operational
191Operational
192Operational
193Operational
194Operational
195Operational
196Operational
197Operational
198Operational
199Operational
200Operational
201Operational
202Operational
203Operational
204Operational
205Operational
206Operational
207Operational
208Operational
209Operational
210Operational
211Operational
212Operational
213Operational
214Operational
215Operational
216Operational
217Operational
218Operational
219Operational
220Operational
221Operational
222Operational
223Operational
224Operational
225Operational
226Operational
227Operational
228Operational
229Operational
230Operational
231Operational
232Operational
233Operational
234Operational
235Operational
236Operational
237Operational
238Operational
239Operational
240Operational
241Operational
242Operational
243Operational
244Operational
245Operational
246Operational

Event ID 10 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_stackSize
A11_oldStackSize

Event ID 11 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrlCompletionStackLength
A11_newStackSize
A12_IrpCtrl

Event ID 12 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newCNodeIrpCtrl
A11_newCNode
A12_newCNodeDataSnapshotMajorFunction

Event ID 13 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newCNodeIrpCtrl
A11_newCNode
A12_newCNodeDataSnapshotMajorFunction

Event ID 14 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrl
A11_CHARnewCNodeDataSnapshotMajorFunction
A12_CHARnewCNodeDataSnapshotMinorFunction

Event ID 15 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 16 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_OpType
A11_irpCtrl
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType

Event ID 17 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_OpType
A11_IrpCtrl
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType

Event ID 18 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_th
A12_FrameReserveIrpCtrlsEntriesiCount
A13_i

Event ID 19 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_th
A12_FrameReserveIrpCtrlsEntriesiCount
A13_i

Event ID 20 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrl
A11_IrpCtrlDataThread
A12_FrameReserveIrpCtrlsEntriesiCount
A13_i

Event ID 21 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FsControlDeviceObject
A11_NULL
A12_ControlDeviceName
A13_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType

Event ID 22 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 23 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 24 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 25 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_NewDeviceObject
A11_NULL
A12__cdoDevExtControlDeviceName
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType

Event ID 26 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_NewDeviceObject
A11_volume
A12__volumeDeviceName
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType
A14_DeviceObjectToAttachTo

Event ID 27 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject
A11_NULL
A12__cdoDevExtControlDeviceName
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType
A14_NotifyFlags

Event ID 28 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject
A11_volume
A12__volumeDeviceName
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType
A14_NotifyFlags
A15_devExtHeaderAttachedToDeviceObject

Event ID 29 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__VolumeDeviceName

Event ID 30 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__VolumeDeviceName

Event ID 31 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_origBufferPtr
A11_origMdlAddressPtrorigMdlAddressPtrNULL
A12_newBufferPtr
A13_newMdlAddressPtrnewMdlAddressPtrNULL

Event ID 32 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_CallbackNodeInstance
A13__CallbackNodeInstanceAltitude
A14_CallbackNodeInstanceFilter
A15__CallbackNodeInstanceFilterName
A16_IrpCtrlInitiatingInstance
A17_eventFileObject
A18_eventFsContext
A19_status
A20_IrpCtrlTraceStatus

Event ID 33 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_CallbackNodeInstance
A13__CallbackNodeInstanceAltitude
A14_CallbackNodeInstanceFilter
A15__CallbackNodeInstanceFilterName
A16_IrpCtrlInitiatingInstance
A17_eventFileObject
A18_eventFsContext
A19_status
A20_IrpCtrlTraceStatus

Event ID 34 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_CallbackNodeInstance
A13__CallbackNodeInstanceAltitude
A14_CallbackNodeInstanceFilter
A15__CallbackNodeInstanceFilterName
A16_IrpCtrlInitiatingInstance
A17_eventFileObject
A18_eventFsContext
A19_status

Event ID 35 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_CallbackNodeInstance
A13__CallbackNodeInstanceAltitude
A14_CallbackNodeInstanceFilter
A15__CallbackNodeInstanceFilterName
A16_IrpCtrlInitiatingInstance
A17_eventFileObject
A18_eventFsContext
A19_status

Event ID 36 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_IrpCtrlInitiatingInstance
A13_eventFileObject
A14_eventFsContext
A15_status

Event ID 37 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_eventIrpPtr
A11_eventMajorFunction
A12_IrpCtrlInitiatingInstance
A13_eventFileObject
A14_eventFsContext
A15_status

Event ID 38 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeGetCurrentThread
A11_irpCtrlFileObject
A12_volume
A13_CHARirpMajorId
A14_FltGetIrpNameirpMajorId

Event ID 39 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpMajorId
A11_irpCtrl
A12_callbackNode
A13_FlagOnirpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC

Event ID 40 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_TrackingCtrlPointerToFree

Event ID 41 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CompNodeIrpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 42 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CompNodeIrpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 43 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 44 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction

Event ID 45 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction

Event ID 46 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 47 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction
A13_irpCtrl

Event ID 48 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CompNodeIrpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 49 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 50 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction

Event ID 51 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction

Event ID 52 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 53 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction
A13_irpCtrl

Event ID 54 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CompNodeIrpCtrl
A11_CompNode
A12_CHARCompNodeDataSnapshotMajorFunction

Event ID 55 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 56 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARlocalIrpCtrlDataIopbMajorFunction
A11_CHARlocalIrpCtrlDataIopbMinorFunction
A12_FltGetIrpNamelocalIrpCtrlDataIopbMajorFunction
A13_localCompNodeIrpCtrl

Event ID 57 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_completionNodeIrpCtrl
A11_completionNode
A12_CHARcompletionNodeDataSnapshotMajorFunction

Event ID 58 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction
A13_irpCtrl

Event ID 59 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction
A13_irpCtrl

Event ID 60 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_completionNodeIrpCtrl
A11_completionNode
A12_CHARcompletionNodeDataSnapshotMajorFunction

Event ID 61 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CHARirpCtrlDataIopbMajorFunction
A11_CHARirpCtrlDataIopbMinorFunction
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction
A13_irpCtrl

Event ID 62 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject

Event ID 63 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject

Event ID 64 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_ExceptionPointerExceptionRecordExceptionCode
A11_ExceptionPointerContextRecord
A12_ExceptionPointerExceptionRecord
A13_ExceptionPointerExceptionRecordExceptionAddress

Event ID 65 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 66 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 67 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 68 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 69 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 70 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 71 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 72 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 73 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 74 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 75 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 76 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 77 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 78 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 79 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 80 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 81 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__localHead

Event ID 82 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__VolumeDeviceName

Event ID 83 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_fileList
A11_fileListFlags
A12_fileListUseCount

Event ID 84 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_fileList
A11_fileListFlags
A12_fileListUseCount

Event ID 85 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newFileList
A11_newFileListFlags
A12_newFileListUseCount

Event ID 86 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_fileList
A11_fileListFlags
A12_fileListUseCount

Event ID 87 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newFileList
A11_newFileListFlags
A12_newFileListUseCount

Event ID 88 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileList
A11_FileListFlags
A12_FileListUseCount

Event ID 89 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileList
A11_FileListFlags
A12_FileListUseCount

Event ID 90 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileList
A11_FileListFlags
A12_FileListUseCount

Event ID 91 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 92 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 93 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltGlobalsNumProcessors

Event ID 94 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeQueryMaximumProcessorCountExALL_PROCESSOR_GROUPS

Event ID 95 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltGlobalsCacheLineSize
A11_FltGlobalsCacheLineSize

Event ID 96 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 97 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 98 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 99 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 100 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 101 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 102 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 103 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 104 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DriverObject

Event ID 105 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_i

Event ID 106 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 107 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_i

Event ID 108 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 109 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FsActiveActivatingfilesystemDeactivatingfilesystem
A11_FsControlDeviceObject
A12_NULL
A13__controlDeviceNameCtrlName
A14_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType

Event ID 110 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltGetIrpNameirpSpMajorFunction
A11_irpSpMajorFunction

Event ID 111 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpSpFileObject
A11__irpSpFileObjectFileName

Event ID 112 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrlIrp
A11_IrpCtrlDataIopbMajorFunction

Event ID 113 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Irp

Event ID 114 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpSpMajorFunction

Event ID 115 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeGetCurrentThread
A11_fileObject
A12_iccVolume
A13_fileObjectFileName

Event ID 116 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 117 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_fileObject
A11__fileObjectFileName

Event ID 118 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeGetCurrentThread
A11_IrpCtrlFileObject
A12_volume
A13_IrpCtrlDataIoStatusStatus

Event ID 119 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeGetCurrentThread
A11_IrpCtrlFileObject
A12_volume
A13_IrpCtrlDataIoStatusStatus

Event ID 120 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 121 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newDeviceObject
A11_volume
A12__volumeDeviceName
A13_status
A14_FltpGetFsDeviceObjectAfterMountdiskDeviceObject
A15_FsControlDeviceObject

Event ID 122 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject
A11__devExtControlDeviceName

Event ID 123 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeviceObject
A11_NULL
A12__devExtControlDeviceName
A13_IrpIoStatusStatus

Event ID 124 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 125 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Context
A11_regWatchContextNotificationStatus

Event ID 126 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_regWatchContext
A11_regWatchContextNotificationStatus

Event ID 127 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 128 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status
A11__tempString

Event ID 129 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status
A11__tempString

Event ID 130 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_frameFrameID
A11__frameAltitudeIntervalLow
A12__frameAltitudeIntervalHigh

Event ID 131 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 132 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 133 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_ctxFlags
A11_FltGlobalsManualAttachDelayCounter
A12_FltGlobalsManualDeviceAttachLimit

Event ID 134 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_ctxFlags
A11_FltGlobalsManualAttachDelayCounter
A12_FltGlobalsManualDeviceAttachLimit

Event ID 135 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_TopFrameFrameID
A11__TopFrameAltitudeIntervalLow
A12__TopFrameAltitudeIntervalHigh
A13__TopFrameAltitudeIntervalLow
A14_legacyAltitude

Event ID 136 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__DriverObjDriverExtensionServiceKeyName
A11_PCWCHARvalueInfoData

Event ID 137 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Filter
A11__FilterName
A12_instance
A13_Volume
A14__VolumeDeviceName

Event ID 138 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Filter
A11__FilterName
A12_instance
A13_Volume
A14__VolumeDeviceName

Event ID 139 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_InstanceFilter
A11__InstanceFilterName
A12__InstanceAltitude
A13_Volume
A14__VolumeDeviceName

Event ID 140 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_currentInstance
A11_currentInstanceFilter
A12__currentInstanceFilterName
A13__InstanceAltitude

Event ID 141 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_filter
A11__filterName
A12_Instance
A13_volume
A14__volumeDeviceName
A15_Reason

Event ID 142 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Buffer
A11_fileOffsetQuadPart
A12_Length

Event ID 143 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Buffer
A11_fileOffsetQuadPart
A12_Length

Event ID 144 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 145 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Buffer
A11_fileOffsetQuadPart
A12_Length

Event ID 146 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Buffer
A11_fileOffsetQuadPart
A12_Length

Event ID 147 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 148 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 149 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 150 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_MdlChain
A11_FileOffsetQuadPart
A12_Length

Event ID 151 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 152 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_MdlChain

Event ID 153 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 154 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_MdlChain
A11_FileOffsetQuadPart
A12_Length

Event ID 155 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 156 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_MdlChain
A11_FileOffsetQuadPart

Event ID 157 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 158 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 159 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 160 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 161 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 162 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 163 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 164 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irp

Event ID 165 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irp

Event ID 166 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__replyWaiter

Event ID 167 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 168 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 169 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_currentWaiter

Event ID 170 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 171 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_ULONGreplyMessageId

Event ID 172 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Irp

Event ID 173 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irp

Event ID 174 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Queue

Event ID 175 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_currentLink

Event ID 176 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 177 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 178 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 179 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 180 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 181 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 182 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Irp

Event ID 183 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Irp

Event ID 184 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_GenCtxFileObject
A12_nameCacheNodeTreeLinkFlags
A13_nameCacheNodeUseCount
A14__nameCacheNodeNameInfoName

Event ID 185 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_nameCacheNodeTreeLinkFlagsflagToClear
A12_nameCacheNodeUseCount
A13__nameCacheNodeNameInfoName

Event ID 186 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_FlagOnnameCacheNodeTreeLinkFlags0x0ffff
A12__nameCacheNodeNameInfoName

Event ID 187 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GenCtxFileObject

Event ID 188 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GenCtxFileObject

Event ID 189 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GenCtxFileObject

Event ID 190 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_GenCtxFileObject
A12_nameCacheNodeTreeLinkFlags
A13_nameCacheNodeUseCount
A14__nameCacheNodeNameInfoName

Event ID 191 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_GenCtxFileObject
A12_nameCacheNodeTreeLinkFlags
A13_nameCacheNodeUseCount
A14__nameCacheNodeNameInfoName

Event ID 192 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_GenCtxFileObject
A12_nameCacheNodeTreeLinkFlags
A13_nameCacheNodeUseCount
A14__nameCacheNodeNameInfoName

Event ID 193 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_foundNameCacheNode
A11_GenCtxFileObject
A12_foundNameCacheNodeTreeLinkFlags
A13_foundNameCacheNodeUseCount
A14__foundNameCacheNodeNameInfoName

Event ID 194 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_nameCacheNode
A11_GenCtxFileObject
A12_nameCacheNodeTreeLinkFlags
A13_nameCacheNodeUseCount
A14__nameCacheNodeNameInfoName

Event ID 195 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff
A12__VolumeDeviceName
A13__FileObjectFileName
A14_FileObject

Event ID 196 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff
A12__VolumeDeviceName
A13__FileObjectFileName
A14_FileObject

Event ID 197 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation
A11_nameCacheNodeUseCount

Event ID 198 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation

Event ID 199 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 200 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC

Event ID 201 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__GenCtxShortFileName
A11__localGenCtxFileNameInformationName

Event ID 202 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__VolumeDeviceName
A11__FileObjectFileName
A12_FileObject

Event ID 203 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status

Event ID 204 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_NameCtrl
A11_NameCtrlNameGenerationFlags
A12_NameCtrlError
A13_NameCtrlShareNameLength
A14_NameCtrlStreamNameLength
A15__NameCtrlName
A16__NameCtrlCurrentShortName

Event ID 205 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_NameCtrl
A11_NameCtrlBufferSize
A12_NewSize
A13__NameCtrlName
A14_NameCtrlFlags
A15_FlagsToSet

Event ID 206 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GET_NAME_SUPPORT_VOLUME_DEVICE_NAMEGenCtx
A11_GenCtxFileObjectFileNameBuffer0
A12_GenCtxFileObjectFileNameBuffer1
A13_GenCtxFileObjectFileNameBuffer2
A14_GenCtxFileObjectFileNameBuffer3

Event ID 207 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__GenCtxShortFileName
A11__GenCtxExpandedFileName

Event ID 208 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__GenCtxNameCtrlName

Event ID 209 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GenCtxFileObject

Event ID 210 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation
A11__FileNameInformationName
A12__FileNameInformationVolume
A13__FileNameInformationFinalComponent
A14__FileNameInformationExtension
A15__FileNameInformationStream
A16__FileNameInformationParentDir

Event ID 211 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation
A11__FileNameInformationName
A12__FileNameInformationVolume
A13__FileNameInformationFinalComponent
A14__FileNameInformationExtension
A15__FileNameInformationStream
A16__FileNameInformationParentDir

Event ID 212 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation
A11__FileNameInformationName
A12__FileNameInformationVolume
A13__FileNameInformationFinalComponent
A14__FileNameInformationExtension
A15__FileNameInformationStream
A16__FileNameInformationParentDir

Event ID 213 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FileNameInformation

Event ID 214 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CallbackDataIopbMajorFunction
A11_iccIrpCtrl
A12_iccIrpCtrlPendingCallbackNode
A13_FlagOniccIrpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC

Event ID 215 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrlIrp
A11_irpCtrlDataIopbMajorFunction

Event ID 216 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrlIrp
A11_irpCtrlDataIopbMajorFunction

Event ID 217 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_irpCtrlIrp
A11_irpCtrlDataIopbMajorFunction

Event ID 218 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_status
A11__filterName

Event ID 219 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__filterName
A11__filterDefaultAltitude

Event ID 220 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__FilterName

Event ID 221 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__localHead

Event ID 222 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10__VolumeDeviceName

Event ID 223 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_streamList
A11_streamListFlags
A12_streamListUseCount

Event ID 224 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_streamList
A11_streamListFlags
A12_streamListUseCount

Event ID 225 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newStreamList
A11_newStreamListFlags
A12_newStreamListUseCount

Event ID 226 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_streamList
A11_streamListFlags
A12_streamListUseCount

Event ID 227 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_newStreamList
A11_newStreamListFlags
A12_newStreamListUseCount

Event ID 228 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_StreamList
A11_StreamListFlags
A12_StreamListUseCount

Event ID 229 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_StreamList
A11_StreamListFlags
A12_StreamListUseCount

Event ID 230 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_StreamList
A11_StreamListFlags
A12_StreamListUseCount

Event ID 231 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltObject
A11_PFLT_OBJECTFltObjectPointerCount
A12_reason

Event ID 232 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltObject
A11_PFLT_OBJECTFltObjectPointerCount
A12_reason

Event ID 233 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_deviceObject

Event ID 234 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_CDODriverName

Event ID 235 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_Volume
A11__VolumeDeviceName

Event ID 236 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_KeGetCurrentThread
A11_FileObject
A12_Volume
A13_IrpMajor

Event ID 237 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWork
A11_QueueType
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit

Event ID 238 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWork
A11_QueueType
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit

Event ID 239 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_fltWork
A11_QueueType
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit

Event ID 240 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_NULL
A11_QueueType
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit

Event ID 241 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_GenericWorkItem
A11_qtype
A12_fltObject
A13_GenericWorkItemGenericWorkerRoutine
A14_GenericWorkItemContext
A15_GenericWorkItemIoPriorityInfoIoPriority

Event ID 242 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_DeferredWorkItem
A11_qtype
A12_instance
A13_DeferredWorkItemDeferredWorkerRoutine
A14_DeferredWorkItemContext
A15_DeferredWorkItemIoPriorityInfoIoPriority

Event ID 243 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWorkItem
A11_FltWorkItemQueueType
A12_FltWorkItemFltObject
A13_FltWorkItemGenericWorkerRoutine
A14_FltWorkItemContext

Event ID 244 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWorkItem
A11_FltWorkItemQueueType
A12_FltWorkItemInstance
A13_FltWorkItemDeferredWorkerRoutine
A14_FltWorkItemContext

Event ID 245 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWorkItem
A11_QueueType
A12_FltObject
A13_WorkerRoutine
A14_Context
A15_FltWorkItemIoPriorityInfoIoPriority

Event ID 246 —

Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields

NameDescription
FUNC
A10_FltWorkItem
A11_QueueType
A12_FltWorkItemInstance
A13_WorkerRoutine
A14_Context
A15_FltWorkItemIoPriorityInfoIoPriority