Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf

237 events across 1 channel

EventTitleChannel
10Event ID 10Operational
11Event ID 11Operational
12Event ID 12Operational
13Event ID 13Operational
14Event ID 14Operational
15Event ID 15Operational
16Event ID 16Operational
17Event ID 17Operational
18Event ID 18Operational
19Event ID 19Operational
20Event ID 20Operational
21Event ID 21Operational
22Event ID 22Operational
23Event ID 23Operational
24Event ID 24Operational
25Event ID 25Operational
26Event ID 26Operational
27Event ID 27Operational
28Event ID 28Operational
29Event ID 29Operational
30Event ID 30Operational
31Event ID 31Operational
32Event ID 32Operational
33Event ID 33Operational
34Event ID 34Operational
35Event ID 35Operational
36Event ID 36Operational
37Event ID 37Operational
38Event ID 38Operational
39Event ID 39Operational
40Event ID 40Operational
41Event ID 41Operational
42Event ID 42Operational
43Event ID 43Operational
44Event ID 44Operational
45Event ID 45Operational
46Event ID 46Operational
47Event ID 47Operational
48Event ID 48Operational
49Event ID 49Operational
50Event ID 50Operational
51Event ID 51Operational
52Event ID 52Operational
53Event ID 53Operational
54Event ID 54Operational
55Event ID 55Operational
56Event ID 56Operational
57Event ID 57Operational
58Event ID 58Operational
59Event ID 59Operational
60Event ID 60Operational
61Event ID 61Operational
62Event ID 62Operational
63Event ID 63Operational
64Event ID 64Operational
65Event ID 65Operational
66Event ID 66Operational
67Event ID 67Operational
68Event ID 68Operational
69Event ID 69Operational
70Event ID 70Operational
71Event ID 71Operational
72Event ID 72Operational
73Event ID 73Operational
74Event ID 74Operational
75Event ID 75Operational
76Event ID 76Operational
77Event ID 77Operational
78Event ID 78Operational
79Event ID 79Operational
80Event ID 80Operational
81Event ID 81Operational
82Event ID 82Operational
83Event ID 83Operational
84Event ID 84Operational
85Event ID 85Operational
86Event ID 86Operational
87Event ID 87Operational
88Event ID 88Operational
89Event ID 89Operational
90Event ID 90Operational
91Event ID 91Operational
92Event ID 92Operational
93Event ID 93Operational
94Event ID 94Operational
95Event ID 95Operational
96Event ID 96Operational
97Event ID 97Operational
98Event ID 98Operational
99Event ID 99Operational
100Event ID 100Operational
101Event ID 101Operational
102Event ID 102Operational
103Event ID 103Operational
104Event ID 104Operational
105Event ID 105Operational
106Event ID 106Operational
107Event ID 107Operational
108Event ID 108Operational
109Event ID 109Operational
110Event ID 110Operational
111Event ID 111Operational
112Event ID 112Operational
113Event ID 113Operational
114Event ID 114Operational
115Event ID 115Operational
116Event ID 116Operational
117Event ID 117Operational
118Event ID 118Operational
119Event ID 119Operational
120Event ID 120Operational
121Event ID 121Operational
122Event ID 122Operational
123Event ID 123Operational
124Event ID 124Operational
125Event ID 125Operational
126Event ID 126Operational
127Event ID 127Operational
128Event ID 128Operational
129Event ID 129Operational
130Event ID 130Operational
131Event ID 131Operational
132Event ID 132Operational
133Event ID 133Operational
134Event ID 134Operational
135Event ID 135Operational
136Event ID 136Operational
137Event ID 137Operational
138Event ID 138Operational
139Event ID 139Operational
140Event ID 140Operational
141Event ID 141Operational
142Event ID 142Operational
143Event ID 143Operational
144Event ID 144Operational
145Event ID 145Operational
146Event ID 146Operational
147Event ID 147Operational
148Event ID 148Operational
149Event ID 149Operational
150Event ID 150Operational
151Event ID 151Operational
152Event ID 152Operational
153Event ID 153Operational
154Event ID 154Operational
155Event ID 155Operational
156Event ID 156Operational
157Event ID 157Operational
158Event ID 158Operational
159Event ID 159Operational
160Event ID 160Operational
161Event ID 161Operational
162Event ID 162Operational
163Event ID 163Operational
164Event ID 164Operational
165Event ID 165Operational
166Event ID 166Operational
167Event ID 167Operational
168Event ID 168Operational
169Event ID 169Operational
170Event ID 170Operational
171Event ID 171Operational
172Event ID 172Operational
173Event ID 173Operational
174Event ID 174Operational
175Event ID 175Operational
176Event ID 176Operational
177Event ID 177Operational
178Event ID 178Operational
179Event ID 179Operational
180Event ID 180Operational
181Event ID 181Operational
182Event ID 182Operational
183Event ID 183Operational
184Event ID 184Operational
185Event ID 185Operational
186Event ID 186Operational
187Event ID 187Operational
188Event ID 188Operational
189Event ID 189Operational
190Event ID 190Operational
191Event ID 191Operational
192Event ID 192Operational
193Event ID 193Operational
194Event ID 194Operational
195Event ID 195Operational
196Event ID 196Operational
197Event ID 197Operational
198Event ID 198Operational
199Event ID 199Operational
200Event ID 200Operational
201Event ID 201Operational
202Event ID 202Operational
203Event ID 203Operational
204Event ID 204Operational
205Event ID 205Operational
206Event ID 206Operational
207Event ID 207Operational
208Event ID 208Operational
209Event ID 209Operational
210Event ID 210Operational
211Event ID 211Operational
212Event ID 212Operational
213Event ID 213Operational
214Event ID 214Operational
215Event ID 215Operational
216Event ID 216Operational
217Event ID 217Operational
218Event ID 218Operational
219Event ID 219Operational
220Event ID 220Operational
221Event ID 221Operational
222Event ID 222Operational
223Event ID 223Operational
224Event ID 224Operational
225Event ID 225Operational
226Event ID 226Operational
227Event ID 227Operational
228Event ID 228Operational
229Event ID 229Operational
230Event ID 230Operational
231Event ID 231Operational
232Event ID 232Operational
233Event ID 233Operational
234Event ID 234Operational
235Event ID 235Operational
236Event ID 236Operational
237Event ID 237Operational
238Event ID 238Operational
239Event ID 239Operational
240Event ID 240Operational
241Event ID 241Operational
242Event ID 242Operational
243Event ID 243Operational
244Event ID 244Operational
245Event ID 245Operational
246Event ID 246Operational

Event ID 10:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_stackSize Int32
A11_oldStackSize Int32

Event ID 11:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrlCompletionStackLength Int32
A11_newStackSize Int32
A12_IrpCtrl Pointer

Event ID 12:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newCNodeIrpCtrl Pointer
A11_newCNode Pointer
A12_newCNodeDataSnapshotMajorFunction Int32

Event ID 13:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newCNodeIrpCtrl Pointer
A11_newCNode Pointer
A12_newCNodeDataSnapshotMajorFunction Int32

Event ID 14:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrl Pointer
A11_CHARnewCNodeDataSnapshotMajorFunction Int32
A12_CHARnewCNodeDataSnapshotMinorFunction Int32

Event ID 15:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 16:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_OpType Int32
A11_irpCtrl Pointer
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer

Event ID 17:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_OpType Int32
A11_IrpCtrl Pointer
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer

Event ID 18:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_th Pointer
A12_FrameReserveIrpCtrlsEntriesiCount Int32
A13_i Int32

Event ID 19:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_th Pointer
A12_FrameReserveIrpCtrlsEntriesiCount Int32
A13_i Int32

Event ID 20:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrl Pointer
A11_IrpCtrlDataThread Pointer
A12_FrameReserveIrpCtrlsEntriesiCount Int32
A13_i Int32

Event ID 21:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FsControlDeviceObject Pointer
A11_NULL Pointer
A12_ControlDeviceName CountedUtf16String
A13_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType AnsiString

Event ID 22:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 23:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 24:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 25:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_NewDeviceObject Pointer
A11_NULL Pointer
A12__cdoDevExtControlDeviceName CountedUtf16String
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString

Event ID 26:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_NewDeviceObject Pointer
A11_volume Pointer
A12__volumeDeviceName CountedUtf16String
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString
A14_DeviceObjectToAttachTo Pointer

Event ID 27:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer
A11_NULL Pointer
A12__cdoDevExtControlDeviceName CountedUtf16String
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString
A14_NotifyFlags HexInt32

Event ID 28:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer
A11_volume Pointer
A12__volumeDeviceName CountedUtf16String
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString
A14_NotifyFlags HexInt32
A15_devExtHeaderAttachedToDeviceObject Pointer

Event ID 29:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__VolumeDeviceName CountedUtf16String

Event ID 30:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__VolumeDeviceName CountedUtf16String

Event ID 31:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_origBufferPtr Pointer
A11_origMdlAddressPtrorigMdlAddressPtrNULL Pointer
A12_newBufferPtr Pointer
A13_newMdlAddressPtrnewMdlAddressPtrNULL Pointer

Event ID 32:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_CallbackNodeInstance Pointer
A13__CallbackNodeInstanceAltitude CountedUtf16String
A14_CallbackNodeInstanceFilter Pointer
A15__CallbackNodeInstanceFilterName CountedUtf16String
A16_IrpCtrlInitiatingInstance Pointer
A17_eventFileObject Pointer
A18_eventFsContext Pointer
A19_status HexInt32
A20_IrpCtrlTraceStatus HexInt32

Event ID 33:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_CallbackNodeInstance Pointer
A13__CallbackNodeInstanceAltitude CountedUtf16String
A14_CallbackNodeInstanceFilter Pointer
A15__CallbackNodeInstanceFilterName CountedUtf16String
A16_IrpCtrlInitiatingInstance Pointer
A17_eventFileObject Pointer
A18_eventFsContext Pointer
A19_status HexInt32
A20_IrpCtrlTraceStatus HexInt32

Event ID 34:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_CallbackNodeInstance Pointer
A13__CallbackNodeInstanceAltitude CountedUtf16String
A14_CallbackNodeInstanceFilter Pointer
A15__CallbackNodeInstanceFilterName CountedUtf16String
A16_IrpCtrlInitiatingInstance Pointer
A17_eventFileObject Pointer
A18_eventFsContext Pointer
A19_status HexInt32

Event ID 35:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_CallbackNodeInstance Pointer
A13__CallbackNodeInstanceAltitude CountedUtf16String
A14_CallbackNodeInstanceFilter Pointer
A15__CallbackNodeInstanceFilterName CountedUtf16String
A16_IrpCtrlInitiatingInstance Pointer
A17_eventFileObject Pointer
A18_eventFsContext Pointer
A19_status HexInt32

Event ID 36:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_IrpCtrlInitiatingInstance Pointer
A13_eventFileObject Pointer
A14_eventFsContext Pointer
A15_status HexInt32

Event ID 37:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_eventIrpPtr Pointer
A11_eventMajorFunction UInt32
A12_IrpCtrlInitiatingInstance Pointer
A13_eventFileObject Pointer
A14_eventFsContext Pointer
A15_status HexInt32

Event ID 38:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeGetCurrentThread Pointer
A11_irpCtrlFileObject Pointer
A12_volume Pointer
A13_CHARirpMajorId Int32
A14_FltGetIrpNameirpMajorId AnsiString

Event ID 39:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpMajorId HexInt32
A11_irpCtrl Pointer
A12_callbackNode Pointer
A13_FlagOnirpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString

Event ID 40:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_TrackingCtrlPointerToFree Pointer

Event ID 41:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CompNodeIrpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 42:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CompNodeIrpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 43:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 44:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString

Event ID 45:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString

Event ID 46:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 47:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString
A13_irpCtrl Pointer

Event ID 48:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CompNodeIrpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 49:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 50:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString

Event ID 51:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString

Event ID 52:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 53:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString
A13_irpCtrl Pointer

Event ID 54:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CompNodeIrpCtrl Pointer
A11_CompNode Pointer
A12_CHARCompNodeDataSnapshotMajorFunction Int32

Event ID 55:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 56:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARlocalIrpCtrlDataIopbMajorFunction Int32
A11_CHARlocalIrpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNamelocalIrpCtrlDataIopbMajorFunction AnsiString
A13_localCompNodeIrpCtrl Pointer

Event ID 57:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_completionNodeIrpCtrl Pointer
A11_completionNode Pointer
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32

Event ID 58:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString
A13_irpCtrl Pointer

Event ID 59:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString
A13_irpCtrl Pointer

Event ID 60:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_completionNodeIrpCtrl Pointer
A11_completionNode Pointer
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32

Event ID 61:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CHARirpCtrlDataIopbMajorFunction Int32
A11_CHARirpCtrlDataIopbMinorFunction Int32
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString
A13_irpCtrl Pointer

Event ID 62:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer

Event ID 63:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer

Event ID 64:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_ExceptionPointerExceptionRecordExceptionCode HexInt32
A11_ExceptionPointerContextRecord Pointer
A12_ExceptionPointerExceptionRecord Pointer
A13_ExceptionPointerExceptionRecordExceptionAddress Pointer

Event ID 65:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 66:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 67:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 68:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 69:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 70:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 71:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 72:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 73:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 74:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 75:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 76:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 77:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 78:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 79:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 80:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 81:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__localHead Pointer

Event ID 82:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__VolumeDeviceName CountedUtf16String

Event ID 83:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_fileList Pointer
A11_fileListFlags HexInt32
A12_fileListUseCount Int32

Event ID 84:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_fileList Pointer
A11_fileListFlags HexInt32
A12_fileListUseCount Int32

Event ID 85:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newFileList Pointer
A11_newFileListFlags HexInt32
A12_newFileListUseCount Int32

Event ID 86:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_fileList Pointer
A11_fileListFlags HexInt32
A12_fileListUseCount Int32

Event ID 87:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newFileList Pointer
A11_newFileListFlags HexInt32
A12_newFileListUseCount Int32

Event ID 88:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileList Pointer
A11_FileListFlags HexInt32
A12_FileListUseCount Int32

Event ID 89:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileList Pointer
A11_FileListFlags HexInt32
A12_FileListUseCount Int32

Event ID 90:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileList Pointer
A11_FileListFlags HexInt32
A12_FileListUseCount Int32

Event ID 91:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 92:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 93:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltGlobalsNumProcessors Int32

Event ID 94:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeQueryMaximumProcessorCountExALL_PROCESSOR_GROUPS Int32

Event ID 95:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltGlobalsCacheLineSize Int32
A11_FltGlobalsCacheLineSize HexInt32

Event ID 96:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 97:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 98:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 99:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 100:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 101:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 102:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 103:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 104:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DriverObject Pointer

Event ID 105:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_i Int32

Event ID 106:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 107:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_i Int32

Event ID 108:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 109:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FsActiveActivatingfilesystemDeactivatingfilesystem AnsiString
A11_FsControlDeviceObject Pointer
A12_NULL Pointer
A13__controlDeviceNameCtrlName CountedUtf16String
A14_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType AnsiString

Event ID 110:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltGetIrpNameirpSpMajorFunction AnsiString
A11_irpSpMajorFunction Int32

Event ID 111:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpSpFileObject Pointer
A11__irpSpFileObjectFileName CountedUtf16String

Event ID 112:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrlIrp Pointer
A11_IrpCtrlDataIopbMajorFunction Int32

Event ID 113:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Irp Pointer

Event ID 114:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpSpMajorFunction HexInt32

Event ID 115:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeGetCurrentThread Pointer
A11_fileObject Pointer
A12_iccVolume Pointer
A13_fileObjectFileName CountedUtf16String

Event ID 116:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 117:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_fileObject Pointer
A11__fileObjectFileName CountedUtf16String

Event ID 118:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeGetCurrentThread Pointer
A11_IrpCtrlFileObject Pointer
A12_volume Pointer
A13_IrpCtrlDataIoStatusStatus HexInt32

Event ID 119:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeGetCurrentThread Pointer
A11_IrpCtrlFileObject Pointer
A12_volume Pointer
A13_IrpCtrlDataIoStatusStatus HexInt32

Event ID 120:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 121:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newDeviceObject Pointer
A11_volume Pointer
A12__volumeDeviceName CountedUtf16String
A13_status HexInt32
A14_FltpGetFsDeviceObjectAfterMountdiskDeviceObject Pointer
A15_FsControlDeviceObject Pointer

Event ID 122:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer
A11__devExtControlDeviceName CountedUtf16String

Event ID 123:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeviceObject Pointer
A11_NULL Pointer
A12__devExtControlDeviceName CountedUtf16String
A13_IrpIoStatusStatus HexInt32

Event ID 124:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 125:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Context Pointer
A11_regWatchContextNotificationStatus HexInt32

Event ID 126:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_regWatchContext Pointer
A11_regWatchContextNotificationStatus HexInt32

Event ID 127:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 128:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32
A11__tempString CountedUtf16String

Event ID 129:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32
A11__tempString CountedUtf16String

Event ID 130:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_frameFrameID Int32
A11__frameAltitudeIntervalLow CountedUtf16String
A12__frameAltitudeIntervalHigh CountedUtf16String

Event ID 131:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 132:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 133:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_ctxFlags Pointer
A11_FltGlobalsManualAttachDelayCounter Int32
A12_FltGlobalsManualDeviceAttachLimit Int32

Event ID 134:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_ctxFlags Pointer
A11_FltGlobalsManualAttachDelayCounter Int32
A12_FltGlobalsManualDeviceAttachLimit Int32

Event ID 135:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_TopFrameFrameID Int32
A11__TopFrameAltitudeIntervalLow CountedUtf16String
A12__TopFrameAltitudeIntervalHigh CountedUtf16String
A13__TopFrameAltitudeIntervalLow CountedUtf16String
A14_legacyAltitude CountedUtf16String

Event ID 136:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__DriverObjDriverExtensionServiceKeyName CountedUtf16String
A11_PCWCHARvalueInfoData UnicodeString

Event ID 137:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Filter Pointer
A11__FilterName CountedUtf16String
A12_instance Pointer
A13_Volume Pointer
A14__VolumeDeviceName CountedUtf16String

Event ID 138:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Filter Pointer
A11__FilterName CountedUtf16String
A12_instance Pointer
A13_Volume Pointer
A14__VolumeDeviceName CountedUtf16String

Event ID 139:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_InstanceFilter Pointer
A11__InstanceFilterName CountedUtf16String
A12__InstanceAltitude CountedUtf16String
A13_Volume Pointer
A14__VolumeDeviceName CountedUtf16String

Event ID 140:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_currentInstance Pointer
A11_currentInstanceFilter Pointer
A12__currentInstanceFilterName CountedUtf16String
A13__InstanceAltitude CountedUtf16String

Event ID 141:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_filter Pointer
A11__filterName CountedUtf16String
A12_Instance Pointer
A13_volume Pointer
A14__volumeDeviceName CountedUtf16String
A15_Reason HexInt32

Event ID 142:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Buffer Pointer
A11_fileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 143:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Buffer Pointer
A11_fileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 144:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 145:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Buffer Pointer
A11_fileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 146:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Buffer Pointer
A11_fileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 147:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 148:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 149:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 150:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_MdlChain Pointer
A11_FileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 151:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 152:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_MdlChain Pointer

Event ID 153:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 154:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_MdlChain Pointer
A11_FileOffsetQuadPart HexInt64
A12_Length HexInt32

Event ID 155:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 156:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_MdlChain Pointer
A11_FileOffsetQuadPart HexInt64

Event ID 157:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 158:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 159:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 160:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 161:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 162:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 163:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 164:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irp Pointer

Event ID 165:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irp Pointer

Event ID 166:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__replyWaiter Pointer

Event ID 167:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 168:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 169:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_currentWaiter Pointer

Event ID 170:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 171:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_ULONGreplyMessageId HexInt32

Event ID 172:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Irp Pointer

Event ID 173:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irp Pointer

Event ID 174:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Queue Pointer

Event ID 175:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 176:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 177:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 178:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 179:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 180:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 181:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 182:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Irp Pointer

Event ID 183:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Irp Pointer

Event ID 184:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_nameCacheNodeTreeLinkFlags HexInt32
A13_nameCacheNodeUseCount Int32
A14__nameCacheNodeNameInfoName CountedUtf16String

Event ID 185:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_nameCacheNodeTreeLinkFlagsflagToClear HexInt32
A12_nameCacheNodeUseCount Int32
A13__nameCacheNodeNameInfoName CountedUtf16String

Event ID 186:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_FlagOnnameCacheNodeTreeLinkFlags0x0ffff HexInt32
A12__nameCacheNodeNameInfoName CountedUtf16String

Event ID 187:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GenCtxFileObject Pointer

Event ID 188:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GenCtxFileObject Pointer

Event ID 189:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GenCtxFileObject Pointer

Event ID 190:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_nameCacheNodeTreeLinkFlags HexInt32
A13_nameCacheNodeUseCount Int32
A14__nameCacheNodeNameInfoName CountedUtf16String

Event ID 191:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_nameCacheNodeTreeLinkFlags HexInt32
A13_nameCacheNodeUseCount Int32
A14__nameCacheNodeNameInfoName CountedUtf16String

Event ID 192:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_nameCacheNodeTreeLinkFlags HexInt32
A13_nameCacheNodeUseCount Int32
A14__nameCacheNodeNameInfoName CountedUtf16String

Event ID 193:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_foundNameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_foundNameCacheNodeTreeLinkFlags HexInt32
A13_foundNameCacheNodeUseCount Int32
A14__foundNameCacheNodeNameInfoName CountedUtf16String

Event ID 194:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_nameCacheNode Pointer
A11_GenCtxFileObject Pointer
A12_nameCacheNodeTreeLinkFlags HexInt32
A13_nameCacheNodeUseCount Int32
A14__nameCacheNodeNameInfoName CountedUtf16String

Event ID 195:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32
A12__VolumeDeviceName CountedUtf16String
A13__FileObjectFileName CountedUtf16String
A14_FileObject Pointer

Event ID 196:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32
A12__VolumeDeviceName CountedUtf16String
A13__FileObjectFileName CountedUtf16String
A14_FileObject Pointer

Event ID 197:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer
A11_nameCacheNodeUseCount Int32

Event ID 198:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer

Event ID 199:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 200:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString

Event ID 201:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__GenCtxShortFileName CountedUtf16String
A11__localGenCtxFileNameInformationName CountedUtf16String

Event ID 202:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__VolumeDeviceName CountedUtf16String
A11__FileObjectFileName CountedUtf16String
A12_FileObject Pointer

Event ID 203:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32

Event ID 204:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_NameCtrl Pointer
A11_NameCtrlNameGenerationFlags HexInt32
A12_NameCtrlError HexInt32
A13_NameCtrlShareNameLength HexInt32
A14_NameCtrlStreamNameLength HexInt32
A15__NameCtrlName CountedUtf16String
A16__NameCtrlCurrentShortName CountedUtf16String

Event ID 205:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_NameCtrl Pointer
A11_NameCtrlBufferSize HexInt32
A12_NewSize HexInt32
A13__NameCtrlName CountedUtf16String
A14_NameCtrlFlags HexInt32
A15_FlagsToSet HexInt32

Event ID 206:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GET_NAME_SUPPORT_VOLUME_DEVICE_NAMEGenCtx CountedUtf16String
A11_GenCtxFileObjectFileNameBuffer0 HexInt32
A12_GenCtxFileObjectFileNameBuffer1 HexInt32
A13_GenCtxFileObjectFileNameBuffer2 HexInt32
A14_GenCtxFileObjectFileNameBuffer3 HexInt32

Event ID 207:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__GenCtxShortFileName CountedUtf16String
A11__GenCtxExpandedFileName CountedUtf16String

Event ID 208:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__GenCtxNameCtrlName CountedUtf16String

Event ID 209:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GenCtxFileObject Pointer

Event ID 210:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer
A11__FileNameInformationName CountedUtf16String
A12__FileNameInformationVolume CountedUtf16String
A13__FileNameInformationFinalComponent CountedUtf16String
A14__FileNameInformationExtension CountedUtf16String
A15__FileNameInformationStream CountedUtf16String
A16__FileNameInformationParentDir CountedUtf16String

Event ID 211:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer
A11__FileNameInformationName CountedUtf16String
A12__FileNameInformationVolume CountedUtf16String
A13__FileNameInformationFinalComponent CountedUtf16String
A14__FileNameInformationExtension CountedUtf16String
A15__FileNameInformationStream CountedUtf16String
A16__FileNameInformationParentDir CountedUtf16String

Event ID 212:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer
A11__FileNameInformationName CountedUtf16String
A12__FileNameInformationVolume CountedUtf16String
A13__FileNameInformationFinalComponent CountedUtf16String
A14__FileNameInformationExtension CountedUtf16String
A15__FileNameInformationStream CountedUtf16String
A16__FileNameInformationParentDir CountedUtf16String

Event ID 213:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FileNameInformation Pointer

Event ID 214:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CallbackDataIopbMajorFunction HexInt32
A11_iccIrpCtrl Pointer
A12_iccIrpCtrlPendingCallbackNode Pointer
A13_FlagOniccIrpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString

Event ID 215:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrlIrp Pointer
A11_irpCtrlDataIopbMajorFunction Int32

Event ID 216:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrlIrp Pointer
A11_irpCtrlDataIopbMajorFunction Int32

Event ID 217:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_irpCtrlIrp Pointer
A11_irpCtrlDataIopbMajorFunction Int32

Event ID 218:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_status HexInt32
A11__filterName CountedUtf16String

Event ID 219:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__filterName CountedUtf16String
A11__filterDefaultAltitude CountedUtf16String

Event ID 220:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__FilterName CountedUtf16String

Event ID 221:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__localHead Pointer

Event ID 222:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10__VolumeDeviceName CountedUtf16String

Event ID 223:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_streamList Pointer
A11_streamListFlags HexInt32
A12_streamListUseCount Int32

Event ID 224:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_streamList Pointer
A11_streamListFlags HexInt32
A12_streamListUseCount Int32

Event ID 225:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newStreamList Pointer
A11_newStreamListFlags HexInt32
A12_newStreamListUseCount Int32

Event ID 226:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_streamList Pointer
A11_streamListFlags HexInt32
A12_streamListUseCount Int32

Event ID 227:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_newStreamList Pointer
A11_newStreamListFlags HexInt32
A12_newStreamListUseCount Int32

Event ID 228:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_StreamList Pointer
A11_StreamListFlags HexInt32
A12_StreamListUseCount Int32

Event ID 229:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_StreamList Pointer
A11_StreamListFlags HexInt32
A12_StreamListUseCount Int32

Event ID 230:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_StreamList Pointer
A11_StreamListFlags HexInt32
A12_StreamListUseCount Int32

Event ID 231:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltObject Pointer
A11_PFLT_OBJECTFltObjectPointerCount Int32
A12_reason AnsiString

Event ID 232:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltObject Pointer
A11_PFLT_OBJECTFltObjectPointerCount Int32
A12_reason AnsiString

Event ID 233:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_deviceObject Pointer

Event ID 234:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_CDODriverName CountedUtf16String

Event ID 235:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_Volume Pointer
A11__VolumeDeviceName CountedUtf16String

Event ID 236:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_KeGetCurrentThread Pointer
A11_FileObject Pointer
A12_Volume Pointer
A13_IrpMajor Int32

Event ID 237:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWork Pointer
A11_QueueType Int32
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32

Event ID 238:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWork Pointer
A11_QueueType Int32
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32

Event ID 239:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_fltWork Pointer
A11_QueueType Int32
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32

Event ID 240:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_NULL Pointer
A11_QueueType Int32
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32

Event ID 241:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_GenericWorkItem Pointer
A11_qtype Int32
A12_fltObject Pointer
A13_GenericWorkItemGenericWorkerRoutine Pointer
A14_GenericWorkItemContext Pointer
A15_GenericWorkItemIoPriorityInfoIoPriority Int32

Event ID 242:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_DeferredWorkItem Pointer
A11_qtype Int32
A12_instance Pointer
A13_DeferredWorkItemDeferredWorkerRoutine Pointer
A14_DeferredWorkItemContext Pointer
A15_DeferredWorkItemIoPriorityInfoIoPriority Int32

Event ID 243:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWorkItem Pointer
A11_FltWorkItemQueueType Int32
A12_FltWorkItemFltObject Pointer
A13_FltWorkItemGenericWorkerRoutine Pointer
A14_FltWorkItemContext Pointer

Event ID 244:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWorkItem Pointer
A11_FltWorkItemQueueType Int32
A12_FltWorkItemInstance Pointer
A13_FltWorkItemDeferredWorkerRoutine Pointer
A14_FltWorkItemContext Pointer

Event ID 245:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWorkItem Pointer
A11_QueueType Int32
A12_FltObject Pointer
A13_WorkerRoutine Pointer
A14_Context Pointer
A15_FltWorkItemIoPriorityInfoIoPriority Int32

Event ID 246:

#
Provider
Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
Channel
Operational

Fields #

NameDescription
FUNC AnsiString
A10_FltWorkItem Pointer
A11_QueueType Int32
A12_FltWorkItemInstance Pointer
A13_WorkerRoutine Pointer
A14_Context Pointer
A15_FltWorkItemIoPriorityInfoIoPriority Int32