Microsoft-Windows-IsolatedUserMode

5 events across 1 channel

Event ID 1 — Secure Trustlet %4 Id %1 and Pid %2 started with status %3.

Provider
Microsoft-Windows-IsolatedUserMode
Channel
System

Message

Secure Trustlet %4 Id %1 and Pid %2 started with status %3.

Fields

NameDescription
TrustletIdentity
NormalProcessId
Status
ImageName

Event ID 2 — Secure Trustlet Id %1 and Pid %2 stopped with status %3.

Provider
Microsoft-Windows-IsolatedUserMode
Channel
System

Message

Secure Trustlet Id %1 and Pid %2 stopped with status %3.

Fields

NameDescription
TrustletIdentity
NormalProcessId
Status

Event ID 3 — Secure Kernel started with status %1 and flags %2.

Provider
Microsoft-Windows-IsolatedUserMode
Channel
System

Message

Secure Kernel started with status %1 and flags %2.

Fields

NameDescription
Status
Flags

Event ID 4 — Secure Trustlet Id %1 and Pid %2 failed to start with status %3.

Provider
Microsoft-Windows-IsolatedUserMode
Channel
System

Message

Secure Trustlet Id %1 and Pid %2 failed to start with status %3.

Fields

NameDescription
TrustletIdentity
NormalProcessId
Status

Event ID 5 — Secure Trustlet %4 Id %1 and Pid %2 started with status %3.

Provider
Microsoft-Windows-IsolatedUserMode
Channel
System

Message

Secure Trustlet %4 Id %1 and Pid %2 started with status %3.

Fields

NameDescription
TrustletIdentity
NormalProcessId
Status
ImageName