Microsoft-Windows-Kernel-Disk

3 events across 1 channel

Event ID	Title	Channel
10	TransferSize bytes read from disk DiskNumber at ByteOffset.	Analytic
11	TransferSize bytes written to disk DiskNumber at ByteOffset.	Analytic
14	Buffers flushed to disk DiskNumber.	Analytic

Event ID 10 — TransferSize bytes read from disk DiskNumber at ByteOffset.

Provider: Microsoft-Windows-Kernel-Disk
Channel: Analytic

Description

TransferSize bytes read from disk DiskNumber at ByteOffset.

Message #

%3 bytes read from disk %1 at %5.

Fields #

Name	Description
`DiskNumber` UInt32	—
`IrpFlags` HexInt32	—
`TransferSize` UInt32	—
`Reserved` UInt32	—
`ByteOffset` UInt64	—
`FileObject` Pointer	—
`IORequestPacket` Pointer	—
`HighResResponseTime` UInt64	—

Event ID 11 — TransferSize bytes written to disk DiskNumber at ByteOffset.

Provider: Microsoft-Windows-Kernel-Disk
Channel: Analytic

Description

TransferSize bytes written to disk DiskNumber at ByteOffset.

Message #

%3 bytes written to disk %1 at %5.

Fields #

Name	Description
`DiskNumber` UInt32	—
`IrpFlags` HexInt32	—
`TransferSize` UInt32	—
`Reserved` UInt32	—
`ByteOffset` UInt64	—
`FileObject` Pointer	—
`IORequestPacket` Pointer	—
`HighResResponseTime` UInt64	—

Event ID 14 — Buffers flushed to disk DiskNumber.

Provider: Microsoft-Windows-Kernel-Disk
Channel: Analytic

Description

Buffers flushed to disk DiskNumber.

Message #

Buffers flushed to disk %1.

Fields #

Name	Description
`DiskNumber` UInt32	—
`IrpFlags` HexInt32	—
`HighResResponseTime` UInt64	—
`IORequestPacket` Pointer	—