Microsoft-Windows-Kernel-Memory
14 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 1 | Analytic | |
| 2 | Analytic | |
| 3 | Analytic | |
| 4 | Analytic | |
| 5 | Analytic | |
| 6 | Analytic | |
| 7 | Analytic | |
| 8 | Analytic | |
| 9 | Analytic | |
| 10 | Analytic | |
| 11 | Analytic | |
| 12 | Analytic | |
| 13 | Analytic | |
| 14 | Analytic |
Event ID 1 —
Fields
| Name | Description |
|---|---|
PriorityLevels | — |
ZeroPageCount | — |
FreePageCount | — |
ModifiedPageCount | — |
ModifiedNoWritePageCount | — |
BadPageCount | — |
StandbyPageCounts | — |
RepurposedPageCounts | — |
ModifiedPageCountPageFile | — |
PagedPoolPageCount | — |
NonPagedPoolPageCount | — |
MdlPageCount | — |
CommitPageCount | — |
Event ID 2 —
Fields
| Name | Description |
|---|---|
Count | — |
WSCommitInfo | — |
Event ID 3 —
Fields
| Name | Description |
|---|---|
Count | — |
SessionWSCommitInfo | — |
Event ID 4 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
Flags | — |
Event ID 5 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
Status | — |
PagesProcessed | — |
WriteCombinePagesProcessed | — |
UncachedPagesProcessed | — |
CleanPagesProcessed | — |
Event ID 6 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
Flags | — |
Event ID 7 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
Status | — |
Event ID 8 —
Fields
| Name | Description |
|---|---|
AcgFlag | — |
Event ID 9 —
Fields
| Name | Description |
|---|---|
ProcessId | — |
Status | — |
Event ID 10 —
Fields
| Name | Description |
|---|---|
DurationInMicroseconds | — |
TotalBytes | — |
LowAddress | — |
HighAddress | — |
SkipBytes | — |
MemoryDescriptorList | — |
IdealNode | — |
Flags | — |
Event ID 11 —
Fields
| Name | Description |
|---|---|
DurationInMicroseconds | — |
TotalBytes | — |
LowAddress | — |
HighAddress | — |
Boundary | — |
PhysicalAddress | — |
MappedAddress | — |
ProtectionMask | — |
PreferredNode | — |
PartitionId | — |
Tag | — |
Flags | — |
AllocatedFromPool | — |
AllocatedFromExtension | — |
Event ID 12 —
Fields
| Name | Description |
|---|---|
PartitionId | — |
Count | — |
MemoryNodeInfo | — |
Event ID 13 —
Fields
| Name | Description |
|---|---|
PartitionId | — |
Count | — |
MemoryNodeInfo | — |
Event ID 14 —
Fields
| Name | Description |
|---|---|
BaseAddress | — |
Size | — |