Microsoft-Windows-Kernel-PnP-Rundown

4 events across 1 channel

Event IDTitleChannel
1Operational
2Operational
3Operational
4Operational

Event ID 1 —

Provider
Microsoft-Windows-Kernel-PnP-Rundown
Channel
Operational
Task
ConnectionResourceConsumer

Fields #

NameDescription
ResourceConsumerPdo Pointer
ConnectionId HexInt64
ResourceConsumerInstancePathLength UInt32
ResourceConsumerInstancePath UnicodeString

Event ID 2 —

Provider
Microsoft-Windows-Kernel-PnP-Rundown
Channel
Operational
Task
ParentPdo

Fields #

NameDescription
Pdo Pointer
ParentPdo Pointer

Event ID 3 —

Provider
Microsoft-Windows-Kernel-PnP-Rundown
Channel
Operational
Task
ParentDevNode

Fields #

NameDescription
DevNode Pointer
ParentDevNode Pointer
InstancePathLength UInt32
InstancePath UnicodeString

Event ID 4 —

Provider
Microsoft-Windows-Kernel-PnP-Rundown
Channel
Operational
Task
InterruptResourceConsumer

Fields #

NameDescription
ResourceConsumerPdo Pointer
Flags UInt16
Group UInt16
Vector UInt16
Affinity HexInt64
InterruptResourceConsumerInstancePathLength UInt32
InterruptResourceConsumerInstancePath UnicodeString