detection.wiki

Microsoft-Windows-Kernel-Processor-Power › Event 55

Event ID 55 — Processor Number in group Group exposes the following power management capabilities.

Provider
Microsoft-Windows-Kernel-Processor-Power
Channel
System
Level
Informational
Task
Summary2

Description

Processor Number in group Group exposes the following power management capabilities.

Message #

Processor %2 in group %1 exposes the following power management capabilities:

Idle state type: %4 (%3 state(s))

Performance state type: %9
Nominal Frequency (MHz): %5
Maximum performance percentage: %6
Minimum performance percentage: %7
Minimum throttle percentage: %8

Fields #

NameDescription
Group UInt16—
Number UInt8—
IdleStateCount UInt32—
IdleImplementation UInt32Idle state type.
NominalFrequency UInt32Nominal Frequency (MHz).
MaximumPerformancePercent UInt32Maximum performance percentage.
MinimumPerformancePercent UInt32Minimum performance percentage.
MinimumThrottlePercent UInt32Minimum throttle percentage.
PerformanceImplementation UInt32Performance state type.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Kernel-Processor-Power",
    "guid": "0F67E49F-FE51-4E9F-B490-6F2948CC6027",
    "event_source_name": "",
    "event_id": 55,
    "version": 0,
    "level": 4,
    "task": 47,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-06T06:25:20.627495+00:00",
    "event_record_id": 1650,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 224
    },
    "channel": "System",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Group": 0,
    "Number": 3,
    "IdleStateCount": 1,
    "IdleImplementation": 1,
    "NominalFrequency": 2419,
    "MaximumPerformancePercent": 100,
    "MinimumPerformancePercent": 100,
    "MinimumThrottlePercent": 100,
    "PerformanceImplementation": 0
  },
  "message": ""
}

References #