Microsoft-Windows-KernelStreaming

30 events across 3 channels

Event IDTitleChannel
200KS_PnpAddDevice Start.Operational
200KS_PnpAddDevice Start.WINDOWS_KS_CHANNEL
201KS_PnpAddDevice Stop.Operational
201KS_PnpAddDevice Stop.WINDOWS_KS_CHANNEL
202KS_StreamingRequest Start, pIrp: %1.WINDOWS_KS_CHANNEL
202KS_StreamingRequest Start, pIrp.Analytic
203KS_StreamingRequest Stop, pIrp: %1.WINDOWS_KS_CHANNEL
203KS_StreamingRequest Stop, pIrp.Analytic
204KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.Operational
204KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.WINDOWS_KS_CHANNEL
205KS_CameraGrab Stop, Status: %1.WINDOWS_KS_CHANNEL
205KS_CameraGrab Stop, Status.Operational
206KS_WNF Register.Operational
206KS_WNF Register.WINDOWS_KS_CHANNEL
207KS_WNF Unregister.Operational
207KS_WNF Unregister.WINDOWS_KS_CHANNEL
208KS_WNFPinState Update, FilterExt: %1, PinState: %2.Operational
208KS_WNFPinState Update, FilterExt: %1, PinState: %2.WINDOWS_KS_CHANNEL
209KS_WNFNotification Fire, EntryCount: %1.WINDOWS_KS_CHANNEL
209KS_WNFNotification Fire, EntryCount.Operational
210KS_DisplayOff StopStreams.Operational
210KS_DisplayOff StopStreams.WINDOWS_KS_CHANNEL
211KS_IoProbeandLock Start, PinId: %1, BufSize: %2.Analytic
211KS_IoProbeandLock Start, PinId: %1, BufSize: %2.WINDOWS_KS_CHANNEL
212KS_IoProbeandLock End, PinId: %1, BufSize: %2.Analytic
212KS_IoProbeandLock End, PinId: %1, BufSize: %2.WINDOWS_KS_CHANNEL
213KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.Operational
213KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.WINDOWS_KS_CHANNEL
214KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.Operational
214KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.WINDOWS_KS_CHANNEL

Event ID 200 — KS_PnpAddDevice Start.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_PnpAddDevice Start.

Event ID 200 — KS_PnpAddDevice Start.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_PnpAddDevice Start.

Event ID 201 — KS_PnpAddDevice Stop.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_PnpAddDevice Stop.

Event ID 201 — KS_PnpAddDevice Stop.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_PnpAddDevice Stop.

Event ID 202 — KS_StreamingRequest Start, pIrp: %1.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_StreamingRequest Start, pIrp: %1.

Fields

NameDescription
pIrp

Event ID 202 — KS_StreamingRequest Start, pIrp.

Provider
Microsoft-Windows-KernelStreaming
Channel
Analytic

Message

KS_StreamingRequest Start, pIrp: %1.

Fields

NameDescription
pIrp

Event ID 203 — KS_StreamingRequest Stop, pIrp: %1.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_StreamingRequest Stop, pIrp: %1.

Fields

NameDescription
pIrp

Event ID 203 — KS_StreamingRequest Stop, pIrp.

Provider
Microsoft-Windows-KernelStreaming
Channel
Analytic

Message

KS_StreamingRequest Stop, pIrp: %1.

Fields

NameDescription
pIrp

Event ID 204 — KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.

Fields

NameDescription
ProcessId
PinId
FilterAddress

Event ID 204 — KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_CameraGrab Start, ProcessId: %1, PinId: %2, FilterAddress: %3.

Fields

NameDescription
ProcessId
PinId
FilterAddress

Event ID 205 — KS_CameraGrab Stop, Status: %1.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_CameraGrab Stop, Status: %1.

Fields

NameDescription
Status

Event ID 205 — KS_CameraGrab Stop, Status.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_CameraGrab Stop, Status: %1.

Fields

NameDescription
Status

Event ID 206 — KS_WNF Register.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_WNF Register.

Event ID 206 — KS_WNF Register.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_WNF Register.

Event ID 207 — KS_WNF Unregister.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_WNF Unregister.

Event ID 207 — KS_WNF Unregister.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_WNF Unregister.

Event ID 208 — KS_WNFPinState Update, FilterExt: %1, PinState: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_WNFPinState Update, FilterExt: %1, PinState: %2.

Fields

NameDescription
FilterExt
PinState

Event ID 208 — KS_WNFPinState Update, FilterExt: %1, PinState: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_WNFPinState Update, FilterExt: %1, PinState: %2.

Fields

NameDescription
FilterExt
PinState

Event ID 209 — KS_WNFNotification Fire, EntryCount: %1.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_WNFNotification Fire, EntryCount: %1.

Fields

NameDescription
EntryCount

Event ID 209 — KS_WNFNotification Fire, EntryCount.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_WNFNotification Fire, EntryCount: %1.

Fields

NameDescription
EntryCount

Event ID 210 — KS_DisplayOff StopStreams.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_DisplayOff StopStreams.

Event ID 210 — KS_DisplayOff StopStreams.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_DisplayOff StopStreams.

Event ID 211 — KS_IoProbeandLock Start, PinId: %1, BufSize: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
Analytic

Message

KS_IoProbeandLock Start, PinId: %1, BufSize: %2.

Fields

NameDescription
PinId
BufSize

Event ID 211 — KS_IoProbeandLock Start, PinId: %1, BufSize: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_IoProbeandLock Start, PinId: %1, BufSize: %2.

Fields

NameDescription
PinId
BufSize

Event ID 212 — KS_IoProbeandLock End, PinId: %1, BufSize: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
Analytic

Message

KS_IoProbeandLock End, PinId: %1, BufSize: %2.

Fields

NameDescription
PinId
BufSize

Event ID 212 — KS_IoProbeandLock End, PinId: %1, BufSize: %2.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_IoProbeandLock End, PinId: %1, BufSize: %2.

Fields

NameDescription
PinId
BufSize

Event ID 213 — KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Fields

NameDescription
pKsDevice
pIrp
InterfaceGuid
Status

Event ID 213 — KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_QueryInterface Start, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Fields

NameDescription
pKsDevice
pIrp
InterfaceGuid
Status

Event ID 214 — KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Provider
Microsoft-Windows-KernelStreaming
Channel
Operational

Message

KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Fields

NameDescription
pKsDevice
pIrp
InterfaceGuid
Status

Event ID 214 — KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Provider
Microsoft-Windows-KernelStreaming
Channel
WINDOWS_KS_CHANNEL

Message

KS_QueryInterface Stop, pKsDevice: %1, pIrp: %2, InterfaceGuid: %3, Status: %4.

Fields

NameDescription
pKsDevice
pIrp
InterfaceGuid
Status