Microsoft-Windows-OOBE-Machine-Core

5 events across 1 channel

Event ID	Title	Channel
5004		Diagnostic
5041		Diagnostic
5042		Diagnostic
5043		Diagnostic
5044		Diagnostic

Event ID 5004 —

Provider: Microsoft-Windows-OOBE-Machine-Core
Channel: Diagnostic
Task: ServiceStartResult

Fields #

Name	Description
`Service` UnicodeString	—
`DWORD` UInt32	—
`Started` Boolean	—

Event ID 5041 —

Provider: Microsoft-Windows-OOBE-Machine-Core
Channel: Diagnostic
Task: MandatoryTasks
Opcode: Start

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5041
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5041

Event ID 5042 —

Provider: Microsoft-Windows-OOBE-Machine-Core
Channel: Diagnostic
Task: MandatoryTasks
Opcode: Stop

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5042
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5042

Event ID 5043 —

Provider: Microsoft-Windows-OOBE-Machine-Core
Channel: Diagnostic
Task: Finalize
Opcode: Start

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5043
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5043

Event ID 5044 —

Provider: Microsoft-Windows-OOBE-Machine-Core
Channel: Diagnostic
Task: Finalize
Opcode: Stop

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5044
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5044