Microsoft-Windows-OverlayFilter

19 events across 1 channel

Event ID 24832 — The filter failed to open the integrity file for %2 (data source %3) with status %4.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The filter failed to open the integrity file for %2 (data source %3) with status %4.

Fields

NameDescription
FileNameLength
FileNameBuffer
DataSourceId
Status

Event ID 24833 — The filter failed to validate block %3 of length %4 from %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The filter failed to validate block %3 of length %4 from %2.

Fields

NameDescription
FileNameLength
FileNameBuffer
BlockNumber
BlockLength

Event ID 24834 — The filter failed to validate a read from %2 at file offset %3 of length %4.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The filter failed to validate a read from %2 at file offset %3 of length %4.

Fields

NameDescription
FileNameLength
FileNameBuffer
FileOffset
ReadSize

Event ID 24835 — The task is enumerating Volume %1.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task is enumerating Volume %1

Fields

NameDescription
volume

Event ID 24836 — The task has failed to report integrity file generation completion to BitLocker.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to report integrity file generation completion to BitLocker. HRESULT = %1

Fields

NameDescription
hr

Event ID 24837 — The task has created integrity file %1 for file %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has created integrity file %1 for file %2

Fields

NameDescription
wimHashFile
wimFile

Event ID 24838 — The task has completed generation of integrity file %1 for file %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has completed generation of integrity file %1 for file %2

Fields

NameDescription
wimHashFile
wimFile

Event ID 24839 — The task has deleted integrity file %1 for file %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has deleted integrity file %1 for file %2

Fields

NameDescription
wimHashFile
wimFile

Event ID 24840 — The task is resuming generation of integrity file %1 at file offset %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task is resuming generation of integrity file %1 at file offset %2

Fields

NameDescription
filename
offset

Event ID 24841 — The task has paused generation of integrity file %1 at file offset %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has paused generation of integrity file %1 at file offset %2

Fields

NameDescription
filename
offset

Event ID 24842 — The task has failed to identify encryption/decryption state.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to identify encryption/decryption state. HRESULT = %1

Fields

NameDescription
hr

Event ID 24843 — The task has failed to generate integrity file %1 for file %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to generate integrity file %1 for file %2. HRESULT = %3

Fields

NameDescription
wimHashFile
wimFile
hr

Event ID 24844 — The task has failed to delete integrity file %1 for file %2.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to delete integrity file %1 for file %2. HRESULT = %3

Fields

NameDescription
wimHashFile
wimFile
hr

Event ID 24845 — The task has failed to read file at %1.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to read file at %1. HRESULT = %3

Fields

NameDescription
wimHashFile
wimFile
hr

Event ID 24846 — The task has failed to write file at %1.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task has failed to write file at %1. HRESULT = %3

Fields

NameDescription
wimHashFile
wimFile
hr

Event ID 24847 — The filter opened the integrity file for %2 (data source %3).

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The filter opened the integrity file for %2 (data source %3).

Fields

NameDescription
FileNameLength
FileNameBuffer
DataSourceId

Event ID 24848 — The filter did not open the integrity file for %2 (data source %3) because it is not ready.

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The filter did not open the integrity file for %2 (data source %3) because it is not ready.

Fields

NameDescription
FileNameLength
FileNameBuffer
DataSourceId

Event ID 24849 — The task is generating integrity files

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task is generating integrity files

Event ID 24850 — The task is deleting integrity files

Provider
Microsoft-Windows-OverlayFilter
Channel
System

Message

The task is deleting integrity files