detection.wiki

Microsoft-Windows-PCRPF

34 events across 3 channels

Event IDTitleChannel
257Operational
257A new transform 'TransformName' of timeline TransformTimeline was staged.PCRPF
258Operational
258Transform 'TransformName' of timeline TransformTimeline was not staged because …PCRPF
259Operational
259Transform 'TransformName' of timeline TransformTimeline could not be staged.PCRPF
260Operational
260Transform 'TransformName' was cancelled.PCRPF
261Operational
261Transform 'TransformName' of timeline TransformTimeline was removed because it …PCRPF
262Operational
262Transform 'TransformName' of timeline TransformTimeline was removed because it …PCRPF
263Operational
263Subscriber 'SubscriberName' was successfully notified for …PCRPF
264Operational
264Subscriber 'SubscriberName' failed on notification for …PCRPF
265Operational
265NumberOfPredictions predictions were fetched for transforms 'TransformList' and …PCRPF
266Operational
266A transform for a firmware update was staged.PCRPF
267Operational
267PCRs FirmwarePcrChangeMask have been excluded or marked to be excluded from …PCRPF
268Operational
268Firmware update reduced PCR profile state has been cleaned up.PCRPF
269Operational
269An error occurred during an activity: 'ActivityName'.PCRPF
270Operational
270A firmware update was staged, but PCR Prediction Framework could not process it …System
271Operational
271Transform 'TransformName' of timeline TransformTimeline was removed because the …PCRPF
272Operational
272Transforms were finalized for pending commit with USN USN.PCRPF
273Operational
273Transforms were committed with USN USN.PCRPF

Event ID 257 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

A new transform 'TransformName' of timeline TransformTimeline was staged.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 257 — A new transform 'TransformName' of timeline TransformTimeline was staged.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

A new transform 'TransformName' of timeline TransformTimeline was staged.

Message #

A new transform '%1' of timeline %2 was staged.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 258 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' of timeline TransformTimeline was not staged because it has no effect.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 258 — Transform 'TransformName' of timeline TransformTimeline was not staged because it has no effect.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' of timeline TransformTimeline was not staged because it has no effect.

Message #

Transform '%1' of timeline %2 was not staged because it has no effect.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 259 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' of timeline TransformTimeline could not be staged. Error: ErrorCode.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—
ErrorCode Int32—

Event ID 259 — Transform 'TransformName' of timeline TransformTimeline could not be staged.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' of timeline TransformTimeline could not be staged. Error: ErrorCode.

Message #

Transform '%1' of timeline %2 could not be staged. Error: %3.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—
ErrorCode Int32—

Event ID 260 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' was cancelled.

Fields #

NameDescription
TransformName UnicodeString—

Event ID 260 — Transform 'TransformName' was cancelled.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' was cancelled.

Message #

Transform '%1' was cancelled.

Fields #

NameDescription
TransformName UnicodeString—

Event ID 261 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' of timeline TransformTimeline was removed because it is now reflected in the system state.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 261 — Transform 'TransformName' of timeline TransformTimeline was removed because it is now reflected in the system state.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' of timeline TransformTimeline was removed because it is now reflected in the system state.

Message #

Transform '%1' of timeline %2 was removed because it is now reflected in the system state.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 262 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' of timeline TransformTimeline was removed because it is no longer applicable. Error: ErrorCode.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—
ErrorCode Int32—

Event ID 262 — Transform 'TransformName' of timeline TransformTimeline was removed because it is no longer applicable.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' of timeline TransformTimeline was removed because it is no longer applicable. Error: ErrorCode.

Message #

Transform '%1' of timeline %2 was removed because it is no longer applicable. Error: %3.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—
ErrorCode Int32—

Event ID 263 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Subscriber 'SubscriberName' was successfully notified for SubscriberNotificationScenario.

Fields #

NameDescription
SubscriberName UnicodeString—
SubscriberNotificationScenario UInt32—

Event ID 263 — Subscriber 'SubscriberName' was successfully notified for SubscriberNotificationScenario.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Subscriber 'SubscriberName' was successfully notified for SubscriberNotificationScenario.

Message #

Subscriber '%1' was successfully notified for %2.

Fields #

NameDescription
SubscriberName UnicodeString—
SubscriberNotificationScenario UInt32—

Event ID 264 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Subscriber 'SubscriberName' failed on notification for SubscriberNotificationScenario. Error: ErrorCode.

Fields #

NameDescription
SubscriberName UnicodeString—
SubscriberNotificationScenario UInt32—
ErrorCode Int32—

Event ID 264 — Subscriber 'SubscriberName' failed on notification for SubscriberNotificationScenario.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Subscriber 'SubscriberName' failed on notification for SubscriberNotificationScenario. Error: ErrorCode.

Message #

Subscriber '%1' failed on notification for %2. Error: %3.

Fields #

NameDescription
SubscriberName UnicodeString—
SubscriberNotificationScenario UInt32—
ErrorCode Int32—

Event ID 265 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

NumberOfPredictions predictions were fetched for transforms 'TransformList' and PCRs PcrBitmap. USN: USN, Matching PCRs: CurrentBootMatchingPcrsBitmap.

Fields #

NameDescription
NumberOfPredictions UInt32—
TransformList UnicodeString—
PcrBitmap UInt32—
USN UInt64—
CurrentBootMatchingPcrsBitmap UInt32—

Event ID 265 — NumberOfPredictions predictions were fetched for transforms 'TransformList' and PCRs PcrBitmap.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

NumberOfPredictions predictions were fetched for transforms 'TransformList' and PCRs PcrBitmap. USN: USN, Matching PCRs: CurrentBootMatchingPcrsBitmap.

Message #

%1 predictions were fetched for transforms '%2' and PCRs %3. USN: %4, Matching PCRs: %5.

Fields #

NameDescription
NumberOfPredictions UInt32—
TransformList UnicodeString—
PcrBitmap UInt32—
USN UInt64—
CurrentBootMatchingPcrsBitmap UInt32—

Event ID 266 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

A transform for a firmware update was staged. DeviceDesc: , DeviceInstanceId: , FirmwareResourceId: , MeasurementsFilename: .

Fields #

NameDescription
DeviceDesc UnicodeString—
DeviceInstanceId UnicodeString—
FirmwareResourceId UnicodeString—
MeasurementsFilename UnicodeString—

Event ID 266 — A transform for a firmware update was staged.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

A transform for a firmware update was staged. DeviceDesc: DeviceDesc, DeviceInstanceId: DeviceInstanceId, FirmwareResourceId: FirmwareResourceId, MeasurementsFilename: MeasurementsFilename.

Message #

A transform for a firmware update was staged. DeviceDesc: %1, DeviceInstanceId: %2, FirmwareResourceId: %3, MeasurementsFilename: %4.

Fields #

NameDescription
DeviceDesc UnicodeString—
DeviceInstanceId UnicodeString—
FirmwareResourceId UnicodeString—
MeasurementsFilename UnicodeString—

Event ID 267 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

PCRs have been excluded or marked to be excluded from BitLocker's TPM protector as required by a firmware update: DeviceDesc: , DeviceInstanceId: , FirmwareResourceId: .

Fields #

NameDescription
FirmwarePcrChangeMask UInt32—
DeviceDesc UnicodeString—
DeviceInstanceId UnicodeString—
FirmwareResourceId UnicodeString—

Event ID 267 — PCRs FirmwarePcrChangeMask have been excluded or marked to be excluded from BitLocker's TPM protector as required by a firmware update: DeviceDesc: DeviceDesc, DeviceInstance...

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

PCRs FirmwarePcrChangeMask have been excluded or marked to be excluded from BitLocker's TPM protector as required by a firmware update: DeviceDesc: DeviceDesc, DeviceInstanceId: DeviceInstanceId, FirmwareResourceId: FirmwareResourceId.

Message #

PCRs %1 have been excluded or marked to be excluded from BitLocker's TPM protector as required by a firmware update: DeviceDesc: %2, DeviceInstanceId: %3, FirmwareResourceId: %4.

Fields #

NameDescription
FirmwarePcrChangeMask UInt32—
DeviceDesc UnicodeString—
DeviceInstanceId UnicodeString—
FirmwareResourceId UnicodeString—

Event ID 268 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Firmware update reduced PCR profile state has been cleaned up.

Event ID 268 — Firmware update reduced PCR profile state has been cleaned up.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Firmware update reduced PCR profile state has been cleaned up.

Message #

Firmware update reduced PCR profile state has been cleaned up.

Event ID 269 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

An error occurred during an activity: 'ActivityName'. Error: ErrorCode.

Fields #

NameDescription
ActivityName UnicodeString—
ErrorCode Int32—

Event ID 269 — An error occurred during an activity: 'ActivityName'.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

An error occurred during an activity: 'ActivityName'. Error: ErrorCode.

Message #

An error occurred during an activity: '%1'. Error: %2.

Fields #

NameDescription
ActivityName UnicodeString—
ErrorCode Int32—

Event ID 270 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

A firmware update was staged, but PCR Prediction Framework could not process it successfully. Error: .

Fields #

NameDescription
ErrorCode Int32—

Event ID 270 — A firmware update was staged, but PCR Prediction Framework could not process it successfully.

Provider
Microsoft-Windows-PCRPF
Channel
System

Description

A firmware update was staged, but PCR Prediction Framework could not process it successfully. Error: ErrorCode.

Message #

A firmware update was staged, but PCR Prediction Framework could not process it successfully. Error: %1.

Fields #

NameDescription
ErrorCode Int32—

Event ID 271 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transform 'TransformName' of timeline TransformTimeline was removed because the system booted into a new boot session.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 271 — Transform 'TransformName' of timeline TransformTimeline was removed because the system booted into a new boot session.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transform 'TransformName' of timeline TransformTimeline was removed because the system booted into a new boot session.

Message #

Transform '%1' of timeline %2 was removed because the system booted into a new boot session.

Fields #

NameDescription
TransformName UnicodeString—
TransformTimeline UInt32—

Event ID 272 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transforms were finalized for pending commit with USN .

Fields #

NameDescription
USN UInt64—

Event ID 272 — Transforms were finalized for pending commit with USN USN.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transforms were finalized for pending commit with USN USN.

Message #

Transforms were finalized for pending commit with USN %1.

Fields #

NameDescription
USN UInt64—

Event ID 273 —

Provider
Microsoft-Windows-PCRPF
Channel
Operational

Description

Transforms were committed with USN .

Fields #

NameDescription
USN UInt64—

Event ID 273 — Transforms were committed with USN USN.

Provider
Microsoft-Windows-PCRPF
Channel
PCRPF

Description

Transforms were committed with USN USN.

Message #

Transforms were committed with USN %1.

Fields #

NameDescription
USN UInt64—