detection.wiki
?
Blog
Labs
References
Microsoft-Windows-PortableDeviceStatusProvider
20 events across 1 channel
Event ID
Title
Channel
500
Analytic
501
Analytic
502
Analytic
503
Analytic
504
Analytic
505
Analytic
506
Analytic
507
Analytic
510
Analytic
511
Analytic
514
Analytic
515
Analytic
516
Analytic
517
Analytic
518
Analytic
519
Analytic
520
Analytic
521
Analytic
522
Analytic
523
Analytic
Event ID 500 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
DLLLifetime
Opcode
Start
Event ID 501 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
DLLLifetime
Opcode
Stop
Event ID 502 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
AllSourcesCreation
Opcode
Start
Event ID 503 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
AllSourcesCreation
Opcode
Stop
Event ID 504 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
WPDSourcesCreation
Opcode
Start
Event ID 505 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
WPDSourcesCreation
Opcode
Stop
Event ID 506 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
SyncSourcesCreation
Opcode
Start
Event ID 507 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
SyncSourcesCreation
Opcode
Stop
Event ID 510 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetDeviceStatusService
Opcode
Start
Event ID 511 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetDeviceStatusService
Opcode
Stop
Event ID 514 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetBattery
Opcode
Start
Event ID 515 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetBattery
Opcode
Stop
Event ID 516 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetStorage
Opcode
Start
Event ID 517 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetStorage
Opcode
Stop
Event ID 518 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetStatusServiceProperties
Opcode
Start
Event ID 519 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
GetStatusServiceProperties
Opcode
Stop
Event ID 520 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
UpdateSyncProperties
Opcode
Start
Event ID 521 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
UpdateSyncProperties
Opcode
Stop
Event ID 522 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
SyncSourcesCreation
Opcode
Start
Event ID 523 —
Provider
Microsoft-Windows-PortableDeviceStatusProvider
Channel
Analytic
Task
SyncSourcesCreation
Opcode
Stop
Keyboard Shortcuts
j
/
k
Scroll down / up
d
/
u
Half-page down / up
h
/
l
Go back / forward
g
g
Go to top
G
Go to bottom
f
Follow link (SHIFT = new tab)
/
Focus search
?
Toggle this help
See
Navigation Reference
for search modifiers and filters.