detection.wiki

Microsoft-Windows-PushNotifications-Platform › Event 1254

Event ID 1254 — WNP Transport Layer for ConnectionType detected preferred interface change.

Provider
Microsoft-Windows-PushNotifications-Platform
Channel
Operational
Level
Informational
Opcode
Info

Description

WNP Transport Layer for ConnectionType detected preferred interface change. Old index OldIndex, old address family OldAddressFamily. New index NewIndex, new address family NewAddressFamily, NDIS_PHYSICAL_MEDIUM NewPhysicalMediumType.

Message #

WNP Transport Layer for %1 detected preferred interface change. Old index %2, old address family %3. New index %4, new address family %5, NDIS_PHYSICAL_MEDIUM %6.

Fields #

NameDescription
ConnectionType UInt32—
OldIndex UInt32—
OldAddressFamily UInt32—
NewIndex UInt32—
NewAddressFamily UInt32—
NewPhysicalMediumType UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-PushNotifications-Platform",
    "guid": "88CD9180-4491-4640-B571-E3BEE2527943",
    "event_source_name": "",
    "event_id": 1254,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036858970112,
    "time_created": "2023-11-05T22:33:26.761426+00:00",
    "event_record_id": 2462,
    "correlation": {
      "ActivityID": "E4DB489E-1037-0003-9850-DBE43710DA01"
    },
    "execution": {
      "process_id": 3380,
      "thread_id": 5052
    },
    "channel": "Microsoft-Windows-PushNotification-Platform/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ConnectionType": 0,
    "OldIndex": 0,
    "OldAddressFamily": 0,
    "NewIndex": 9,
    "NewAddressFamily": 0,
    "NewPhysicalMediumType": 14
  },
  "message": ""
}

References #