Event ID 1310 — WNP Transport Layer for ConnectionType detected first fallback interface change.
Description
WNP Transport Layer for ConnectionType detected first fallback interface change. Old index OldIndex, old address family OldAddressFamily. New index NewIndex, new address family NewAddressFamily, NDIS_PHYSICAL_MEDIUM NewPhysicalMediumType.
Message #
Fields #
| Name | Description |
|---|---|
ConnectionType UInt32 | — |
OldIndex UInt32 | — |
OldAddressFamily UInt32 | — |
NewIndex UInt32 | — |
NewAddressFamily UInt32 | — |
NewPhysicalMediumType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-PushNotifications-Platform",
"guid": "88CD9180-4491-4640-B571-E3BEE2527943",
"event_source_name": "",
"event_id": 1310,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036858970112,
"time_created": "2023-11-05T22:33:26.761428+00:00",
"event_record_id": 2463,
"correlation": {
"ActivityID": "E4DB489E-1037-0003-9850-DBE43710DA01"
},
"execution": {
"process_id": 3380,
"thread_id": 5052
},
"channel": "Microsoft-Windows-PushNotification-Platform/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"ConnectionType": 0,
"OldIndex": 0,
"OldAddressFamily": 0,
"NewIndex": 4,
"NewAddressFamily": 0,
"NewPhysicalMediumType": 14
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline