detection.wiki

Microsoft-Windows-RPCSS

3 events across 1 channel

Event IDTitleChannel
1An error occurred.EndpointMapper
2Interface registered.EndpointMapper
3Interface unregistered.EndpointMapper

Event ID 1 — An error occurred.

Provider
Microsoft-Windows-RPCSS
Channel
EndpointMapper

Description

An error occurred.

Message #

An error occurred. 
	DetectionLocation: %1 
	Status: %2 
	AddionalData: %3 
	AdditionalData: %4

Fields #

NameDescription
DetectionLocation UInt16—
Status HexInt32— NTSTATUS reference
AddionalData HexInt32—
AdditionalData HexInt32—
AdditionalData1 HexInt32—
AdditionalData2 HexInt32—

Event ID 2 — Interface registered.

Provider
Microsoft-Windows-RPCSS
Channel
EndpointMapper

Description

Interface registered.

Message #

Interface registered. 
	InterfaceUuid: %1 
	ObjectUuid: %2 
	Protocol: %3 
	Endpoint: %4

Fields #

NameDescription
InterfaceUuid GUID—
ObjectUuid GUID—
Protocol AnsiString—
Known values
0
HOPOPT
1
ICMP
2
IGMP
6
TCP
17
UDP
41
IPv6
43
IPv6-Route
44
IPv6-Frag
47
GRE
50
ESP
51
AH
58
ICMPv6
89
OSPF
103
PIM
132
SCTP
Endpoint AnsiString—
InterfaceUUID GUID—
ObjectUUID GUID—
EndPoint AnsiString—

Event ID 3 — Interface unregistered.

Provider
Microsoft-Windows-RPCSS
Channel
EndpointMapper

Description

Interface unregistered.

Message #

Interface unregistered. 
	InterfaceUuid: %1 
	ObjectUuid: %2 
	Protocol: %3 
	Endpoint: %4

Fields #

NameDescription
InterfaceUuid GUID—
ObjectUuid GUID—
Protocol AnsiString—
Known values
0
HOPOPT
1
ICMP
2
IGMP
6
TCP
17
UDP
41
IPv6
43
IPv6-Route
44
IPv6-Frag
47
GRE
50
ESP
51
AH
58
ICMPv6
89
OSPF
103
PIM
132
SCTP
Endpoint AnsiString—
InterfaceUUID GUID—
ObjectUUID GUID—
EndPoint AnsiString—