detection.wiki

Microsoft-Windows-RTWorkQueue-Extended

23 events across 1 channel

Event IDTitleChannel
1WorkQueue Queue extended: AsyncResult=AsyncResult …RTWorkQueueExtended
2WorkQueue Extended LongRunning: RefCount workQueueID=WorkQueueID …RTWorkQueueExtended
3WorkQueue extended InvalidUsageAttempt: Platform=Platform …RTWorkQueueExtended
4WorkQueue extended InvalidCallbackAttempt: Platform=Platform Callback=Callback …RTWorkQueueExtended
5WorkQueue Extended PlatformRef: Start platform=object.RTWorkQueueExtended
6WorkQueue Extended PlatformRef: Stop platform=object.RTWorkQueueExtended
7WorkQueue Extended PlatformRef: ref platform=object ref:Count.RTWorkQueueExtended
8WorkQueue Extended RTLock: Start workQueueID=WorkQueueID.RTWorkQueueExtended
9WorkQueue Extended RTLock: Stop workQueueID=WorkQueueID.RTWorkQueueExtended
10WorkQueue Extended SetAVMode: Start group=handle mode=Mode.RTWorkQueueExtended
11WorkQueue Extended SetAVMode: Stop group=handle mode=Mode.RTWorkQueueExtended
12WorkQueue Extended RTLockAcquire: Start workQueueID=WorkQueueID.RTWorkQueueExtended
13WorkQueue Extended RTLockAcquire: Stop workQueueID=WorkQueueID.RTWorkQueueExtended
14WorkQueue Extended TimerCallback: Start object=workqueue id=WorkQueueID …RTWorkQueueExtended
15WorkQueue Extended TimerCallback: Stop object=workqueue id=WorkQueueID …RTWorkQueueExtended
16WorkQueue TimerMode: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID …RTWorkQueueExtended
17WorkQueue TimerSet: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID …RTWorkQueueExtended
18WorkQueue Extended TimerResChange: Start object=workqueue id=WorkQueueID …RTWorkQueueExtended
19WorkQueue Extended TimerResChange: Stop object=workqueue id=WorkQueueID …RTWorkQueueExtended
20WorkQueue Extended Lock: object=workqueue.RTWorkQueueExtended
21WorkQueue Extended Unlock: object=workqueue.RTWorkQueueExtended
22WorkQueue Extended Lock RefCount: object=workqueue extRefCount=ExtRefCount …RTWorkQueueExtended
24WorkQueue extended MismatchedCallbackQueues: Platform=Platform Callback=Callback …RTWorkQueueExtended

Event ID 1 — WorkQueue Queue extended: AsyncResult=AsyncResult AsyncResultVTable=AsyncResultVTable.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:QueueExtended

Description

WorkQueue Queue extended: AsyncResult=AsyncResult AsyncResultVTable=AsyncResultVTable.

Message #

WorkQueue Queue extended: AsyncResult=%1 AsyncResultVTable=%2

Fields #

NameDescription
AsyncResult Pointer—
AsyncResultVTable Pointer—

Event ID 2 — WorkQueue Extended LongRunning: RefCount workQueueID=WorkQueueID refcount=RefCount.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:ExtendedLongRunning

Description

WorkQueue Extended LongRunning: RefCount workQueueID=WorkQueueID refcount=RefCount.

Message #

WorkQueue Extended LongRunning: RefCount workQueueID=%1 refcount=%2

Fields #

NameDescription
WorkQueueID UInt32—
RefCount UInt32—

Event ID 3 — WorkQueue extended InvalidUsageAttempt: Platform=Platform WorkQueueID=WorkQueueID PrivateQueueIndex=WorkPrivateIndex.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:ExtendedInvalidUsageAttempt

Description

WorkQueue extended InvalidUsageAttempt: Platform=Platform WorkQueueID=WorkQueueID PrivateQueueIndex=WorkPrivateIndex.

Message #

WorkQueue extended InvalidUsageAttempt: Platform=%1 WorkQueueID=%2 PrivateQueueIndex=%3

Fields #

NameDescription
Platform Pointer—
WorkQueueID UInt32—
WorkPrivateIndex UInt32—

Event ID 4 — WorkQueue extended InvalidCallbackAttempt: Platform=Platform Callback=Callback WorkQueueID=WorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:ExtendedInvalidCallbackAttempt

Description

WorkQueue extended InvalidCallbackAttempt: Platform=Platform Callback=Callback WorkQueueID=WorkQueueID.

Message #

WorkQueue extended InvalidCallbackAttempt: Platform=%1 Callback=%2 WorkQueueID=%3

Fields #

NameDescription
Platform Pointer—
Callback Pointer—
WorkQueueID UInt32—

Event ID 5 — WorkQueue Extended PlatformRef: Start platform=object.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:PlatformRef
Opcode
Start

Description

WorkQueue Extended PlatformRef: Start platform=object.

Message #

WorkQueue Extended PlatformRef: Start platform=%1

Fields #

NameDescription
object Pointer—

Event ID 6 — WorkQueue Extended PlatformRef: Stop platform=object.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:PlatformRef
Opcode
Stop

Description

WorkQueue Extended PlatformRef: Stop platform=object.

Message #

WorkQueue Extended PlatformRef: Stop platform=%1

Fields #

NameDescription
object Pointer—

Event ID 7 — WorkQueue Extended PlatformRef: ref platform=object ref:Count.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:PlatformRef

Description

WorkQueue Extended PlatformRef: ref platform=object ref:Count.

Message #

WorkQueue Extended PlatformRef: ref platform=%1 ref:%2

Fields #

NameDescription
object Pointer—
Count Int32—

Event ID 8 — WorkQueue Extended RTLock: Start workQueueID=WorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:RTLock
Opcode
Start

Description

WorkQueue Extended RTLock: Start workQueueID=WorkQueueID.

Message #

WorkQueue Extended RTLock: Start workQueueID=%1

Fields #

NameDescription
WorkQueueID UInt32—

Event ID 9 — WorkQueue Extended RTLock: Stop workQueueID=WorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:RTLock
Opcode
Stop

Description

WorkQueue Extended RTLock: Stop workQueueID=WorkQueueID.

Message #

WorkQueue Extended RTLock: Stop workQueueID=%1

Fields #

NameDescription
WorkQueueID UInt32—

Event ID 10 — WorkQueue Extended SetAVMode: Start group=handle mode=Mode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:SetAVMode
Opcode
Start

Description

WorkQueue Extended SetAVMode: Start group=handle mode=Mode.

Message #

WorkQueue Extended SetAVMode: Start group=%1 mode=%2

Fields #

NameDescription
handle Pointer—
Mode UInt32—

Event ID 11 — WorkQueue Extended SetAVMode: Stop group=handle mode=Mode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:SetAVMode
Opcode
Stop

Description

WorkQueue Extended SetAVMode: Stop group=handle mode=Mode.

Message #

WorkQueue Extended SetAVMode: Stop group=%1 mode=%2

Fields #

NameDescription
handle Pointer—
Mode UInt32—

Event ID 12 — WorkQueue Extended RTLockAcquire: Start workQueueID=WorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:RTLockAcquire
Opcode
Start

Description

WorkQueue Extended RTLockAcquire: Start workQueueID=WorkQueueID.

Message #

WorkQueue Extended RTLockAcquire: Start workQueueID=%1

Fields #

NameDescription
WorkQueueID UInt32—

Event ID 13 — WorkQueue Extended RTLockAcquire: Stop workQueueID=WorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:RTLockAcquire
Opcode
Stop

Description

WorkQueue Extended RTLockAcquire: Stop workQueueID=WorkQueueID.

Message #

WorkQueue Extended RTLockAcquire: Stop workQueueID=%1

Fields #

NameDescription
WorkQueueID UInt32—

Event ID 14 — WorkQueue Extended TimerCallback: Start object=workqueue id=WorkQueueID mode=Mode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerCallback
Opcode
Start

Description

WorkQueue Extended TimerCallback: Start object=workqueue id=WorkQueueID mode=Mode.

Message #

WorkQueue Extended TimerCallback: Start object=%1 id=%2 mode=%3

Fields #

NameDescription
workqueue Pointer—
WorkQueueID UInt32—
Mode UInt32—

Event ID 15 — WorkQueue Extended TimerCallback: Stop object=workqueue id=WorkQueueID mode=Mode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerCallback
Opcode
Stop

Description

WorkQueue Extended TimerCallback: Stop object=workqueue id=WorkQueueID mode=Mode.

Message #

WorkQueue Extended TimerCallback: Stop object=%1 id=%2 mode=%3

Fields #

NameDescription
workqueue Pointer—
WorkQueueID UInt32—
Mode UInt32—

Event ID 16 — WorkQueue TimerMode: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID Mode=OldMode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerMode

Description

WorkQueue TimerMode: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID Mode=OldMode.

Message #

WorkQueue TimerMode: Set workqueue_ptr=%1 workQueueID=%2 Mode=%3

Fields #

NameDescription
WorkQueuePointer Pointer—
WorkQueueID UInt32—
OldMode UInt32—
NewMode UInt32—

Event ID 17 — WorkQueue TimerSet: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID Delta=Mode.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerSet

Description

WorkQueue TimerSet: Set workqueue_ptr=WorkQueuePointer workQueueID=WorkQueueID Delta=Mode.

Message #

WorkQueue TimerSet: Set workqueue_ptr=%1 workQueueID=%2 Delta=%3

Fields #

NameDescription
WorkQueuePointer Pointer—
WorkQueueID UInt32—
Mode UInt32—
Delta UInt32—

Event ID 18 — WorkQueue Extended TimerResChange: Start object=workqueue id=WorkQueueID mode=Resolution.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerResChange
Opcode
Start

Description

WorkQueue Extended TimerResChange: Start object=workqueue id=WorkQueueID mode=Resolution.

Message #

WorkQueue Extended TimerResChange: Start object=%1 id=%2 mode=%3

Fields #

NameDescription
workqueue Pointer—
WorkQueueID UInt32—
Resolution UInt32—

Event ID 19 — WorkQueue Extended TimerResChange: Stop object=workqueue id=WorkQueueID mode=Resolution.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:TimerResChange
Opcode
Stop

Description

WorkQueue Extended TimerResChange: Stop object=workqueue id=WorkQueueID mode=Resolution.

Message #

WorkQueue Extended TimerResChange: Stop object=%1 id=%2 mode=%3

Fields #

NameDescription
workqueue Pointer—
WorkQueueID UInt32—
Resolution UInt32—

Event ID 20 — WorkQueue Extended Lock: object=workqueue.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:Lock
Opcode
Start

Description

WorkQueue Extended Lock: object=workqueue.

Message #

WorkQueue Extended Lock: object=%1

Fields #

NameDescription
workqueue Pointer—

Event ID 21 — WorkQueue Extended Unlock: object=workqueue.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:Lock
Opcode
Stop

Description

WorkQueue Extended Unlock: object=workqueue.

Message #

WorkQueue Extended Unlock: object=%1

Fields #

NameDescription
workqueue Pointer—

Event ID 22 — WorkQueue Extended Lock RefCount: object=workqueue extRefCount=ExtRefCount IntRefCount=IntRefCount.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:Lock

Description

WorkQueue Extended Lock RefCount: object=workqueue extRefCount=ExtRefCount IntRefCount=IntRefCount.

Message #

WorkQueue Extended Lock RefCount: object=%1 extRefCount=%2 IntRefCount=%3

Fields #

NameDescription
workqueue Pointer—
ExtRefCount UInt32—
IntRefCount UInt32—

Event ID 24 — WorkQueue extended MismatchedCallbackQueues: Platform=Platform Callback=Callback WorkQueueID=WorkQueueID CallbackWorkQueue=CallbackWorkQueueID.

Provider
Microsoft-Windows-RTWorkQueue-Extended
Channel
RTWorkQueueExtended
Task
WorkQueue:ExtendedMismatchedCallbackQueues

Description

WorkQueue extended MismatchedCallbackQueues: Platform=Platform Callback=Callback WorkQueueID=WorkQueueID CallbackWorkQueue=CallbackWorkQueueID.

Message #

WorkQueue extended MismatchedCallbackQueues: Platform=%1 Callback=%2 WorkQueueID=%3 CallbackWorkQueue=%4

Fields #

NameDescription
Platform Pointer—
Callback Pointer—
WorkQueueID UInt32—
CallbackWorkQueueID UInt32—