Microsoft-Windows-Shsvcs

14 events across 1 channel

Event IDTitleChannel
11501Diagnostic
11502Diagnostic
11503Diagnostic
11504Diagnostic
11505Diagnostic
11506Diagnostic
11507Diagnostic
11508Diagnostic
11509Diagnostic
11510Diagnostic
11511Diagnostic
11512Diagnostic
11513Diagnostic
11514Diagnostic

Event ID 11501 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Service_Start
Opcode
Start

Event ID 11502 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Service_Start
Opcode
Stop

Event ID 11503 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Service_Stop
Opcode
Start

Event ID 11504 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Service_Stop
Opcode
Stop

Event ID 11505 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Volume_Arrived_Updated
Opcode
Start

Fields #

NameDescription
ContainerIdentifier UnicodeString
DeviceIdentifier UnicodeString

Event ID 11506 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Volume_Arrived_Updated
Opcode
Stop

Event ID 11507 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Volume_Removed
Opcode
Start

Fields #

NameDescription
ContainerIdentifier UnicodeString
DeviceIdentifier UnicodeString

Event ID 11508 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_Volume_Removed
Opcode
Stop

Event ID 11509 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_NonVolume_NotifyShell
Opcode
Start

Fields #

NameDescription
ContainerIdentifier UnicodeString
DeviceIdentifier UnicodeString

Event ID 11510 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_NonVolume_NotifyShell
Opcode
Stop

Event ID 11511 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_ProcessInterfaceCallback
Opcode
Start

Fields #

NameDescription
ContainerIdentifier UnicodeString
DeviceIdentifier UnicodeString

Event ID 11512 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_ProcessInterfaceCallback
Opcode
Stop

Event ID 11513 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_CreateSafeFileHandle
Opcode
Start

Fields #

NameDescription
FileName UnicodeString
DesiredAccess UInt32Process access rights reference

Event ID 11514 —

Provider
Microsoft-Windows-Shsvcs
Channel
Diagnostic
Task
HDSrv_CreateSafeFileHandle
Opcode
Stop