Microsoft-Windows-Subsys-Csr

4 events across 1 channel

Event IDTitleChannel
1Operational
2Operational
3Operational
4Operational

Event ID 1 —

Provider
Microsoft-Windows-Subsys-Csr
Channel
Operational
Task
csr:ShutdownProcesses
Opcode
Start

Event ID 2 —

Provider
Microsoft-Windows-Subsys-Csr
Channel
Operational
Task
csr:ShutdownProcesses
Opcode
Stop

Event ID 3 —

Provider
Microsoft-Windows-Subsys-Csr
Channel
Operational
Task
csr:ShutdownProcess
Opcode
Start

Fields #

NameDescription
ProcessId UInt32
Level UInt32
Flags UInt32

Event ID 4 —

Provider
Microsoft-Windows-Subsys-Csr
Channel
Operational
Task
csr:ShutdownProcess
Opcode
Stop

Fields #

NameDescription
Status UInt32NTSTATUS reference
ProcessId UInt32