.NET Runtime Optimization Service

3 events across 1 channel

Event ID	Title	Channel
1101		Application
1107		Application
1130	.NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: …	Application

Event ID 1101 —

Provider: .NET Runtime Optimization Service
Channel: Application
Level: 2
Samples: 1

Example Event

system:
  provider: .NET Runtime Optimization Service
  guid: ''
  event_source_name: ''
  event_id: 1101
  version: 0
  level: 2
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2014-11-22T01:41:06.000000Z'
  event_record_id: 927
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: Application
  computer: IE8Win7
  security:
    user_id: ''
event_data: {}

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1107 —

Provider: .NET Runtime Optimization Service
Channel: Application
Level: 2
Samples: 1

Example Event

system:
  provider: .NET Runtime Optimization Service
  guid: ''
  event_source_name: ''
  event_id: 1107
  version: 0
  level: 2
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2014-11-24T05:08:11.000000Z'
  event_record_id: 963
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: Application
  computer: IE8Win7
  security:
    user_id: ''
event_data: {}

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1130 — .NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: mscorlib

Provider: .NET Runtime Optimization Service
Channel: Application
Samples: 1

Fields

Name	Description
`Data`	—

Example Event

system:
  provider: .NET Runtime Optimization Service
  guid: ''
  event_source_name: ''
  event_id: 1130
  version: 0
  level: 0
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2022-04-07T17:10:27.582416+00:00'
  event_record_id: 219
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: Application
  computer: WIN-FPV0DSIC9O6.sigma.fr
  security:
    user_id: ''
event_data:
  Data:
  - '.NET Runtime Optimization Service (4.0.30319.0) - Installed from repository:
    mscorlib'
message: '.NET Runtime Optimization Service (4.0.30319.0) - Installed from repository:
  mscorlib'

References

Example event sourced from https://github.com/Yamato-Security/hayabusa-sample-evtx