.NET Runtime Optimization Service

3 events across 1 channel

Event ID	Title	Channel
1101		Application
1107		Application
1130	.NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: …	Application

Event ID 1101 —

Provider: .NET Runtime Optimization Service
Channel: Application
Level: Error

Example Event #

{
  "system": {
    "provider": ".NET Runtime Optimization Service",
    "guid": "",
    "event_source_name": "",
    "event_id": 1101,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2014-11-22T01:41:06.000000Z",
    "event_record_id": 927,
    "correlation": {},
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "IE8Win7",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {}
}

References #

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1107 —

Provider: .NET Runtime Optimization Service
Channel: Application
Level: Error

Example Event #

{
  "system": {
    "provider": ".NET Runtime Optimization Service",
    "guid": "",
    "event_source_name": "",
    "event_id": 1107,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2014-11-24T05:08:11.000000Z",
    "event_record_id": 963,
    "correlation": {},
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "IE8Win7",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {}
}

References #

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1130 — .NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: mscorlib

Provider: .NET Runtime Optimization Service
Channel: Application

Fields #

Name	Description
`Data`	—

Example Event #

{
  "system": {
    "provider": ".NET Runtime Optimization Service",
    "guid": "",
    "event_source_name": "",
    "event_id": 1130,
    "version": 0,
    "level": 0,
    "task": 0,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2022-04-07T17:10:27.582416+00:00",
    "event_record_id": 219,
    "correlation": {},
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Data": [
      ".NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: mscorlib"
    ]
  },
  "message": ".NET Runtime Optimization Service (4.0.30319.0) - Installed from repository: mscorlib"
}

References #

Example event sourced from https://github.com/Yamato-Security/hayabusa-sample-evtx