Outlook
4 events across 1 channel
Event ID 25 —
Fields #
| Name | Description |
|---|---|
Data_0 | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Outlook",
"guid": "",
"event_source_name": "",
"event_id": 25,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-14T22:55:13.924036+00:00",
"event_record_id": 5397,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"Data_0": "Outlook is setting up a local copy of your mailbox. It may be several minutes until all of your data is available.",
"Binary": ""
},
"message": ""
}
Event ID 29 —
Fields #
| Name | Description |
|---|---|
Data_0 | — |
Data_1 | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Outlook",
"guid": "",
"event_source_name": "",
"event_id": 29,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-14T22:55:05.919186+00:00",
"event_record_id": 5394,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"Data_0": "C:\\Users\\domainadmin\\AppData\\Local\\Microsoft\\Outlook\\labuser@contoso.onmicrosoft.com.ost",
"Data_1": "Newly created store",
"Binary": ""
},
"message": ""
}
Event ID 45 —
Fields #
| Name | Description |
|---|---|
Data_0 | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Outlook",
"guid": "",
"event_source_name": "",
"event_id": 45,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-14T22:40:18.687492+00:00",
"event_record_id": 5387,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"Data_0": "Outlook loaded the following add-in(s):\n\n\nName: Microsoft Exchange Add-in\nDescription: Exchange support for Unified Messaging, e-mail permission rules, and calendar availability.\nProgID: UmOutlookAddin.FormRegionAddin\nGUID: {F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\nLoad Behavior: 3\nHKLM: 1\nLocation: C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\UmOutlookAddin.dll\nBoot Time (Milliseconds): 31\n\nName: Skype Meeting Add-in for Microsoft Office\nDescription: Skype Meeting Add-in for Microsoft Office\nProgID: UCAddin.LyncAddin.1\nGUID: {A6A2383F-AD50-4D52-8110-3508275E77F7}\nLoad Behavior: 3\nHKLM: 1\nLocation: C:\\Program Files\\Microsoft Office\\root\\Office16\\UCAddin.dll\nBoot Time (Milliseconds): 32\n\nName: Outlook Social Connector 2016\nDescription: Connects to social networking sites and provides people, activity, and status information.\nProgID: OscAddin.Connect\nGUID: {2163EB1F-3FD9-4212-A41F-81D1F933597F}\nLoad Behavior: 3\nHKLM: 1\nLocation: C:\\Program Files\\Microsoft Office\\root\\Office16\\SOCIALCONNECTOR.DLL\nBoot Time (Milliseconds): 78\n\nName: OneNote Notes about Outlook Items\nDescription: Adds Send to OneNote and Notes about this Item buttons to the command bar\nProgID: OneNote.OutlookAddin\nGUID: {93E5752E-B889-47C5-8545-654EE2533C64}\nLoad Behavior: 3\nHKLM: 1\nLocation: C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnOL.dll\nBoot Time (Milliseconds): 31\n\nName: Microsoft VBA for Outlook Addin\nDescription: \nProgID: Microsoft.VbaAddinForOutlook.1\nGUID: {799ED9EA-FB5E-11D1-B7D6-00C04FC2AAE2}\nLoad Behavior: 9\nHKLM: 1\nLocation: C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTLVBA.DLL\nBoot Time (Milliseconds): 0\n",
"Binary": ""
},
"message": ""
}
Event ID 55 —
Fields #
| Name | Description |
|---|---|
Data_0 | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Outlook",
"guid": "",
"event_source_name": "",
"event_id": 55,
"version": 0,
"level": 3,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-14T22:55:07.378098+00:00",
"event_record_id": 5395,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"Data_0": "Calendar Folder New Download",
"Binary": "08000000010000000000010D160000003B984EEDE30F424AA34A09B544EE490C00000000010D160000003B984EEDE30F424AA34A09B544EE490C0000258829FE17000000163B984EEDE30F424AA34A09B544EE490C0000258829FE"
},
"message": ""
}