| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | LogMessageMessageOpcode | osquery | N | N |
| 2 | LogMessageMessageOpcode2 | osquery | N | N |
| 3 | LogMessageMessageOpcode3 | osquery | N | N |
| 4 | LogMessageMessageOpcode4 | osquery | N | N |
| 5 | LogMessageMessageOpcode5 | osquery | N | N |
Event ID 1: LogMessageMessageOpcode
#Event ID 2: LogMessageMessageOpcode2
#Event ID 3: LogMessageMessageOpcode3
#Event ID 4: LogMessageMessageOpcode4
#Provenance
ETW provider GUID f7740e18-3259-434f-9759-976319968900
Defined in Program, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 5.11.0.0, captured 2026-06-02 — Manifest XML pack, 1.9 MB