Microsoft-Office-Word2
976 events across 1 channel
Event ID 30: tskSelectionStartSelectCore_V2
#Fields #
| Name | Description |
|---|---|
sel UnicodeString | |
pdod Pointer | |
Doc Kind UnicodeString | |
pwwd Pointer | |
View Type UnicodeString | |
Old Selection Kind UnicodeString | |
Old cpFirst Int32 | |
Old cpLim Int32 | |
Old fDiscontiguous Boolean | |
Intended cpFirst Int32 | |
Intended cpLim Int32 | |
grfsel HexInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30",
"version": "2",
"level": "4",
"task": "6",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"pdod": "0x0",
"Doc Kind": "",
"pwwd": "0x0",
"View Type": "",
"Old Selection Kind": "",
"Old cpFirst": "0",
"Old cpLim": "0",
"Old fDiscontiguous": "false",
"Intended cpFirst": "0",
"Intended cpLim": "0",
"grfsel": "0x0"
},
"message": ""
}
Event ID 31: tskSelectionStopSelectCore_V1
#Fields #
| Name | Description |
|---|---|
New Selection Kind UnicodeString | |
New cpFirst Int32 | |
New cpLim Int32 | |
New fDiscontiguous Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "31",
"version": "1",
"level": "4",
"task": "6",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"New Selection Kind": "",
"New cpFirst": "0",
"New cpLim": "0",
"New fDiscontiguous": "false"
},
"message": ""
}
Event ID 32: tskSelectionStartSelectDrawNew_V1
#Fields #
| Name | Description |
|---|---|
Type UnicodeString | |
fInOptimizedPass Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "32",
"version": "1",
"level": "50",
"task": "6",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473194900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Type": "Normal",
"fInOptimizedPass": "true"
},
"message": ""
}
Event ID 33: tskSelectionStopSelectDrawNew_V1
#Fields #
| Name | Description |
|---|---|
Type UnicodeString | |
fInOptimizedPass Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "33",
"version": "1",
"level": "50",
"task": "6",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473573700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Type": "Normal",
"fInOptimizedPass": "true"
},
"message": ""
}
Event ID 34: tskSelectionStartInitScx
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cpFirst Int32 | |
cpLim Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "34",
"version": "0",
"level": "50",
"task": "6",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473152500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"cpFirst": "72",
"cpLim": "72"
},
"message": ""
}
Event ID 35: tskSelectionStopInitScx
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "35",
"version": "0",
"level": "50",
"task": "6",
"opcode": "15",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473163200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 36: tskSelectionStartOptimizeSelNew
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "36",
"version": "0",
"level": "50",
"task": "6",
"opcode": "16",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473171300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 37: tskSelectionStopOptimizeSelNew
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "37",
"version": "0",
"level": "50",
"task": "6",
"opcode": "17",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:51:50.473172900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 38: tskSelectionStartUnselectSelOld_V1
#Fields #
| Name | Description |
|---|---|
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "38",
"version": "1",
"level": "50",
"task": "6",
"opcode": "18",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391034100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "ArtObjects"
},
"message": ""
}
Event ID 39: tskSelectionStopUnselectSelOld_V1
#Fields #
| Name | Description |
|---|---|
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "39",
"version": "1",
"level": "50",
"task": "6",
"opcode": "19",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391059600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xsz": "ArtObjects"
},
"message": ""
}
Event ID 40: tskSelectionStartEraseSelOld
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "40",
"version": "0",
"level": "50",
"task": "6",
"opcode": "20",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391061600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 41: tskSelectionStopEraseSelOld
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "41",
"version": "0",
"level": "50",
"task": "6",
"opcode": "21",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:52:33.391505800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 42: tskSelectionPushRcwIntoSel_V1
#Fields #
| Name | Description |
|---|---|
sel UnicodeString | |
cpFirst Int32 | |
cpLim Int32 | |
rcw.xp Int32 | |
rcw.yp Int32 | |
rcw.dxp Int32 | |
rcw.dyp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "42",
"version": "1",
"level": "50",
"task": "6",
"opcode": "22",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"cpFirst": "0",
"cpLim": "0",
"rcw.xp": "0",
"rcw.yp": "0",
"rcw.dxp": "0",
"rcw.dyp": "0"
},
"message": ""
}
Event ID 43: tskSelectionSetSelPdod_V2
#Fields #
| Name | Description |
|---|---|
sel UnicodeString | |
Old pdod Pointer | |
New pdod Pointer | |
pwwd Pointer | |
View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "43",
"version": "2",
"level": "50",
"task": "6",
"opcode": "23",
"keywords": 9223372036854775810,
"time_created": "2026-03-14T21:57:27.602359000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "selDotted",
"Old pdod": "0x2CA3EA2C1D0",
"New pdod": "0x0",
"pwwd": "0x0",
"View Type": "Nil pwwd"
},
"message": ""
}
Event ID 44: tskSelectionStartTurnOffSelCore_V2
#Fields #
| Name | Description |
|---|---|
sel UnicodeString | |
Selection Kind UnicodeString | |
pdod Pointer | |
Doc Kind UnicodeString | |
pwwd Pointer | |
View Type UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "44",
"version": "2",
"level": "50",
"task": "6",
"opcode": "24",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sel": "",
"Selection Kind": "",
"pdod": "0x0",
"Doc Kind": "",
"pwwd": "0x0",
"View Type": ""
},
"message": ""
}
Event ID 45: tskSelectionStopTurnOffSelCore
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "45",
"version": "0",
"level": "50",
"task": "6",
"opcode": "25",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 46: tskSelectionStartExpandForTableBorders
#Fields #
| Name | Description |
|---|---|
DR cpFirst Int32 | |
DR cpLim Int32 | |
Original xwLeft Int32 | |
Original xwRight Int32 | |
Original ywTop Int32 | |
Original ywBottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "46",
"version": "0",
"level": "50",
"task": "6",
"opcode": "26",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DR cpFirst": "0",
"DR cpLim": "0",
"Original xwLeft": "0",
"Original xwRight": "0",
"Original ywTop": "0",
"Original ywBottom": "0"
},
"message": ""
}
Event ID 47: tskSelectionStopExpandForTableBorders
#Fields #
| Name | Description |
|---|---|
Updated xwLeft Int32 | |
Updated xwRight Int32 | |
Updated ywTop Int32 | |
Updated ywBottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "47",
"version": "0",
"level": "50",
"task": "6",
"opcode": "27",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Updated xwLeft": "0",
"Updated xwRight": "0",
"Updated ywTop": "0",
"Updated ywBottom": "0"
},
"message": ""
}
Event ID 49: tskCommandingStartCmdExecution_V2
#Fields #
| Name | Description |
|---|---|
Cmd Name UnicodeString | |
FCI UInt32 | |
TCID UInt32 | |
grfcco UInt64 | |
grfaux UInt64 | |
kcm UInt32 | |
kcm2 UInt32 | |
Chained Boolean | |
Macro Active Boolean | |
Live Preview Boolean | |
Orig pdod Pointer | |
Orig Doc Kind UnicodeString | |
Orig pmwd Pointer | |
Orig wwd Pointer | |
Orig View Type UnicodeString | |
SEL pdod Pointer | |
SEL Doc Kind UnicodeString | |
SEL cpFirst Int32 | |
SEL cpLim Int32 | |
SEL pmwd Pointer | |
SEL wwd Pointer | |
SEL View Type UnicodeString | |
Original pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "49",
"version": "2",
"level": "4",
"task": "9",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:52:07.344098700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Cmd Name": "EditGoTo",
"FCI": " 896",
"TCID": " 757",
"grfcco": "0x20100059",
"grfaux": "0x11",
"kcm": "0x247",
"kcm2": "0x0",
"Chained": "false",
"Macro Active": "false",
"Live Preview": "false",
"Orig pdod": "0x1FF3C67AD60",
"Orig Doc Kind": "Doc",
"Orig pmwd": "0x1FF3C5DD4A0",
"Orig wwd": "0x1FF3BF2B670",
"Orig View Type": "Page",
"SEL pdod": "0x1FF3C67AD60",
"SEL Doc Kind": "Doc",
"SEL cpFirst": "0",
"SEL cpLim": "0",
"SEL pmwd": "0x1FF3C5DD4A0",
"SEL wwd": "0x1FF3BF2B670",
"SEL View Type": "Page",
"Original pdodMain": "0x1FF3C67AD60"
},
"message": ""
}
Event ID 50: tskCommandingStopCmdExecution
#Fields #
| Name | Description |
|---|---|
Cmd Name UnicodeString | |
Cmd Return UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "50",
"version": "0",
"level": "4",
"task": "9",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:52:30.226684700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Cmd Name": "QuickCheck",
"Cmd Return": "OK"
},
"message": ""
}
Event ID 51: tskDialogOpenDialog
#Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | |
Dlg ID UInt64 | |
Cmd Name UnicodeString | |
FCI UInt32 | |
TCID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "51",
"version": "0",
"level": "4",
"task": "10",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0"
},
"message": ""
}
Event ID 52: tskDialogCloseDialog
#Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | |
Dlg ID UInt64 | |
Cmd Name UnicodeString | |
Cmd Return UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "52",
"version": "0",
"level": "4",
"task": "10",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"Cmd Return": ""
},
"message": ""
}
Event ID 53: tskViewportViewportMoveStart
#Fields #
| Name | Description |
|---|---|
Layout Type UnicodeString | |
x Scroll Int32 | |
y Scroll Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "53",
"version": "0",
"level": "4",
"task": "11",
"opcode": "27",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Layout Type": "",
"x Scroll": "0",
"y Scroll": "0"
},
"message": ""
}
Event ID 55: tskViewportViewportMoveEnd
#Fields #
| Name | Description |
|---|---|
x Scroll Int32 | |
y Scroll Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "55",
"version": "0",
"level": "4",
"task": "11",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "0",
"y Scroll": "0"
},
"message": ""
}
Event ID 56: tskViewportViewportScrollTo
#Fields #
| Name | Description |
|---|---|
x Scroll Int32 | |
y Scroll Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "56",
"version": "0",
"level": "4",
"task": "11",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:51:59.007125600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "92",
"y Scroll": "432"
},
"message": ""
}
Event ID 57: tskViewportViewportZoomTo57_V2
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
Wwd UnicodeString | |
Pct Zoom Double |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "57",
"version": "2",
"level": "4",
"task": "11",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:34:54.343529200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{d73f5340-b345-000c-cfaf-40d745b3dc01}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x2D835A758F0",
"Wwd": "Page",
"Pct Zoom": "100.000000"
},
"message": ""
}
Event ID 58: tskViewportViewportCorrectionForReadingLayout
#Fields #
| Name | Description |
|---|---|
Natural stop page Int32 | |
x Natural stop point Int32 | |
m_xeDmBegin Int32 | |
xeMid Int32 | |
Viewport left Int32 | |
Viewport right Int32 | |
Corrected page Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "58",
"version": "0",
"level": "4",
"task": "11",
"opcode": "14",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Natural stop page": "0",
"x Natural stop point": "0",
"m_xeDmBegin": "0",
"xeMid": "0",
"Viewport left": "0",
"Viewport right": "0",
"Corrected page": "0"
},
"message": ""
}
Event ID 59: tskViewportViewportInertia
#Fields #
| Name | Description |
|---|---|
dxpInertiaStrength Int32 | |
x Natural stop point Int32 | |
Current xPos Int32 | |
Snap point Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "59",
"version": "0",
"level": "4",
"task": "11",
"opcode": "15",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpInertiaStrength": "0",
"x Natural stop point": "0",
"Current xPos": "0",
"Snap point": "0"
},
"message": ""
}
Event ID 60: tskViewportViewportInertiaTooWeak
#Fields #
| Name | Description |
|---|---|
dxpInertiaStrength Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "60",
"version": "0",
"level": "4",
"task": "11",
"opcode": "16",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpInertiaStrength": "0"
},
"message": ""
}
Event ID 61: tskViewportViewportInertiaNoSnapBack
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "61",
"version": "0",
"level": "4",
"task": "11",
"opcode": "17",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 62: tskViewportViewportInertiaOutsideBounds
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "62",
"version": "0",
"level": "4",
"task": "11",
"opcode": "18",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 63: tskViewportViewportMoveScroll_V1
#Fields #
| Name | Description |
|---|---|
xScrollerContext Int32 | |
yScrollerContext Int32 | |
dxMoved Int32 | |
dyMoved Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "63",
"version": "1",
"level": "4",
"task": "11",
"opcode": "19",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xScrollerContext": "0",
"yScrollerContext": "0",
"dxMoved": "0",
"dyMoved": "0"
},
"message": ""
}
Event ID 64: tskViewportViewportMoveNoScroll
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "64",
"version": "0",
"level": "4",
"task": "11",
"opcode": "20",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 65: tskViewportViewportPageTurnBounds
#Fields #
| Name | Description |
|---|---|
Current point Int32 | |
Left Bounds Int32 | |
Right Bounds Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "65",
"version": "0",
"level": "4",
"task": "11",
"opcode": "21",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Current point": "0",
"Left Bounds": "0",
"Right Bounds": "0"
},
"message": ""
}
Event ID 66: tskViewportViewportFastCorrection
#Fields #
| Name | Description |
|---|---|
Correction point Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "66",
"version": "0",
"level": "4",
"task": "11",
"opcode": "22",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Correction point": "0"
},
"message": ""
}
Event ID 126: tskCommandingInitCmdExecution_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
Cmd Name UnicodeString | |
FCI UInt32 | |
TCID UInt32 | |
grfcco UInt64 | |
grfaux UInt64 | |
kcm UInt32 | |
kcm2 UInt32 | |
From Keyboard Boolean | |
Chained Boolean | |
Enabled Boolean | |
grfoff1 UInt64 | |
grfoff2 UInt64 | |
grfoff3 UInt64 | |
grfon1 UInt64 | |
grfon2 UInt64 | |
grfon3 UInt64 | |
Cmd Return UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "126",
"version": "1",
"level": "3",
"task": "9",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0",
"grfcco": "0",
"grfaux": "0",
"kcm": "0",
"kcm2": "0",
"From Keyboard": "false",
"Chained": "false",
"Enabled": "false",
"grfoff1": "0",
"grfoff2": "0",
"grfoff3": "0",
"grfon1": "0",
"grfon2": "0",
"grfon3": "0",
"Cmd Return": ""
},
"message": ""
}
Event ID 127: tskCommandingScheduleCmdUpdate_V1
#Fields #
| Name | Description |
|---|---|
Dirty calls before update Int32 | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "127",
"version": "1",
"level": "50",
"task": "9",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dirty calls before update": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 128: tskCommandingBeginCmdUpdate_V1
#Fields #
| Name | Description |
|---|---|
Updates already in progress Int32 | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "128",
"version": "1",
"level": "50",
"task": "9",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Updates already in progress": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 129: tskCommandingEndCmdUpdate_V1
#Fields #
| Name | Description |
|---|---|
Dirty calls during update Int32 | |
Updates scheduled during update Int32 | |
Updates still in progress Int32 | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "129",
"version": "1",
"level": "50",
"task": "9",
"opcode": "15",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dirty calls during update": "0",
"Updates scheduled during update": "0",
"Updates still in progress": "0",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 130: tskFastAccStartFastAccBoot
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "130",
"version": "0",
"level": "4",
"task": "14",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 131: tskFastAccStopFastAccBoot
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "131",
"version": "0",
"level": "4",
"task": "14",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 138: tskCommandingStartLongOp
#Fields #
| Name | Description |
|---|---|
idTag UnicodeString | |
depth Int32 | |
cursorSaverOn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "138",
"version": "0",
"level": "4",
"task": "9",
"opcode": "16",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"idTag": "",
"depth": "0",
"cursorSaverOn": "false"
},
"message": ""
}
Event ID 139: tskCommandingStopLongOp
#Fields #
| Name | Description |
|---|---|
idTag UnicodeString | |
fAll Boolean | |
depth Int32 | |
cursorSaverOn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "139",
"version": "0",
"level": "4",
"task": "9",
"opcode": "17",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"idTag": "",
"fAll": "false",
"depth": "0",
"cursorSaverOn": "false"
},
"message": ""
}
Event ID 140: tskPageTurn
#Fields #
| Name | Description |
|---|---|
UserAction Int32 | |
fViewportMovesRight Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "140",
"version": "0",
"level": "4",
"task": "17",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UserAction": "0",
"fViewportMovesRight": "false"
},
"message": ""
}
Event ID 141: tskPageTurnPageTurnCarousel
#Fields #
| Name | Description |
|---|---|
fViewportMovesRight Boolean | |
cPagesMoved Int32 | |
cPagesInViewport Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "141",
"version": "0",
"level": "4",
"task": "17",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fViewportMovesRight": "false",
"cPagesMoved": "0",
"cPagesInViewport": "0"
},
"message": ""
}
Event ID 142: tskPropertyFormattingCacheMissCpo
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "142",
"version": "0",
"level": "5",
"task": "18",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 143: tskPropertyFormattingCacheMissFco
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "143",
"version": "0",
"level": "5",
"task": "18",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 144: tskPropertyFormattingCacheMissCso
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "144",
"version": "0",
"level": "5",
"task": "18",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 145: tskPropertyFormattingCacheMissCto
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "145",
"version": "0",
"level": "5",
"task": "18",
"opcode": "13",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 146: tskViewportRegularSnapPoints
#Fields #
| Name | Description |
|---|---|
Offset Int32 | |
Interval Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "146",
"version": "0",
"level": "4",
"task": "11",
"opcode": "23",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Offset": "0",
"Interval": "0"
},
"message": ""
}
Event ID 147: tskViewportIrregularSnapPoints
#Fields #
| Name | Description |
|---|---|
Point 1 Int32 | |
Point 2 Int32 | |
Point 3 Int32 | |
Point 4 Int32 | |
Point 5 Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "147",
"version": "0",
"level": "4",
"task": "11",
"opcode": "24",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Point 1": "0",
"Point 2": "0",
"Point 3": "0",
"Point 4": "0",
"Point 5": "0"
},
"message": ""
}
Event ID 160: tskE1oUpconvertE1oUpconvertedTypes_V1
#Fields #
| Name | Description |
|---|---|
E1o info UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "160",
"version": "1",
"level": "4",
"task": "8",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E1o info": "0"
},
"message": ""
}
Event ID 161: tskE1oUpconvertE1oUpconvertUnsupportedInSubDocs
#Fields #
| Name | Description |
|---|---|
E1o info UInt32 | |
pdod Pointer | |
Doc Kind UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "161",
"version": "0",
"level": "4",
"task": "8",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E1o info": "0",
"pdod": "0x0",
"Doc Kind": ""
},
"message": ""
}
Event ID 170: tskViewportHandleViewportMoveBlankContent_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
Square Pixels of Missing Page Int32 | |
Square Pixels of Missing DR content Int32 | |
Square Pixels of Viewport Int32 | |
Square Pixels Scrolled Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "170",
"version": "1",
"level": "4",
"task": "11",
"opcode": "25",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:30.227814900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"Square Pixels of Missing Page": "0",
"Square Pixels of Missing DR content": "0",
"Square Pixels of Viewport": "66000",
"Square Pixels Scrolled": "0"
},
"message": ""
}
Event ID 171: tskViewportAirspaceOutOfBoundsTextureRequest
#Fields #
| Name | Description |
|---|---|
Start Time (msec) UInt64 | |
End Time (msec) UInt64 | |
Duration (msec) UInt64 | |
Sliver Count (pixel height or width 1) UInt32 | |
Total Count UInt32 | |
Threshold time (msec) UInt64 | |
Threshold count UInt32 | |
Dxw Max UInt32 | |
Dyw Max UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "171",
"version": "0",
"level": "4",
"task": "11",
"opcode": "26",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Start Time (msec)": "0",
"End Time (msec)": "0",
"Duration (msec)": "0",
"Sliver Count (pixel height or width 1)": "0",
"Total Count": "0",
"Threshold time (msec)": "0",
"Threshold count": "0",
"Dxw Max": "0",
"Dyw Max": "0"
},
"message": ""
}
Event ID 176: tskProofingLoadToolsStart
#Fields #
| Name | Description |
|---|---|
PtlType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "176",
"version": "0",
"level": "4",
"task": "24",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 177: tskProofingLoadToolsEnd
#Fields #
| Name | Description |
|---|---|
PtlType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "177",
"version": "0",
"level": "4",
"task": "24",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 178: tskProofingLoadSpellSuggestionStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "178",
"version": "0",
"level": "4",
"task": "24",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 179: tskProofingLoadSpellSuggestionEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "179",
"version": "0",
"level": "4",
"task": "24",
"opcode": "13",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 180: tskProofingNextErrorStart_V1
#Fields #
| Name | Description |
|---|---|
IsNextError Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "180",
"version": "1",
"level": "4",
"task": "24",
"opcode": "14",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsNextError": "false"
},
"message": ""
}
Event ID 181: tskProofingNextErrorEnd_V1
#Fields #
| Name | Description |
|---|---|
IsNextError Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "181",
"version": "1",
"level": "4",
"task": "24",
"opcode": "15",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsNextError": "false"
},
"message": ""
}
Event ID 183
#Fields #
| Name | Description |
|---|---|
cParents UInt32 | |
cReplies UInt32 | |
cInkComments UInt32 | |
cCommentsWithTables UInt32 | |
cSmartArt UInt32 | |
cVideos UInt32 | |
cPictures UInt32 | |
cCharts UInt32 | |
cOtherE2Os UInt32 | |
cFields UInt32 | |
cOLEObjects UInt32 |
Event ID 184: tskLiveDragLiveDragStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "184",
"version": "0",
"level": "100",
"task": "25",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 185: tskLiveDragLiveDragEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "185",
"version": "0",
"level": "100",
"task": "25",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 186: tskLiveDragLiveDragAbort
#Fields #
| Name | Description |
|---|---|
reason UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "186",
"version": "0",
"level": "100",
"task": "25",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": ""
},
"message": ""
}
Event ID 187: tskLiveDragLiveDragDropDetected
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "187",
"version": "0",
"level": "100",
"task": "25",
"opcode": "13",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 188: tskLiveDragLiveDragUpdateStart
#Fields #
| Name | Description |
|---|---|
ptX Int32 | |
ptY Int32 | |
updateCnt Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "188",
"version": "0",
"level": "100",
"task": "25",
"opcode": "14",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"updateCnt": "0"
},
"message": ""
}
Event ID 189: tskLiveDragLiveDragUpdateFinish
#Fields #
| Name | Description |
|---|---|
ptX Int32 | |
ptY Int32 | |
updateCnt Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "189",
"version": "0",
"level": "100",
"task": "25",
"opcode": "15",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0",
"updateCnt": "0"
},
"message": ""
}
Event ID 190: tskLiveDragLiveDragMouseMsg
#Fields #
| Name | Description |
|---|---|
ptX Int32 | |
ptY Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "190",
"version": "0",
"level": "100",
"task": "25",
"opcode": "16",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0"
},
"message": ""
}
Event ID 191: tskLiveDragLiveDragMouseMsgInQueue
#Fields #
| Name | Description |
|---|---|
ptX Int32 | |
ptY Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "191",
"version": "0",
"level": "100",
"task": "25",
"opcode": "17",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ptX": "0",
"ptY": "0"
},
"message": ""
}
Event ID 192: tskLiveDragLiveDragMouseMsgSkipped
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "192",
"version": "0",
"level": "100",
"task": "25",
"opcode": "18",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 193: tskClipboardPasteStart_V2
#Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | |
Sel.cpLim Int32 | |
DocKind UnicodeString | |
ViewType UnicodeString | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "193",
"version": "2",
"level": "4",
"task": "27",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 194: tskClipboardPasteEnd_V1
#Fields #
| Name | Description |
|---|---|
cmdRet Int32 | |
UsedFmt UnicodeString | |
AvailFmts UnicodeString | |
AvailFmtsCount UInt64 | |
Size UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "194",
"version": "1",
"level": "4",
"task": "27",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0",
"UsedFmt": "",
"AvailFmts": "",
"AvailFmtsCount": "0",
"Size": "0"
},
"message": ""
}
Event ID 195: tskClipboardCopyStart_V2
#Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | |
Sel.cpLim Int32 | |
DocKind UnicodeString | |
ViewType UnicodeString | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "195",
"version": "2",
"level": "4",
"task": "27",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 196: tskClipboardCopyEnd
#Fields #
| Name | Description |
|---|---|
cmdRet Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "196",
"version": "0",
"level": "4",
"task": "27",
"opcode": "13",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0"
},
"message": ""
}
Event ID 197: tskClipboardCutStart_V2
#Fields #
| Name | Description |
|---|---|
Sel.cpFirst Int32 | |
Sel.cpLim Int32 | |
DocKind UnicodeString | |
ViewType UnicodeString | |
pdod Pointer | |
pwwd Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "197",
"version": "2",
"level": "4",
"task": "27",
"opcode": "14",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Sel.cpFirst": "0",
"Sel.cpLim": "0",
"DocKind": "",
"ViewType": "",
"pdod": "0x0",
"pwwd": "0x0"
},
"message": ""
}
Event ID 198: tskClipboardCutEnd
#Fields #
| Name | Description |
|---|---|
cmdRet Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "198",
"version": "0",
"level": "4",
"task": "27",
"opcode": "15",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cmdRet": "0"
},
"message": ""
}
Event ID 199: tskClipboardPasteExternal
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
PasteType UInt32 | |
SourceUrlHash GUID | |
SourceLocationType UInt32 | |
SourceApp Int32 | |
ContentType UInt32 | |
Size Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "199",
"version": "0",
"level": "4",
"task": "27",
"opcode": "17",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"PasteType": "0",
"SourceUrlHash": "{00000000-0000-0000-0000-000000000000}",
"SourceLocationType": "0",
"SourceApp": "0",
"ContentType": "0",
"Size": "0"
},
"message": ""
}
Event ID 201: tskResponsivenessReportUnresponsivenessBucketedData
#Fields #
| Name | Description |
|---|---|
responsivenessType UnicodeString | |
cIntervals UInt32 | |
Bucket1-Min-Msec UInt64 | |
Bucket2-Min-Msec UInt64 | |
Bucket3-Min-Msec UInt64 | |
Bucket4-Min-Msec UInt64 | |
Bucket5-Min-Msec UInt64 | |
Bucket6-Min-Msec UInt64 | |
Bucket7-Min-Msec UInt64 | |
Bucket8-Min-Msec UInt64 | |
Bucket9-Min-Msec UInt64 | |
Bucket10-Min-Msec UInt64 | |
Bucket1-Count UInt64 | |
Bucket2-Count UInt64 | |
Bucket3-Count UInt64 | |
Bucket4-Count UInt64 | |
Bucket5-Count UInt64 | |
Bucket6-Count UInt64 | |
Bucket7-Count UInt64 | |
Bucket8-Count UInt64 | |
Bucket9-Count UInt64 | |
Bucket10-Count UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "201",
"version": "0",
"level": "4",
"task": "1",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-14T21:52:34.468277500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"responsivenessType": "MsoHrRedirectCheckedOutFile",
"cIntervals": " 2",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "50",
"Bucket3-Min-Msec": "100",
"Bucket4-Min-Msec": "200",
"Bucket5-Min-Msec": "500",
"Bucket6-Min-Msec": "1000",
"Bucket7-Min-Msec": "2000",
"Bucket8-Min-Msec": "3000",
"Bucket9-Min-Msec": "4000",
"Bucket10-Min-Msec": "5000",
"Bucket1-Count": "2",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0"
},
"message": ""
}
Event ID 202: tskResponsivenessReportUnresponsivenessTimeout_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
responsivenessType UnicodeString | |
timeoutLength UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "202",
"version": "1",
"level": "3",
"task": "1",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"responsivenessType": "",
"timeoutLength": "0"
},
"message": ""
}
Event ID 203: tskCoreDocEdit
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
IsDocDirty Boolean | |
Message UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "203",
"version": "0",
"level": "4",
"task": "29",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"IsDocDirty": "false",
"Message": ""
},
"message": ""
}
Event ID 204: tskFunctionElapsedTime
#Fields #
| Name | Description |
|---|---|
FuncName UnicodeString | |
Dusec UInt64 | |
fAborted Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "204",
"version": "0",
"level": "4",
"task": "31",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FuncName": "",
"Dusec": "0",
"fAborted": "false"
},
"message": ""
}
Event ID 205: tskPropertyFormattingApplyGalleryStyle
#Fields #
| Name | Description |
|---|---|
Kind Int32 | |
sti Int32 | |
stiBase Int32 | |
istd UInt32 | |
istdBase Int32 | |
Linked Int32 | |
Live Preview Boolean | |
fResult Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "205",
"version": "0",
"level": "4",
"task": "18",
"opcode": "14",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Kind": "0",
"sti": "0",
"stiBase": "0",
"istd": "0",
"istdBase": "0",
"Linked": "0",
"Live Preview": "false",
"fResult": "false"
},
"message": ""
}
Event ID 206: tskTextWrapping_V2
#Fields #
| Name | Description |
|---|---|
ActionType UInt32 | |
E2oId UInt32 | |
E2oType UInt32 | |
PrevTextWrapping UInt32 | |
NewTextWrapping UInt32 | |
SqmDocID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "206",
"version": "2",
"level": "4",
"task": "32",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ActionType": "0",
"E2oId": "0",
"E2oType": "0",
"PrevTextWrapping": "0",
"NewTextWrapping": "0",
"SqmDocID": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 208: tskProgressBarProgressBarStart
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "208",
"version": "0",
"level": "4",
"task": "33",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": ""
},
"message": ""
}
Event ID 209: tskProgressBarProgressBarStop
#Fields #
| Name | Description |
|---|---|
Caller UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "209",
"version": "0",
"level": "4",
"task": "33",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Caller": ""
},
"message": ""
}
Event ID 210: tskImmZoomImmZoomEntry
#Fields #
| Name | Description |
|---|---|
izSource UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "210",
"version": "0",
"level": "4",
"task": "34",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"izSource": ""
},
"message": ""
}
Event ID 211: tskImmZoomImmZoomStateToggle
#Fields #
| Name | Description |
|---|---|
instance UInt32 | |
objectType UnicodeString | |
toggleToState UnicodeString | |
scale UInt32 | |
zoom UInt32 | |
windowWidth UInt64 | |
windowHeight UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "211",
"version": "0",
"level": "4",
"task": "34",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"instance": "0",
"objectType": "",
"toggleToState": "",
"scale": "0",
"zoom": "0",
"windowWidth": "0",
"windowHeight": "0"
},
"message": ""
}
Event ID 212: tskImmZoomImmZoomSecondLevel
#Fields #
| Name | Description |
|---|---|
instance UInt32 | |
objectType UnicodeString | |
scale UInt32 | |
zoom UInt32 | |
windowWidth UInt64 | |
windowHeight UInt64 | |
secondLevel UnicodeString | |
objectFitKind UnicodeString | |
availSpaceWidth UInt64 | |
availSpaceHeight UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "212",
"version": "0",
"level": "4",
"task": "34",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"instance": "0",
"objectType": "",
"scale": "0",
"zoom": "0",
"windowWidth": "0",
"windowHeight": "0",
"secondLevel": "",
"objectFitKind": "",
"availSpaceWidth": "0",
"availSpaceHeight": "0"
},
"message": ""
}
Event ID 213: tskPageTurnPageTurnStart
#Fields #
| Name | Description |
|---|---|
fSinglePage Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "213",
"version": "0",
"level": "4",
"task": "17",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSinglePage": "false"
},
"message": ""
}
Event ID 214: tskPageTurnPageTurnEnd
#Fields #
| Name | Description |
|---|---|
PageTurnSuccess Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "214",
"version": "0",
"level": "4",
"task": "17",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PageTurnSuccess": "false"
},
"message": ""
}
Event ID 215: tskFastAccFastAccDocEditedWithUIAClientRunning
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "215",
"version": "0",
"level": "4",
"task": "14",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 217: tskFastAccFastAccUIAProviderAPICalled
#Fields #
| Name | Description |
|---|---|
providerName UnicodeString | |
apiName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "217",
"version": "0",
"level": "4",
"task": "14",
"opcode": "13",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"providerName": "",
"apiName": ""
},
"message": ""
}
Event ID 218: tskFontPCT
#Fields #
| Name | Description |
|---|---|
ReadModeFontSizePCT Double |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "218",
"version": "0",
"level": "4",
"task": "36",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReadModeFontSizePCT": "0.0"
},
"message": ""
}
Event ID 220: tskE1oUpconvertE1oUpconvertStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "220",
"version": "0",
"level": "4",
"task": "8",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 221: tskE1oUpconvertE1oUpconvertEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "221",
"version": "0",
"level": "4",
"task": "8",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 223: tskProofingNextErrorNoMoreErrors
#Fields #
| Name | Description |
|---|---|
PtlType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "223",
"version": "0",
"level": "4",
"task": "24",
"opcode": "16",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 224: tskProofingUndoAutoCorrect
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "224",
"version": "0",
"level": "4",
"task": "24",
"opcode": "17",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 225: tskCommentsCommentPopoutOpenTriggering_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
View Type UnicodeString | |
hwwd.pdod Pointer | |
Doc Kind UnicodeString | |
cpok UInt32 | |
taxc.IMac UInt32 | |
rcwAnchor.xp Int32 | |
rcwAnchor.yp Int32 | |
rcwAnchor.dxp Int32 | |
rcwAnchor.dyp Int32 | |
SEL pdod Pointer | |
SEL Doc Kind UnicodeString | |
SEL cpFirst Int32 | |
SEL cpLim Int32 | |
fForcefullySingleThreaded Boolean | |
cplr UInt32 | |
fDocsPaneUX Boolean | |
fTrackChanges Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "225",
"version": "1",
"level": "4",
"task": "26",
"opcode": "13",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"View Type": "",
"hwwd.pdod": "0x0",
"Doc Kind": "",
"cpok": "0",
"taxc.IMac": "0",
"rcwAnchor.xp": "0",
"rcwAnchor.yp": "0",
"rcwAnchor.dxp": "0",
"rcwAnchor.dyp": "0",
"SEL pdod": "0x0",
"SEL Doc Kind": "",
"SEL cpFirst": "0",
"SEL cpLim": "0",
"fForcefullySingleThreaded": "false",
"cplr": "0",
"fDocsPaneUX": "false",
"fTrackChanges": "false"
},
"message": ""
}
Event ID 226: tskApplyGalleryBulletsNumbering
#Fields #
| Name | Description |
|---|---|
ItemType Int32 | |
tplc Int64 | |
iCat Int32 | |
nfc Int32 | |
iApplyTo Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "226",
"version": "0",
"level": "4",
"task": "38",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ItemType": "0",
"tplc": "0",
"iCat": "0",
"nfc": "0",
"iApplyTo": "0"
},
"message": ""
}
Event ID 227: tskFastAccFastAccTextAndTextRangePatternCount
#Fields #
| Name | Description |
|---|---|
textPatternCount UInt64 | |
textRangePatternCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "227",
"version": "0",
"level": "4",
"task": "14",
"opcode": "14",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"textPatternCount": "0",
"textRangePatternCount": "0"
},
"message": ""
}
Event ID 228: tskProofingProofingAbortedByUser
#Fields #
| Name | Description |
|---|---|
PtlType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "228",
"version": "0",
"level": "4",
"task": "24",
"opcode": "18",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PtlType": "0"
},
"message": ""
}
Event ID 229: tskUndoUndoStart
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fUndo Int32 | |
cActions Int32 | |
fucr UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "229",
"version": "0",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fUndo": "0",
"cActions": "0",
"fucr": "0"
},
"message": ""
}
Event ID 230: tskUndoUndoEnd
#Fields #
| Name | Description |
|---|---|
fRet Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "230",
"version": "0",
"level": "4",
"task": "41",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "0"
},
"message": ""
}
Event ID 231: tskUndoUndoAction_V3
#Fields #
| Name | Description |
|---|---|
fUndo Int32 | |
Command Int32 | |
CommandArgument Int32 | |
UndoType UInt32 | |
fChained Boolean | |
fChainStart Boolean | |
fInLiveDrag Boolean | |
fSwapConsidered Boolean | |
fSavedByAllowSwapStyles Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "231",
"version": "3",
"level": "4",
"task": "41",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fUndo": "0",
"Command": "0",
"CommandArgument": "0",
"UndoType": "0",
"fChained": "false",
"fChainStart": "false",
"fInLiveDrag": "false",
"fSwapConsidered": "false",
"fSavedByAllowSwapStyles": "false"
},
"message": ""
}
Event ID 232: tskUndoUndoStackBlown
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
cUndoCmdsBlown Int32 | |
cRedoCmdsBlown Int32 | |
cCmdsUsk Int32 | |
Reason UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "232",
"version": "0",
"level": "4",
"task": "41",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"cUndoCmdsBlown": "0",
"cRedoCmdsBlown": "0",
"cCmdsUsk": "0",
"Reason": ""
},
"message": ""
}
Event ID 233: tskTrackChangesTrackChangesNewState
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fTrackChangesNewState Boolean | |
stateToggledByFCI Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "233",
"version": "0",
"level": "4",
"task": "42",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-14T21:52:32.892847000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"fTrackChangesNewState": "true",
"stateToggledByFCI": "956"
},
"message": ""
}
Event ID 234: tskTrackChangesTrackChangesStateOnFileOpen
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fTrackChangesOn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "234",
"version": "0",
"level": "4",
"task": "42",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fTrackChangesOn": "false"
},
"message": ""
}
Event ID 235: tskReadingModeOpenInRM
#Fields #
| Name | Description |
|---|---|
OpenInRM Boolean | |
Reason UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "235",
"version": "0",
"level": "4",
"task": "35",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OpenInRM": "false",
"Reason": ""
},
"message": ""
}
Event ID 236: tskLiveDragLiveDragMouseMoveDistanceAndTime_V1
#Fields #
| Name | Description |
|---|---|
moveDistance Int32 | |
moveTime Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "236",
"version": "1",
"level": "100",
"task": "25",
"opcode": "19",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"moveDistance": "0",
"moveTime": "0"
},
"message": ""
}
Event ID 237: tskLiveDragLiveDragMouseMoveTopDistanceAndTime
#Fields #
| Name | Description |
|---|---|
maxDistance1 Int32 | |
maxDistanceTime1 Int64 | |
maxDistance2 Int32 | |
maxDistanceTime2 Int64 | |
maxDistance3 Int32 | |
maxDistanceTime3 Int64 | |
maxTime1 Int64 | |
maxTimeDistance1 Int32 | |
maxTime2 Int64 | |
maxTimeDistance2 Int32 | |
maxTime3 Int64 | |
maxTimeDistance3 Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "237",
"version": "0",
"level": "100",
"task": "25",
"opcode": "20",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"maxDistance1": "0",
"maxDistanceTime1": "0",
"maxDistance2": "0",
"maxDistanceTime2": "0",
"maxDistance3": "0",
"maxDistanceTime3": "0",
"maxTime1": "0",
"maxTimeDistance1": "0",
"maxTime2": "0",
"maxTimeDistance2": "0",
"maxTime3": "0",
"maxTimeDistance3": "0"
},
"message": ""
}
Event ID 238: tskReadingModeColMinHit
#Fields #
| Name | Description |
|---|---|
dxpApp Int32 | |
dypApp Int32 | |
rclwApp Int32 | |
pctFontApp Int32 | |
dxpPageContentApp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "238",
"version": "0",
"level": "4",
"task": "35",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dxpApp": "0",
"dypApp": "0",
"rclwApp": "0",
"pctFontApp": "0",
"dxpPageContentApp": "0"
},
"message": ""
}
Event ID 239: tskPropertyFormattingCacheCpoCpMismatch_V1
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
SQMDocID GUID | |
dk UInt32 | |
cpMac Int32 | |
cpReq Int32 | |
cpFirst Int32 | |
cpLim Int32 | |
fFoundPiece Boolean | |
fBinaryPiece Boolean | |
fInBulletProofer Boolean | |
fSafeFetch Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "239",
"version": "1",
"level": "3",
"task": "18",
"opcode": "15",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"SQMDocID": "{00000000-0000-0000-0000-000000000000}",
"dk": "0",
"cpMac": "0",
"cpReq": "0",
"cpFirst": "0",
"cpLim": "0",
"fFoundPiece": "false",
"fBinaryPiece": "false",
"fInBulletProofer": "false",
"fSafeFetch": "false"
},
"message": ""
}
Event ID 240: tskClipboardClipboardChanged
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "240",
"version": "0",
"level": "4",
"task": "27",
"opcode": "16",
"keywords": 9223372036854792192,
"time_created": "2026-03-14T21:53:36.811922800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 241: tskUndoBeginUndoTrackingStart_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
FCI UInt32 | |
fCoauthEdit Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "241",
"version": "1",
"level": "5",
"task": "41",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.469410900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"FCI": " 7000",
"fCoauthEdit": "false"
},
"message": ""
}
Event ID 242: tskUndoBeginUndoTrackingEnd
#Fields #
| Name | Description |
|---|---|
fRet Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "242",
"version": "0",
"level": "5",
"task": "41",
"opcode": "15",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.469413300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "1"
},
"message": ""
}
Event ID 243: tskUndoEndUndoTrackingStart_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
FCI UInt32 | |
fCoauthEdit Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "243",
"version": "1",
"level": "5",
"task": "41",
"opcode": "16",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.466643800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x1FF3C67AD60",
"FCI": " 7000",
"fCoauthEdit": "false"
},
"message": ""
}
Event ID 244: tskUndoEndUndoTrackingEnd
#Fields #
| Name | Description |
|---|---|
fRet Int32 | |
cPaxuadSlots Int32 | |
cPaxuadSlotsUsed Int32 | |
cPaxuadSlotsUnused Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "244",
"version": "0",
"level": "5",
"task": "41",
"opcode": "17",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:51:50.466716000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fRet": "1",
"cPaxuadSlots": "10",
"cPaxuadSlotsUsed": "4",
"cPaxuadSlotsUnused": "6"
},
"message": ""
}
Event ID 245: tskUndoUndoMergeFinalized
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
FCI UInt32 | |
dcp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "245",
"version": "0",
"level": "4",
"task": "41",
"opcode": "18",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"FCI": "0",
"dcp": "0"
},
"message": ""
}
Event ID 246: tskUndoNoUndoMerge
#Fields #
| Name | Description |
|---|---|
reason UInt32 | |
FCI UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "246",
"version": "0",
"level": "4",
"task": "41",
"opcode": "19",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"reason": "0",
"FCI": "0"
},
"message": ""
}
Event ID 250: tskReadingModeReflowOccurred_V1
#Fields #
| Name | Description |
|---|---|
RMRR UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "250",
"version": "1",
"level": "4",
"task": "35",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RMRR": "0"
},
"message": ""
}
Event ID 251: tskZoomScrollCause
#Fields #
| Name | Description |
|---|---|
ZoomScrollCause UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "39",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ZoomScrollCause": "0"
},
"message": ""
}
Event ID 252: tskFieldUpdateFieldUpdateStart
#Fields #
| Name | Description |
|---|---|
flt Int32 | |
fcr Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "252",
"version": "0",
"level": "4",
"task": "44",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 253: tskFieldUpdateFieldUpdateEnd
#Fields #
| Name | Description |
|---|---|
flt Int32 | |
fcr Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "253",
"version": "0",
"level": "4",
"task": "44",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 254: tskBootCoreBootStart
#Fields #
| Name | Description |
|---|---|
cTasks Int32 | |
Endpoint UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "254",
"version": "0",
"level": "4",
"task": "45",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cTasks": "0",
"Endpoint": "0"
},
"message": ""
}
Event ID 255: tskBootCoreBootStop
#Fields #
| Name | Description |
|---|---|
cExecutedTasks Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "255",
"version": "0",
"level": "4",
"task": "45",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-14T22:34:52.830081500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cExecutedTasks": "159"
},
"message": ""
}
Event ID 256: tskBootBootTaskStart
#Fields #
| Name | Description |
|---|---|
Name UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "256",
"version": "0",
"level": "4",
"task": "45",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": ""
},
"message": ""
}
Event ID 257: tskBootBootTaskStop
#Fields #
| Name | Description |
|---|---|
Name UnicodeString | |
fPass Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "257",
"version": "0",
"level": "4",
"task": "45",
"opcode": "13",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": "",
"fPass": "false"
},
"message": ""
}
Event ID 258: tskWordMailWordMailGetAttachment
#Fields #
| Name | Description |
|---|---|
AttachmentIndex UInt64 | |
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "258",
"version": "0",
"level": "4",
"task": "46",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AttachmentIndex": "0",
"HResult": "0"
},
"message": ""
}
Event ID 259: tskWordMailWordMailSetAttachment
#Fields #
| Name | Description |
|---|---|
CID UnicodeString | |
fReuse Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "259",
"version": "0",
"level": "4",
"task": "46",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CID": "",
"fReuse": "false"
},
"message": ""
}
Event ID 260: tskFieldUpdateFieldUpdateUnsupported
#Fields #
| Name | Description |
|---|---|
flt Int32 | |
fcr Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "260",
"version": "0",
"level": "4",
"task": "44",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"fcr": "0"
},
"message": ""
}
Event ID 261: tskZoomOverlayPctFontMergeConflict
#Fields #
| Name | Description |
|---|---|
pctFontApp Int32 | |
pctFontUI Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "261",
"version": "0",
"level": "4",
"task": "48",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pctFontApp": "0",
"pctFontUI": "0"
},
"message": ""
}
Event ID 262: tskZoomOverlayPctMergeConflict
#Fields #
| Name | Description |
|---|---|
pctApp Int32 | |
pctUI Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "262",
"version": "0",
"level": "4",
"task": "48",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pctApp": "0",
"pctUI": "0"
},
"message": ""
}
Event ID 263: tskBootBeginBootDetail
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "263",
"version": "0",
"level": "4",
"task": "45",
"opcode": "14",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 264: tskBootInitPluggableUICore
#Fields #
| Name | Description |
|---|---|
vcLcidEdit Int32 | |
vfFlavourT Int32 | |
lidInstall Int32 | |
lidUITemp Int32 | |
lidOS Int32 | |
lidDefault Int32 | |
lidPolicy Int32 | |
cpgUI Int32 | |
cpgOS Int32 | |
chsOS Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "264",
"version": "0",
"level": "4",
"task": "45",
"opcode": "15",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"vcLcidEdit": "0",
"vfFlavourT": "0",
"lidInstall": "0",
"lidUITemp": "0",
"lidOS": "0",
"lidDefault": "0",
"lidPolicy": "0",
"cpgUI": "0",
"cpgOS": "0",
"chsOS": "0"
},
"message": ""
}
Event ID 265: tskBootBootParameter
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "265",
"version": "0",
"level": "4",
"task": "45",
"opcode": "16",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 266: tskBootBootTaskInitIntl
#Fields #
| Name | Description |
|---|---|
lidKbd UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "266",
"version": "0",
"level": "4",
"task": "45",
"opcode": "17",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lidKbd": "0"
},
"message": ""
}
Event ID 268: tskBootBootTaskFirstBoot
#Fields #
| Name | Description |
|---|---|
fOsrc Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "268",
"version": "0",
"level": "4",
"task": "45",
"opcode": "19",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fOsrc": "false"
},
"message": ""
}
Event ID 269: tskWebScalingViewAutoswitch_V1
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
autoSwitchedByFCI Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "269",
"version": "1",
"level": "4",
"task": "49",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"autoSwitchedByFCI": "0"
},
"message": ""
}
Event ID 270: tskMemoryUsageMemoryLevelChange
#Fields #
| Name | Description |
|---|---|
LevelPrev Int32 | |
LevelCur Int32 | |
UsageCur UInt64 | |
LimitCur UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "270",
"version": "0",
"level": "4",
"task": "50",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelPrev": "0",
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 271: tskMemoryUsageMemoryLimitChange
#Fields #
| Name | Description |
|---|---|
LimitPrev UInt64 | |
LimitCur UInt64 | |
UsageCur UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "271",
"version": "0",
"level": "4",
"task": "50",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LimitPrev": "0",
"LimitCur": "0",
"UsageCur": "0"
},
"message": ""
}
Event ID 272: tskMemoryUsageMemoryLevelCurrent
#Fields #
| Name | Description |
|---|---|
LevelCur Int32 | |
UsageCur UInt64 | |
LimitCur UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "272",
"version": "0",
"level": "5",
"task": "50",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 273: tskMemoryUsageMemoryLevelAfterCachePolicyChange
#Fields #
| Name | Description |
|---|---|
LevelPrev Int32 | |
UsagePrev UInt64 | |
LimitPrev UInt64 | |
LevelCur Int32 | |
UsageCur UInt64 | |
LimitCur UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "273",
"version": "0",
"level": "4",
"task": "50",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LevelPrev": "0",
"UsagePrev": "0",
"LimitPrev": "0",
"LevelCur": "0",
"UsageCur": "0",
"LimitCur": "0"
},
"message": ""
}
Event ID 274: tskWordMailWordMailInsertParts
#Fields #
| Name | Description |
|---|---|
PartCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "274",
"version": "0",
"level": "4",
"task": "46",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartCount": "0"
},
"message": ""
}
Event ID 275: tskWordMailWordMailInsertParts275
#Fields #
| Name | Description |
|---|---|
PartCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "275",
"version": "0",
"level": "4",
"task": "46",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartCount": "0"
},
"message": ""
}
Event ID 276: tskWordMailWordMailCancelSignal
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "276",
"version": "0",
"level": "4",
"task": "46",
"opcode": "13",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 277: tskWordMailWordMailInsertPart277_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ChromeOnly Boolean | |
ReadOnly Boolean | |
PartId UInt32 | |
SdtId UInt32 | |
SdtContentId UInt32 | |
UseBackgroundLoad Boolean | |
ReplacePart Boolean | |
PlainText Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "277",
"version": "1",
"level": "4",
"task": "46",
"opcode": "14",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ChromeOnly": "false",
"ReadOnly": "false",
"PartId": "0",
"SdtId": "0",
"SdtContentId": "0",
"UseBackgroundLoad": "false",
"ReplacePart": "false",
"PlainText": "false"
},
"message": ""
}
Event ID 278: tskWordMailWordMailInsertPart
#Fields #
| Name | Description |
|---|---|
ReadOnly Boolean | |
PartId UInt32 | |
SdtId UInt32 | |
PlainText Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "278",
"version": "0",
"level": "4",
"task": "46",
"opcode": "14",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReadOnly": "false",
"PartId": "0",
"SdtId": "0",
"PlainText": "false"
},
"message": ""
}
Event ID 279: tskWordMailWordMailEditablePart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "279",
"version": "0",
"level": "4",
"task": "46",
"opcode": "15",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 280: tskWordMailWordMailBlockedContentCallbackSet
#Fields #
| Name | Description |
|---|---|
Reset Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "280",
"version": "0",
"level": "4",
"task": "46",
"opcode": "16",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Reset": "false"
},
"message": ""
}
Event ID 281: tskWordMailWordMailSDTInsertedSuccess
#Fields #
| Name | Description |
|---|---|
SDTType UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "281",
"version": "0",
"level": "4",
"task": "46",
"opcode": "17",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SDTType": "0"
},
"message": ""
}
Event ID 282: tskWordMailWordMailInsertSdtAtBeginning
#Fields #
| Name | Description |
|---|---|
Index UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "282",
"version": "0",
"level": "4",
"task": "46",
"opcode": "18",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Index": "0"
},
"message": ""
}
Event ID 283: tskWordMailWordMailGetInsertionCp
#Fields #
| Name | Description |
|---|---|
CP Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "283",
"version": "0",
"level": "4",
"task": "46",
"opcode": "19",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CP": "0"
},
"message": ""
}
Event ID 284: tskWordMailWordMailCancelPendingE2ODownload
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "284",
"version": "0",
"level": "4",
"task": "46",
"opcode": "20",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 285: tskWordMailWordMailSetAuthorName
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "285",
"version": "0",
"level": "4",
"task": "46",
"opcode": "21",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 286: tskWordMailWordMailClearFastDocument_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "286",
"version": "1",
"level": "4",
"task": "46",
"opcode": "22",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 287: tskWordMailWordMailSave
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "287",
"version": "0",
"level": "4",
"task": "46",
"opcode": "23",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 288: tskWordMailWordMailUpdateContentStart
#Fields #
| Name | Description |
|---|---|
IsPlainText Boolean | |
NumberAttachments UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "288",
"version": "0",
"level": "4",
"task": "46",
"opcode": "24",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsPlainText": "false",
"NumberAttachments": "0"
},
"message": ""
}
Event ID 289: tskWordMailWordMailUpdateContentStop
#Fields #
| Name | Description |
|---|---|
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "289",
"version": "0",
"level": "4",
"task": "46",
"opcode": "25",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 290: tskWordMailWordMailAppendContentStart
#Fields #
| Name | Description |
|---|---|
PlainText Boolean | |
StreamCount UInt64 | |
AttachmentCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "290",
"version": "0",
"level": "4",
"task": "46",
"opcode": "26",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PlainText": "false",
"StreamCount": "0",
"AttachmentCount": "0"
},
"message": ""
}
Event ID 291: tskWordMailWordMailAppendContentStop
#Fields #
| Name | Description |
|---|---|
Success Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "291",
"version": "0",
"level": "4",
"task": "46",
"opcode": "27",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false"
},
"message": ""
}
Event ID 292: tskWordMailWordMailInsertParaBeforeMessageContent
#Fields #
| Name | Description |
|---|---|
ParaCP Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "292",
"version": "0",
"level": "4",
"task": "46",
"opcode": "28",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ParaCP": "0"
},
"message": ""
}
Event ID 293: tskWordMailWordMailContentCopySuccess
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "293",
"version": "0",
"level": "4",
"task": "46",
"opcode": "29",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 294: tskWordMailWordMailE2OCountInMessage
#Fields #
| Name | Description |
|---|---|
Count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "294",
"version": "0",
"level": "4",
"task": "46",
"opcode": "30",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count": "0"
},
"message": ""
}
Event ID 295: tskWordMailWordMailUpdateE2OLinkedPath
#Fields #
| Name | Description |
|---|---|
ID UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "295",
"version": "0",
"level": "4",
"task": "46",
"opcode": "31",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ID": ""
},
"message": ""
}
Event ID 296: tskWordMailWordMailUpdateAttachment
#Fields #
| Name | Description |
|---|---|
ID UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "296",
"version": "0",
"level": "4",
"task": "46",
"opcode": "32",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ID": ""
},
"message": ""
}
Event ID 297: tskWordMailWordMailReadOnlyStateChanged
#Fields #
| Name | Description |
|---|---|
IsReadOnly Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "297",
"version": "0",
"level": "4",
"task": "46",
"opcode": "33",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsReadOnly": "false"
},
"message": ""
}
Event ID 298: tskWordMailWordMailCreatePdodPart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "298",
"version": "0",
"level": "4",
"task": "46",
"opcode": "34",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 299: tskWordMailWordMailHeaderFooterChanged
#Fields #
| Name | Description |
|---|---|
PartId UInt32 | |
SdtId UInt32 | |
IsHeader Boolean | |
HeaderXValue UInt32 | |
HeaderYValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "299",
"version": "0",
"level": "4",
"task": "46",
"opcode": "35",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"SdtId": "0",
"IsHeader": "false",
"HeaderXValue": "0",
"HeaderYValue": "0"
},
"message": ""
}
Event ID 300: tskWordMailWordMailPdodToPistm
#Fields #
| Name | Description |
|---|---|
OutputType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "46",
"opcode": "36",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"OutputType": "0"
},
"message": ""
}
Event ID 301: tskWordMailWordMailLoadDocumentPartStart
#Fields #
| Name | Description |
|---|---|
UseBackgroundLoading Boolean | |
IsReadOnly Boolean | |
IsPlainText Boolean | |
Encoding Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "301",
"version": "0",
"level": "4",
"task": "46",
"opcode": "37",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UseBackgroundLoading": "false",
"IsReadOnly": "false",
"IsPlainText": "false",
"Encoding": "0"
},
"message": ""
}
Event ID 302: tskWordMailWordMailLoadDocumentPartStop
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "46",
"opcode": "38",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 303: tskWordMailWordMailCreateEmptyDoc
#Fields #
| Name | Description |
|---|---|
IsvpdodGlobalDot Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "46",
"opcode": "39",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"IsvpdodGlobalDot": "false"
},
"message": ""
}
Event ID 304: tskWordMailWordMailBlockContentDownload
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "46",
"opcode": "40",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 305: tskWordMailWordMailAbortMessageLoad
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "46",
"opcode": "41",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 306: tskWebScalingViewDefaultView
#Fields #
| Name | Description |
|---|---|
fDefaultViewWebScaling Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "49",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDefaultViewWebScaling": "false"
},
"message": ""
}
Event ID 307: tskViewportViewportZoomTo_V1
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
Wwd UnicodeString | |
Pct Zoom Double |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "307",
"version": "1",
"level": "4",
"task": "11",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:35:41.425107900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "14136",
"thread_id": "13320"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x25ACDCD2D80",
"Wwd": "Low Res Page",
"Pct Zoom": "10.000000"
},
"message": ""
}
Event ID 308: tskWordMailWordMailCalcWNUIHitTestingTime
#Fields #
| Name | Description |
|---|---|
MsForHitTesting UInt64 | |
CountOfWindowlessNetUI UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "46",
"opcode": "42",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MsForHitTesting": "0",
"CountOfWindowlessNetUI": "0"
},
"message": ""
}
Event ID 309: tskEdpEdpiFromIdocNil
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "52",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 310: tskEdpEdpiFromIdocSuccess
#Fields #
| Name | Description |
|---|---|
fProtected Boolean | |
fEmptyIdentity Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "52",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fProtected": "false",
"fEmptyIdentity": "false"
},
"message": ""
}
Event ID 311: tskMemoryUsageMemoryReenableCache
#Fields #
| Name | Description |
|---|---|
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "311",
"version": "0",
"level": "4",
"task": "50",
"opcode": "14",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 312: tskBootBootToIdleStop
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "45",
"opcode": "20",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 313: tskCommandingDocumentClose
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
docKind UInt32 | |
SQMDocID GUID | |
DocumentId UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "313",
"version": "0",
"level": "4",
"task": "9",
"opcode": "18",
"keywords": 9223372036854775824,
"time_created": "2026-03-14T21:57:27.606864300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x2CA3EA2C1D0",
"docKind": "0x1",
"SQMDocID": "{eb36f39b-65d1-4e9f-bec3-ebc6abbde1b0}",
"DocumentId": "2063860877"
},
"message": ""
}
Event ID 314: tskObjectModel
#Fields #
| Name | Description |
|---|---|
obi Int32 | |
ioid Int32 | |
dispid Int32 | |
Invoke UnicodeString | |
ClassName UnicodeString | |
MethodPropName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "314",
"version": "0",
"level": "4",
"task": "54",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"obi": "0",
"ioid": "0",
"dispid": "0",
"Invoke": "",
"ClassName": "",
"MethodPropName": ""
},
"message": ""
}
Event ID 315: tskEdpEdpRevokedSession
#Fields #
| Name | Description |
|---|---|
RevokedSession GUID |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "315",
"version": "0",
"level": "4",
"task": "52",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RevokedSession": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 316: tskEdpEdpIdentityChanged
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "316",
"version": "0",
"level": "4",
"task": "52",
"opcode": "13",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 317: tskProofingAutoCorrectArrow
#Fields #
| Name | Description |
|---|---|
fThinAutoCorrectArrowType Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "317",
"version": "0",
"level": "4",
"task": "24",
"opcode": "19",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fThinAutoCorrectArrowType": "false"
},
"message": ""
}
Event ID 321: tskViewportViewportMoving
#Fields #
| Name | Description |
|---|---|
x Scroll Int32 | |
y Scroll Int32 | |
Pct Zoom Double | |
In DM Boolean | |
In VM Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "321",
"version": "0",
"level": "4",
"task": "11",
"opcode": "31",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T22:35:41.465852200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "14136",
"thread_id": "13320"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "0",
"y Scroll": "0",
"Pct Zoom": "100.000000",
"In DM": "false",
"In VM": "false"
},
"message": ""
}
Event ID 322: tskViewportViewportMoved
#Fields #
| Name | Description |
|---|---|
x Scroll Int32 | |
y Scroll Int32 | |
Pct Zoom Double | |
In DM Boolean | |
In VM Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "322",
"version": "0",
"level": "4",
"task": "11",
"opcode": "32",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:30.227811100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"x Scroll": "679",
"y Scroll": "93",
"Pct Zoom": "100.000000",
"In DM": "false",
"In VM": "false"
},
"message": ""
}
Event ID 323: tskWordMailWordMailUnsupportedHTML
#Fields #
| Name | Description |
|---|---|
unknownUnsupported UInt32 | |
cssTableBackgroundImage UInt32 | |
cssASpanPaddingBottom UInt32 | |
cssASpanMarginBottom UInt32 | |
cssDivASpanDimensions UInt32 | |
cssPosition UInt32 | |
htmlTableBackgroundImage UInt32 | |
htmlForm UInt32 | |
tableHeaderOrFooter UInt32 | |
tableWiderThan61Cols UInt32 | |
tableColspan UInt32 | |
tableCaption UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "323",
"version": "0",
"level": "4",
"task": "46",
"opcode": "43",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"unknownUnsupported": "0",
"cssTableBackgroundImage": "0",
"cssASpanPaddingBottom": "0",
"cssASpanMarginBottom": "0",
"cssDivASpanDimensions": "0",
"cssPosition": "0",
"htmlTableBackgroundImage": "0",
"htmlForm": "0",
"tableHeaderOrFooter": "0",
"tableWiderThan61Cols": "0",
"tableColspan": "0",
"tableCaption": "0"
},
"message": ""
}
Event ID 324: tskAtMentionsAtMentionAdded
#Fields #
| Name | Description |
|---|---|
dk Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "324",
"version": "0",
"level": "5",
"task": "55",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dk": "0"
},
"message": ""
}
Event ID 325: tskAtMentionsAtMentionRemoved
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "325",
"version": "0",
"level": "5",
"task": "55",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 326: tskAtMentionsAtMentionShortened_V1
#Fields #
| Name | Description |
|---|---|
id UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "326",
"version": "1",
"level": "5",
"task": "55",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"id": ""
},
"message": ""
}
Event ID 327: tskAtMentionsAtMentionCCardOpened
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "327",
"version": "0",
"level": "5",
"task": "55",
"opcode": "13",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 328
#Event ID 329: tskAtMentionsAtMentionFlyoutInvoke
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "329",
"version": "0",
"level": "5",
"task": "55",
"opcode": "15",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 330: tskAtMentionsAtMentionFlyoutDismiss_V1
#Fields #
| Name | Description |
|---|---|
Dismissal Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "330",
"version": "1",
"level": "5",
"task": "55",
"opcode": "16",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dismissal Reason": "0"
},
"message": ""
}
Event ID 331: tskAtMentionsAtMentionDocOpen
#Fields #
| Name | Description |
|---|---|
cAtm Int32 | |
dk Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "331",
"version": "0",
"level": "5",
"task": "55",
"opcode": "17",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cAtm": "0",
"dk": "0"
},
"message": ""
}
Event ID 332: tskAtMentionsAtMentionDocOpen332
#Fields #
| Name | Description |
|---|---|
cAtm Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "332",
"version": "0",
"level": "5",
"task": "55",
"opcode": "17",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cAtm": "0"
},
"message": ""
}
Event ID 333: tskBootBootTaskTimeTaken_V1
#Fields #
| Name | Description |
|---|---|
Name UnicodeString | |
fPass Boolean | |
msecTimeTaken UInt64 | |
tInterrupted Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "333",
"version": "1",
"level": "4",
"task": "45",
"opcode": "21",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Name": "",
"fPass": "false",
"msecTimeTaken": "0",
"tInterrupted": "0"
},
"message": ""
}
Event ID 334: tskReadingModeAllowAutoReadingMode
#Fields #
| Name | Description |
|---|---|
AllowAutoRM Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "334",
"version": "0",
"level": "4",
"task": "35",
"opcode": "13",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"AllowAutoRM": "false"
},
"message": ""
}
Event ID 335: tskReadingModeAllowAutoReadingModeChange
#Fields #
| Name | Description |
|---|---|
Old Value Boolean | |
New Value Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "335",
"version": "0",
"level": "4",
"task": "35",
"opcode": "14",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Old Value": "false",
"New Value": "false"
},
"message": ""
}
Event ID 336: tskWebScalingViewZoomReset_V1
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
Old Pct Zoom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "336",
"version": "1",
"level": "4",
"task": "49",
"opcode": "15",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"Old Pct Zoom": "0"
},
"message": ""
}
Event ID 337: tskDialogPopupMenuOpening
#Fields #
| Name | Description |
|---|---|
tbt UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "337",
"version": "0",
"level": "4",
"task": "10",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tbt": "0"
},
"message": ""
}
Event ID 338: tskDialogPopupMenuOpened
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "338",
"version": "0",
"level": "4",
"task": "10",
"opcode": "13",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 339: tskE1oUpconvertE1oUpconvertWrapPathBoundingBoxComparison
#Fields #
| Name | Description |
|---|---|
leftDelta UInt32 | |
rightDelta UInt32 | |
topDelta UInt32 | |
bottomDelta UInt32 | |
widthE1o UInt32 | |
widthE2o UInt32 | |
heightE1o UInt32 | |
heightE2o UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "339",
"version": "0",
"level": "4",
"task": "8",
"opcode": "14",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"leftDelta": "0",
"rightDelta": "0",
"topDelta": "0",
"bottomDelta": "0",
"widthE1o": "0",
"widthE2o": "0",
"heightE1o": "0",
"heightE2o": "0"
},
"message": ""
}
Event ID 340: tskResponsivenessBucketedResponsivenessDataStart
#Fields #
| Name | Description |
|---|---|
rstyp UInt32 | |
xsz UnicodeString | |
timeoutLength UInt64 | |
corlid UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "340",
"version": "0",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"rstyp": "0",
"xsz": "",
"timeoutLength": "0",
"corlid": "0"
},
"message": ""
}
Event ID 341: tskResponsivenessBucketedResponsivenessDataStop
#Fields #
| Name | Description |
|---|---|
rstyp UInt32 | |
xsz UnicodeString | |
fActive Boolean | |
corlid UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "341",
"version": "0",
"level": "4",
"task": "1",
"opcode": "13",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"rstyp": "0",
"xsz": "",
"fActive": "false",
"corlid": "0"
},
"message": ""
}
Event ID 342: tskViewportZoomScrollAnimationStart
#Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "342",
"version": "0",
"level": "4",
"task": "11",
"opcode": "33",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:51:59.006744500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": " 2"
},
"message": ""
}
Event ID 343: tskViewportZoomScrollAnimationEnd
#Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "343",
"version": "0",
"level": "4",
"task": "11",
"opcode": "34",
"keywords": 9223372036854775872,
"time_created": "2026-03-14T21:52:33.398966500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": " 5"
},
"message": ""
}
Event ID 344: tskNavigationScrubberDocumentScrollEnd_V1
#Fields #
| Name | Description |
|---|---|
X Distance Scrolled Int32 | |
Y Distance Scrolled Int32 | |
Direct Manipulation Boolean | |
Thumb Used Boolean | |
Preview Shown Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "344",
"version": "1",
"level": "4",
"task": "56",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"X Distance Scrolled": "0",
"Y Distance Scrolled": "0",
"Direct Manipulation": "false",
"Thumb Used": "false",
"Preview Shown": "false"
},
"message": ""
}
Event ID 345: tskWordMailWordMailSendingHtmlList
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "345",
"version": "0",
"level": "4",
"task": "46",
"opcode": "44",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 346: tskWordMailWordMailSending
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "346",
"version": "0",
"level": "4",
"task": "46",
"opcode": "45",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 347: tskWordMailWordMailForceInlineList
#Fields #
| Name | Description |
|---|---|
ForceInline Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "347",
"version": "0",
"level": "4",
"task": "46",
"opcode": "46",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ForceInline Reason": "0"
},
"message": ""
}
Event ID 348: tskAtMentionsAtMentionNotificationCollectorProcessList
#Fields #
| Name | Description |
|---|---|
Total Notifications UInt32 | |
Added Notifications UInt32 | |
Removed Notifications UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "348",
"version": "0",
"level": "5",
"task": "55",
"opcode": "18",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Total Notifications": "0",
"Added Notifications": "0",
"Removed Notifications": "0"
},
"message": ""
}
Event ID 349: tskAtMentionsAtMentionNotificationCollectorResetList
#Fields #
| Name | Description |
|---|---|
Total Notifications UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "349",
"version": "0",
"level": "5",
"task": "55",
"opcode": "19",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Total Notifications": "0"
},
"message": ""
}
Event ID 350: tskWordMailWordMailUnexpectedDirtyDoc
#Fields #
| Name | Description |
|---|---|
DirtyCode UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "350",
"version": "0",
"level": "4",
"task": "46",
"opcode": "47",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DirtyCode": "0"
},
"message": ""
}
Event ID 351: tskWordMailWordMailSendExportDone
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "46",
"opcode": "48",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 352: tskHtmlFeaturesHtmlImportImageRelWidth
#Fields #
| Name | Description |
|---|---|
Itap Int32 | |
HeightSpecified Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "57",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Itap": "0",
"HeightSpecified": "false"
},
"message": ""
}
Event ID 353: tskHtmlFeaturesHtmlImportTableMaxWidth
#Fields #
| Name | Description |
|---|---|
Itap Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "353",
"version": "0",
"level": "4",
"task": "57",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Itap": "0"
},
"message": ""
}
Event ID 354: tskViewportViewportZoomTimerImSet
#Fields #
| Name | Description |
|---|---|
Timer Duration (msec) UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "354",
"version": "0",
"level": "4",
"task": "11",
"opcode": "35",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Timer Duration (msec)": "0"
},
"message": ""
}
Event ID 355: tskViewportViewportZoomTimerImFire
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "355",
"version": "0",
"level": "4",
"task": "11",
"opcode": "36",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 356: tskWordMailWordMailSendSpecialListItem
#Fields #
| Name | Description |
|---|---|
sti Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "356",
"version": "0",
"level": "4",
"task": "46",
"opcode": "49",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"sti": "0"
},
"message": ""
}
Event ID 357: tskBootPreviewHandler
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "357",
"version": "0",
"level": "4",
"task": "45",
"opcode": "22",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 358: tskBootSessionHandoffReceived
#Fields #
| Name | Description |
|---|---|
message UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "358",
"version": "0",
"level": "4",
"task": "45",
"opcode": "23",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"message": "0"
},
"message": ""
}
Event ID 359: tskBootBootSummary_V4
#Fields #
| Name | Description |
|---|---|
commandline UnicodeString | |
fMainExe Boolean | |
fSafeMode Boolean | |
fOleLaunchedUs Boolean | |
fOleAutomation Boolean | |
fMacroOnCmdLine Boolean | |
fLoadAddIns Boolean | |
fOnly1DDEDcl Boolean | |
fOpenAsNew Boolean | |
fReadWriteOnSave Boolean | |
fRestore Boolean | |
fNormalDotSafe Boolean | |
fDotEvt Boolean | |
fMacroSwitch Boolean | |
fOpenedDrp Boolean | |
fDocRecoveryWorkPane Boolean | |
fShowOutspace Boolean | |
fShowAllDrps Boolean | |
fDidCrashRecoveryLastTime Boolean | |
fRestoringFromRestart Boolean | |
fFreezeDryEnabled Boolean | |
cdrpGroups Int32 | |
cdrpResolvedWithOthers Int32 | |
cdrpRepaired Int32 | |
cdrpSavedOnCrash Int32 | |
cmdLineFlagsExtended UInt32 | |
fGlobalDotMatchesDefault Boolean | |
fInterrupted Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "359",
"version": "4",
"level": "4",
"task": "45",
"opcode": "24",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"commandline": "",
"fMainExe": "false",
"fSafeMode": "false",
"fOleLaunchedUs": "false",
"fOleAutomation": "false",
"fMacroOnCmdLine": "false",
"fLoadAddIns": "false",
"fOnly1DDEDcl": "false",
"fOpenAsNew": "false",
"fReadWriteOnSave": "false",
"fRestore": "false",
"fNormalDotSafe": "false",
"fDotEvt": "false",
"fMacroSwitch": "false",
"fOpenedDrp": "false",
"fDocRecoveryWorkPane": "false",
"fShowOutspace": "false",
"fShowAllDrps": "false",
"fDidCrashRecoveryLastTime": "false",
"fRestoringFromRestart": "false",
"fFreezeDryEnabled": "false",
"cdrpGroups": "0",
"cdrpResolvedWithOthers": "0",
"cdrpRepaired": "0",
"cdrpSavedOnCrash": "0",
"cmdLineFlagsExtended": "0",
"fGlobalDotMatchesDefault": "false",
"fInterrupted": "false"
},
"message": ""
}
Event ID 360: tskFastAccGetAnnotationObjectAttribute
#Fields #
| Name | Description |
|---|---|
cFootnoteObjects UInt64 | |
cEndnoteObjects UInt64 | |
cTrackedChangeObjects UInt64 | |
cCommentObjects UInt64 | |
cRtcPresenceObjects UInt64 | |
cCoauthLockObjects UInt64 | |
cAtnObjects UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "360",
"version": "0",
"level": "4",
"task": "14",
"opcode": "15",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cFootnoteObjects": "0",
"cEndnoteObjects": "0",
"cTrackedChangeObjects": "0",
"cCommentObjects": "0",
"cRtcPresenceObjects": "0",
"cCoauthLockObjects": "0",
"cAtnObjects": "0"
},
"message": ""
}
Event ID 362
#Event ID 363
#Event ID 364
#Event ID 371: tskWordMailWordMailLogMultiFrameHsp
#Fields #
| Name | Description |
|---|---|
cHsp UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "371",
"version": "0",
"level": "4",
"task": "46",
"opcode": "50",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cHsp": "0"
},
"message": ""
}
Event ID 372: tskWordMailWordMailLogAnimatedE2o
#Fields #
| Name | Description |
|---|---|
cE2o UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "372",
"version": "0",
"level": "4",
"task": "46",
"opcode": "51",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cE2o": "0"
},
"message": ""
}
Event ID 373: tskProofingProofingApplySpellSuggestionNumber
#Fields #
| Name | Description |
|---|---|
SuggestionNumber Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "373",
"version": "0",
"level": "4",
"task": "24",
"opcode": "20",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"SuggestionNumber": "0"
},
"message": ""
}
Event ID 374: tskProofingProofingDeleteRepeatedWord
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "374",
"version": "0",
"level": "4",
"task": "24",
"opcode": "21",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 375: tskProofingProofingNotifyNoMoreErrors
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "375",
"version": "0",
"level": "4",
"task": "24",
"opcode": "22",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 376: tskProofingProofingClosePaneUI
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "376",
"version": "0",
"level": "4",
"task": "24",
"opcode": "23",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 377: tskProofingProofingOpenPaneUI
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "377",
"version": "0",
"level": "4",
"task": "24",
"opcode": "24",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 378: tskWordMailWordMailHyperlinkParseUrl
#Fields #
| Name | Description |
|---|---|
HyperlinkDestinationType UInt32 | |
FromAnchorTag Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "378",
"version": "0",
"level": "4",
"task": "46",
"opcode": "52",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkDestinationType": "0",
"FromAnchorTag": "false"
},
"message": ""
}
Event ID 379: tskWordMailWordMailHyperlinkClick
#Fields #
| Name | Description |
|---|---|
HyperlinkDestinationType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "379",
"version": "0",
"level": "4",
"task": "46",
"opcode": "53",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkDestinationType": "0"
},
"message": ""
}
Event ID 382: tskDialogStartDialog
#Fields #
| Name | Description |
|---|---|
Dlg Type UnicodeString | |
Dlg ID UInt64 | |
Cmd Name UnicodeString | |
FCI UInt32 | |
TCID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "382",
"version": "0",
"level": "4",
"task": "10",
"opcode": "14",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dlg Type": "",
"Dlg ID": "0",
"Cmd Name": "",
"FCI": "0",
"TCID": "0"
},
"message": ""
}
Event ID 383: tskWordMailWordMailBgLoadStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "383",
"version": "0",
"level": "4",
"task": "46",
"opcode": "56",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 384: tskWordMailWordMailBgLoadEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "384",
"version": "0",
"level": "4",
"task": "46",
"opcode": "57",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 385: tskWordMailWordMailBgLoadBatchStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "385",
"version": "0",
"level": "4",
"task": "46",
"opcode": "58",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 386: tskWordMailWordMailBgLoadBatchEnd
#Fields #
| Name | Description |
|---|---|
cPartsLoaded UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "386",
"version": "0",
"level": "4",
"task": "46",
"opcode": "59",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cPartsLoaded": "0"
},
"message": ""
}
Event ID 387: tskWordMailWordMailBgLoadTimeToMain
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "387",
"version": "0",
"level": "4",
"task": "46",
"opcode": "60",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 388: tskWordMailWordMailHostedPanelCreate
#Fields #
| Name | Description |
|---|---|
HostedControl Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "388",
"version": "0",
"level": "4",
"task": "46",
"opcode": "61",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HostedControl": "0x0"
},
"message": ""
}
Event ID 389: tskWordMailWordMailHostedPanelDestroy
#Fields #
| Name | Description |
|---|---|
HostedControl Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "389",
"version": "0",
"level": "4",
"task": "46",
"opcode": "62",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HostedControl": "0x0"
},
"message": ""
}
Event ID 390: tskWordMailWordMailNewAttachmentTruncationLogic
#Fields #
| Name | Description |
|---|---|
fTruncationNeeded Boolean | |
fCallSucceeded Boolean | |
addtionalSpaceNeeded Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "390",
"version": "0",
"level": "4",
"task": "46",
"opcode": "63",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fTruncationNeeded": "false",
"fCallSucceeded": "false",
"addtionalSpaceNeeded": "0"
},
"message": ""
}
Event ID 391: tskObjectModelOMCTextStr2DestructorDisposedPdod
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "391",
"version": "0",
"level": "4",
"task": "54",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 392: tskWordMailWordMailInsertCards
#Fields #
| Name | Description |
|---|---|
CardCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "392",
"version": "0",
"level": "4",
"task": "46",
"opcode": "64",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardCount": "0"
},
"message": ""
}
Event ID 393: tskWordMailWordMailInsertCards393
#Fields #
| Name | Description |
|---|---|
CardCount UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "393",
"version": "0",
"level": "4",
"task": "46",
"opcode": "64",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardCount": "0"
},
"message": ""
}
Event ID 394: tskWordMailWordMailInsertCard
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
CardId UInt32 | |
dxaLeftOffset UInt64 | |
dxaRightOffset UInt64 | |
dyaTopOffset UInt64 | |
dyaBottomOffset UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "394",
"version": "0",
"level": "4",
"task": "46",
"opcode": "65",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0",
"dxaLeftOffset": "0",
"dxaRightOffset": "0",
"dyaTopOffset": "0",
"dyaBottomOffset": "0"
},
"message": ""
}
Event ID 395: tskWordMailWordMailReplaceParts
#Fields #
| Name | Description |
|---|---|
PartsToRemove UInt64 | |
CardId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "395",
"version": "0",
"level": "4",
"task": "46",
"opcode": "67",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartsToRemove": "0",
"CardId": "0"
},
"message": ""
}
Event ID 396: tskWordMailWordMailReplaceParts396
#Fields #
| Name | Description |
|---|---|
PartsToRemove UInt64 | |
CardId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "396",
"version": "0",
"level": "4",
"task": "46",
"opcode": "67",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartsToRemove": "0",
"CardId": "0"
},
"message": ""
}
Event ID 397: tskWordMailWordMailReplaceCards
#Fields #
| Name | Description |
|---|---|
CardIdToReplace UInt32 | |
CardsToRemove UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "397",
"version": "0",
"level": "4",
"task": "46",
"opcode": "68",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardIdToReplace": "0",
"CardsToRemove": "0"
},
"message": ""
}
Event ID 398: tskWordMailWordMailReplaceCards398
#Fields #
| Name | Description |
|---|---|
CardIdToReplace UInt32 | |
CardsToRemove UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "398",
"version": "0",
"level": "4",
"task": "46",
"opcode": "68",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CardIdToReplace": "0",
"CardsToRemove": "0"
},
"message": ""
}
Event ID 399: tskWordMailWordMailToggleCaretBrowsing
#Fields #
| Name | Description |
|---|---|
Enable Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "399",
"version": "0",
"level": "4",
"task": "46",
"opcode": "69",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Enable": "false"
},
"message": ""
}
Event ID 400: tskWordMailWordMailPartActiveStateChanged
#Fields #
| Name | Description |
|---|---|
Active Boolean | |
PartId UInt32 | |
PartSdtId UInt32 | |
PartReadOnly Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "400",
"version": "0",
"level": "4",
"task": "46",
"opcode": "70",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Active": "false",
"PartId": "0",
"PartSdtId": "0",
"PartReadOnly": "false"
},
"message": ""
}
Event ID 401: tskWordMailWordMailRemoveCard
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
CardId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "401",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 402: tskWordMailWordMailSave402
#Fields #
| Name | Description |
|---|---|
Succeeded Boolean | |
LoadAborted Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "402",
"version": "0",
"level": "4",
"task": "46",
"opcode": "23",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false",
"LoadAborted": "false"
},
"message": ""
}
Event ID 403: tskWordMailWordMailRemovePart
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
PartId UInt32 | |
PartSdtId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "403",
"version": "0",
"level": "4",
"task": "46",
"opcode": "71",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"PartId": "0",
"PartSdtId": "0"
},
"message": ""
}
Event ID 404: tskWordMailWordMailWriteSuspendData
#Fields #
| Name | Description |
|---|---|
PartId UInt32 | |
PartSdtId UInt32 | |
DraftName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "404",
"version": "0",
"level": "4",
"task": "46",
"opcode": "72",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"PartSdtId": "0",
"DraftName": ""
},
"message": ""
}
Event ID 405: tskWordMailWordMailTeeExtractResult
#Fields #
| Name | Description |
|---|---|
ResultSize Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "405",
"version": "0",
"level": "4",
"task": "46",
"opcode": "73",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ResultSize": "0"
},
"message": ""
}
Event ID 406: tskWordMailWordMailTeeCreateEntities
#Fields #
| Name | Description |
|---|---|
HyperlinkProtocol UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "406",
"version": "0",
"level": "4",
"task": "46",
"opcode": "74",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HyperlinkProtocol": "0"
},
"message": ""
}
Event ID 407: tskWordMailWordMailScrollTo407_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
PartId UInt32 | |
PartSdtId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "407",
"version": "1",
"level": "4",
"task": "46",
"opcode": "75",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"PartId": "0",
"PartSdtId": "0"
},
"message": ""
}
Event ID 408: tskWordMailWordMailScrollTo
#Fields #
| Name | Description |
|---|---|
PartId UInt32 | |
PartSdtId UInt32 | |
Succeeded Boolean | |
DyDip Int32 | |
DxDip Int32 | |
ScaleUI Float |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "408",
"version": "0",
"level": "4",
"task": "46",
"opcode": "75",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PartId": "0",
"PartSdtId": "0",
"Succeeded": "false",
"DyDip": "0",
"DxDip": "0",
"ScaleUI": "0.0"
},
"message": ""
}
Event ID 409: tskWordMailWordMailReadingPaneViewReady
#Fields #
| Name | Description |
|---|---|
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "409",
"version": "0",
"level": "4",
"task": "46",
"opcode": "76",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Succeeded": "false"
},
"message": ""
}
Event ID 410: tskWordMailWordMailCloseReadingPaneView
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "410",
"version": "0",
"level": "4",
"task": "46",
"opcode": "77",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 411: tskWordMailWordMailCreateReadingPaneDocument
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "411",
"version": "0",
"level": "4",
"task": "46",
"opcode": "78",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 412: tskWordMailWordMailDisposeReadingPaneDocument
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "412",
"version": "0",
"level": "4",
"task": "46",
"opcode": "79",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 413: tskWordMailWordMailDisposeReadingPaneDocument413_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
dxdipMargin Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "413",
"version": "1",
"level": "4",
"task": "46",
"opcode": "79",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"dxdipMargin": "0"
},
"message": ""
}
Event ID 414: tskWordMailWordMailContentOnScreenReady
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "414",
"version": "0",
"level": "4",
"task": "46",
"opcode": "81",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 415: tskWordMailWordMailCreateHostedControl
#Fields #
| Name | Description |
|---|---|
fHeader Boolean | |
ControlHandle UInt64 | |
HostParentHandle UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "415",
"version": "0",
"level": "4",
"task": "46",
"opcode": "82",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fHeader": "false",
"ControlHandle": "0",
"HostParentHandle": "0"
},
"message": ""
}
Event ID 416: tskWordMailWordMailNineGridScaleUnknown
#Fields #
| Name | Description |
|---|---|
ScaleUI Float |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "416",
"version": "0",
"level": "4",
"task": "46",
"opcode": "83",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ScaleUI": "0.0"
},
"message": ""
}
Event ID 417: tskWordMailWordMailRemoveCard417
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
CardId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "417",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 418: tskWordMailWordMailRemoveCard418
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
CardId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "418",
"version": "0",
"level": "4",
"task": "46",
"opcode": "66",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"CardId": "0"
},
"message": ""
}
Event ID 419: tskWordMailWordMailE1oUpconversion
#Fields #
| Name | Description |
|---|---|
Pdod Pointer | |
DusecConversionTime UInt64 | |
E1oCount UInt32 | |
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "419",
"version": "0",
"level": "4",
"task": "46",
"opcode": "84",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DusecConversionTime": "0",
"E1oCount": "0",
"Succeeded": "false"
},
"message": ""
}
Event ID 420: tskClipboardDesktopClipboardDesktopPasteExternal
#Fields #
| Name | Description |
|---|---|
Success Boolean | |
icf UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "420",
"version": "0",
"level": "4",
"task": "58",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 421: tskClipboardDesktopClipboardDesktopPasteInternal
#Fields #
| Name | Description |
|---|---|
Success Boolean | |
icf UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "421",
"version": "0",
"level": "4",
"task": "58",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 422: tskClipboardDesktopClipboardDesktopExportContent
#Fields #
| Name | Description |
|---|---|
Success Boolean | |
icf UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "422",
"version": "0",
"level": "4",
"task": "58",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Success": "false",
"icf": "0"
},
"message": ""
}
Event ID 423: tskE2oOleOperationInsertE2oOle
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "423",
"version": "0",
"level": "4",
"task": "59",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 424: tskE2oOleOperationEditE2oOle
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "424",
"version": "0",
"level": "4",
"task": "59",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 425: tskE2oOleOperationToggleE2oOle
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "425",
"version": "0",
"level": "4",
"task": "59",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 426: tskPrefMigrationPrefMigrationResult
#Fields #
| Name | Description |
|---|---|
fSuccess Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "426",
"version": "0",
"level": "4",
"task": "60",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSuccess": "false"
},
"message": ""
}
Event ID 427: tskE1oUpconvertE1oCloneHspToAnotherDoc
#Fields #
| Name | Description |
|---|---|
ifld Int32 | |
cpMacPdodClone Int32 | |
fCacheAllHspAtOnce Boolean | |
fInline Boolean | |
fPseudoInline Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "427",
"version": "0",
"level": "4",
"task": "8",
"opcode": "15",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ifld": "0",
"cpMacPdodClone": "0",
"fCacheAllHspAtOnce": "false",
"fInline": "false",
"fPseudoInline": "false"
},
"message": ""
}
Event ID 428: tskBootBootResourceUsage
#Fields #
| Name | Description |
|---|---|
usecSystemUptime UInt64 | |
usecUserCpuTime UInt64 | |
usecSystemCpuTime UInt64 | |
usecProcessCpuTime UInt64 | |
usecMainThreadCpuTime UInt64 | |
maxrss Int64 | |
ixrss Int64 | |
idrss Int64 | |
isrss Int64 | |
minflt Int64 | |
majflt Int64 | |
nswap Int64 | |
inblock Int64 | |
oublock Int64 | |
msgsnd Int64 | |
msgrcv Int64 | |
nsignals Int64 | |
nvcsw Int64 | |
nivcsw Int64 | |
fGetrusageSuccess Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "428",
"version": "0",
"level": "4",
"task": "45",
"opcode": "25",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"usecSystemUptime": "0",
"usecUserCpuTime": "0",
"usecSystemCpuTime": "0",
"usecProcessCpuTime": "0",
"usecMainThreadCpuTime": "0",
"maxrss": "0",
"ixrss": "0",
"idrss": "0",
"isrss": "0",
"minflt": "0",
"majflt": "0",
"nswap": "0",
"inblock": "0",
"oublock": "0",
"msgsnd": "0",
"msgrcv": "0",
"nsignals": "0",
"nvcsw": "0",
"nivcsw": "0",
"fGetrusageSuccess": "false"
},
"message": ""
}
Event ID 431: tskE2oOleOperationServerDocCorruptedPdod_V1
#Fields #
| Name | Description |
|---|---|
pmwd Pointer | |
pwwd Pointer | |
hwnd Pointer | |
View Type UnicodeString | |
Count of MWDs Int32 | |
MWD PunkWindow Pointer | |
fServerObjPunkWindow Boolean | |
pdod Pointer | |
dk UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "431",
"version": "1",
"level": "4",
"task": "59",
"opcode": "13",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pmwd": "0x0",
"pwwd": "0x0",
"hwnd": "0x0",
"View Type": "",
"Count of MWDs": "0",
"MWD PunkWindow": "0x0",
"fServerObjPunkWindow": "false",
"pdod": "0x0",
"dk": ""
},
"message": ""
}
Event ID 432: tskDocCorruptionDuplicatedArtIdsFound
#Fields #
| Name | Description |
|---|---|
Found Doc Kind UnicodeString | |
Original Doc Kind UnicodeString | |
BookMark Class UInt16 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "432",
"version": "0",
"level": "4",
"task": "53",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Found Doc Kind": "",
"Original Doc Kind": "",
"BookMark Class": "0"
},
"message": ""
}
Event ID 433: tskWordMailWordMailHostedSizeChangeShift
#Fields #
| Name | Description |
|---|---|
dypAdjust Int32 | |
ypHostedTop Int32 | |
dypScrollable Int32 | |
ypScrollerOffset Int32 | |
dypRootHeight Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "433",
"version": "0",
"level": "4",
"task": "46",
"opcode": "85",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dypAdjust": "0",
"ypHostedTop": "0",
"dypScrollable": "0",
"ypScrollerOffset": "0",
"dypRootHeight": "0"
},
"message": ""
}
Event ID 435: tskProofingHplCreatedForIdpci
#Fields #
| Name | Description |
|---|---|
hpl Pointer | |
idpci UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "435",
"version": "0",
"level": "4",
"task": "24",
"opcode": "27",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hpl": "0x0",
"idpci": "0"
},
"message": ""
}
Event ID 436: tskProofingInvalidHplForIdpci
#Fields #
| Name | Description |
|---|---|
hpl Pointer | |
idpci UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "436",
"version": "0",
"level": "2",
"task": "24",
"opcode": "28",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"hpl": "0x0",
"idpci": "0"
},
"message": ""
}
Event ID 437: tskProofingPopupRewriteCritiqueContext
#Fields #
| Name | Description |
|---|---|
fCannotDeterminePivot Boolean | |
fNoContextAllowable Boolean | |
fContextReduced Boolean | |
fContextReducedToShort Boolean | |
fContextNaturallyTooShort Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "437",
"version": "0",
"level": "4",
"task": "24",
"opcode": "29",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fCannotDeterminePivot": "false",
"fNoContextAllowable": "false",
"fContextReduced": "false",
"fContextReducedToShort": "false",
"fContextNaturallyTooShort": "false"
},
"message": ""
}
Event ID 438: tskFieldUpdateIncludeFieldUpdate
#Fields #
| Name | Description |
|---|---|
flt Int32 | |
Reason Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "438",
"version": "0",
"level": "4",
"task": "44",
"opcode": "13",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"flt": "0",
"Reason": "0"
},
"message": ""
}
Event ID 439: tskProofingEditorPaneOpen
#Fields #
| Name | Description |
|---|---|
fAutoOpen Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "439",
"version": "0",
"level": "4",
"task": "24",
"opcode": "30",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAutoOpen": "false"
},
"message": ""
}
Event ID 440: tskProofingEditorPaneClose
#Fields #
| Name | Description |
|---|---|
fAutoOpen Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "440",
"version": "0",
"level": "4",
"task": "24",
"opcode": "31",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAutoOpen": "false"
},
"message": ""
}
Event ID 441: tskCoreDocEditEditXReplace
#Fields #
| Name | Description |
|---|---|
fPlan Boolean → boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "441",
"version": "0",
"level": "5",
"task": "29",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPlan": "false"
},
"message": ""
}
Event ID 1000: tskPrintLayoutLr
#Fields #
| Name | Description |
|---|---|
docKind UInt32 | |
fHeader Boolean | |
ihdt UInt32 | |
cpStart Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 | |
fDropCap Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1000",
"version": "0",
"level": "200",
"task": "16",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"fDropCap": "false"
},
"message": ""
}
Event ID 1001: tskPrintLayoutLrEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1001",
"version": "0",
"level": "200",
"task": "16",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1002: tskPrintLayoutLrg
#Fields #
| Name | Description |
|---|---|
LrgKind UnicodeString | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1002",
"version": "0",
"level": "200",
"task": "16",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"LrgKind": "",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1003: tskPrintLayoutLrgEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1003",
"version": "0",
"level": "200",
"task": "16",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1030: tskPrintLayoutSpx
#Fields #
| Name | Description |
|---|---|
docAnchorKind UInt32 | |
fHeader Boolean | |
ihdt UInt32 | |
cpAnchor Int32 | |
SpxKind UnicodeString | |
xlLeft Int32 | |
ylTop Int32 | |
xlRight Int32 | |
ylBottom Int32 | |
xlFull Int32 | |
ylFull Int32 | |
fIgnorePositionPTS Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1030",
"version": "0",
"level": "200",
"task": "16",
"opcode": "41",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docAnchorKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpAnchor": "0",
"SpxKind": "",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"xlFull": "0",
"ylFull": "0",
"fIgnorePositionPTS": "false"
},
"message": ""
}
Event ID 1031: tskPrintLayoutSpxEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1031",
"version": "0",
"level": "200",
"task": "16",
"opcode": "42",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1040: tskPrintLayoutSplat
#Fields #
| Name | Description |
|---|---|
docKind UInt32 | |
cpStart Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
lstFlow UInt8 | |
heightRef Int32 | |
heightPres Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1040",
"version": "0",
"level": "200",
"task": "16",
"opcode": "51",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"lstFlow": "0",
"heightRef": "0",
"heightPres": "0"
},
"message": ""
}
Event ID 1041: tskPrintLayoutSplatEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1041",
"version": "0",
"level": "200",
"task": "16",
"opcode": "52",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1050: tskPrintLayoutLine
#Fields #
| Name | Description |
|---|---|
docKind UInt32 | |
cpStart Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
lstFlow UInt8 | |
heightRef Int32 | |
heightPres Int32 | |
upLimAutonumberingText Int32 | |
upLimLineProper Int32 | |
upLimLine Int32 | |
breakEndr UInt16 | |
fForcedBreak Boolean | |
fTopEnable Boolean | |
fBottomEnable Boolean | |
fBetweenTop Boolean | |
fBetweenBottom Boolean | |
fVolatile Boolean | |
fPicture Boolean | |
fHandAtn Boolean | |
fFirstLineCp Boolean | |
fSplatSub Boolean | |
fSfx Boolean | |
lbrCRJ Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1050",
"version": "0",
"level": "200",
"task": "16",
"opcode": "100",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"lstFlow": "0",
"heightRef": "0",
"heightPres": "0",
"upLimAutonumberingText": "0",
"upLimLineProper": "0",
"upLimLine": "0",
"breakEndr": "0",
"fForcedBreak": "false",
"fTopEnable": "false",
"fBottomEnable": "false",
"fBetweenTop": "false",
"fBetweenBottom": "false",
"fVolatile": "false",
"fPicture": "false",
"fHandAtn": "false",
"fFirstLineCp": "false",
"fSplatSub": "false",
"fSfx": "false",
"lbrCRJ": "0"
},
"message": ""
}
Event ID 1051: tskPrintLayoutLineProps
#Fields #
| Name | Description |
|---|---|
lstFlow UInt8 | |
durReservedLeft Int32 | |
durRightIndentBreak Int32 | |
durRightIndentJustify Int32 | |
durHyphenationZone Int32 | |
lsbrj UInt8 | |
lskj UInt8 | |
lskal UInt8 | |
durAutoDecimalTab Int32 | |
fVisiCondHyphens Boolean | |
fVisiParaMarks Boolean | |
fVisiSpaces Boolean | |
fVisiTabs Boolean | |
fVisiSplats Boolean | |
fVisiBreaks Boolean | |
fPunctStartLine Boolean | |
fHangingPunct Boolean | |
fApplyBreakingRules Boolean | |
fApplyOpticalAlignment Boolean | |
fPresSuppressWiggle Boolean | |
fAutonumber Boolean | |
fAutoDecimalTab Boolean | |
fUnderlineTrailSpacesRM Boolean | |
fSpacesInfluenceHeight Boolean | |
fAllowSplatLine Boolean | |
fForceBreakAsNext Boolean | |
fCheckTruncateBefore Boolean | |
fAllowHyphenation Boolean | |
fDrawInLogicalOrder Boolean | |
fTreatHyphenAsRegular Boolean | |
fWrapTrailingSpaces Boolean | |
fWrapAllSpaces Boolean | |
fForgetLastTabAlignment Boolean | |
fIndentChangesHyphenZone Boolean | |
fNoPunctAfterAutoNumber Boolean | |
fResolveTabsAsWord97 Boolean | |
fIgnoreHeightOfEOL Boolean | |
fSpecialFirstLine Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1051",
"version": "0",
"level": "200",
"task": "16",
"opcode": "101",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lstFlow": "0",
"durReservedLeft": "0",
"durRightIndentBreak": "0",
"durRightIndentJustify": "0",
"durHyphenationZone": "0",
"lsbrj": "0",
"lskj": "0",
"lskal": "0",
"durAutoDecimalTab": "0",
"fVisiCondHyphens": "false",
"fVisiParaMarks": "false",
"fVisiSpaces": "false",
"fVisiTabs": "false",
"fVisiSplats": "false",
"fVisiBreaks": "false",
"fPunctStartLine": "false",
"fHangingPunct": "false",
"fApplyBreakingRules": "false",
"fApplyOpticalAlignment": "false",
"fPresSuppressWiggle": "false",
"fAutonumber": "false",
"fAutoDecimalTab": "false",
"fUnderlineTrailSpacesRM": "false",
"fSpacesInfluenceHeight": "false",
"fAllowSplatLine": "false",
"fForceBreakAsNext": "false",
"fCheckTruncateBefore": "false",
"fAllowHyphenation": "false",
"fDrawInLogicalOrder": "false",
"fTreatHyphenAsRegular": "false",
"fWrapTrailingSpaces": "false",
"fWrapAllSpaces": "false",
"fForgetLastTabAlignment": "false",
"fIndentChangesHyphenZone": "false",
"fNoPunctAfterAutoNumber": "false",
"fResolveTabsAsWord97": "false",
"fIgnoreHeightOfEOL": "false",
"fSpecialFirstLine": "false"
},
"message": ""
}
Event ID 1052: tskPrintLayoutLineBorder
#Fields #
| Name | Description |
|---|---|
edge UInt8 | |
brcType Int32 | |
dptLineWidth Int32 | |
dptSpace Int32 | |
fShadow Boolean | |
fFrame Boolean | |
fPdvv Boolean | |
heightRef Int32 | |
heightPres Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1052",
"version": "0",
"level": "200",
"task": "16",
"opcode": "102",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"edge": "0",
"brcType": "0",
"dptLineWidth": "0",
"dptSpace": "0",
"fShadow": "false",
"fFrame": "false",
"fPdvv": "false",
"heightRef": "0",
"heightPres": "0"
},
"message": ""
}
Event ID 1053: tskPrintLayoutLineEnd_V1
#Fields #
| Name | Description |
|---|---|
Text UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1053",
"version": "1",
"level": "200",
"task": "16",
"opcode": "103",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Text": ""
},
"message": ""
}
Event ID 1060: tskPrintLayoutTableCell
#Fields #
| Name | Description |
|---|---|
ipgd Int32 | |
cpStart Int32 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 | |
VerticalAlign UInt16 | |
fVertical Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1060",
"version": "0",
"level": "200",
"task": "16",
"opcode": "130",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"cpStart": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"VerticalAlign": "0",
"fVertical": "false"
},
"message": ""
}
Event ID 1061: tskPrintLayoutTableCellEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1061",
"version": "0",
"level": "200",
"task": "16",
"opcode": "131",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1070: tskPrintLayoutTableRow
#Fields #
| Name | Description |
|---|---|
docKind UInt32 | |
fHeader Boolean | |
ihdt UInt32 | |
cpStart Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1070",
"version": "0",
"level": "200",
"task": "16",
"opcode": "140",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpStart": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1071: tskPrintLayoutTableRowEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1071",
"version": "0",
"level": "200",
"task": "16",
"opcode": "141",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1080: tskPrintLayoutFrame
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1080",
"version": "0",
"level": "200",
"task": "16",
"opcode": "150",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1081: tskPrintLayoutFrameEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1081",
"version": "0",
"level": "200",
"task": "16",
"opcode": "151",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1090: tskPrintLayoutPage
#Fields #
| Name | Description |
|---|---|
ipgdCur Int32 | |
pgnNext Int32 | |
fLandscape Boolean | |
duPageES Int32 | |
dvPageES Int32 | |
fSlicedPage Boolean | |
cpLim Int32 | |
ylTopMargin Int32 | |
ylBottomMargin Int32 | |
xlLeftMargin Int32 | |
xlRightMargin Int32 | |
fEmptyPage Boolean | |
fHasBubbles Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1090",
"version": "0",
"level": "200",
"task": "16",
"opcode": "170",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgdCur": "0",
"pgnNext": "0",
"fLandscape": "false",
"duPageES": "0",
"dvPageES": "0",
"fSlicedPage": "false",
"cpLim": "0",
"ylTopMargin": "0",
"ylBottomMargin": "0",
"xlLeftMargin": "0",
"xlRightMargin": "0",
"fEmptyPage": "false",
"fHasBubbles": "false"
},
"message": ""
}
Event ID 1091: tskPrintLayoutPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1091",
"version": "0",
"level": "200",
"task": "16",
"opcode": "171",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1148: tskPrintLayoutPrintJob
#Fields #
| Name | Description |
|---|---|
printer UnicodeString | |
driver UnicodeString | |
fUsePrinterMetrics Boolean | |
xdpi Int32 | |
ydpi Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1148",
"version": "0",
"level": "200",
"task": "16",
"opcode": "198",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"printer": "",
"driver": "",
"fUsePrinterMetrics": "false",
"xdpi": "0",
"ydpi": "0"
},
"message": ""
}
Event ID 1149: tskPrintLayoutPrintJobEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1149",
"version": "0",
"level": "200",
"task": "16",
"opcode": "199",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1150: tskDisplayLayoutDisplayDr
#Fields #
| Name | Description |
|---|---|
dodKind UInt32 | |
ihdt UInt32 | |
cpFirst Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 | |
fDropCap Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1150",
"version": "0",
"level": "200",
"task": "15",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dodKind": "0",
"ihdt": "0",
"cpFirst": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0",
"fDropCap": "false"
},
"message": ""
}
Event ID 1151: tskDisplayLayoutDisplayDrEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1151",
"version": "0",
"level": "200",
"task": "15",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1152: tskDisplayLayoutDisplayDrg
#Fields #
| Name | Description |
|---|---|
DRK Int32 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1152",
"version": "0",
"level": "200",
"task": "15",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DRK": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1153: tskDisplayLayoutDisplayDrgEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1153",
"version": "0",
"level": "200",
"task": "15",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1160: tskDisplayLayoutDisplayDrdo
#Fields #
| Name | Description |
|---|---|
dodKind UInt32 | |
ihdt UInt32 | |
cpAnchor Int32 | |
drdoKind UInt64 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1160",
"version": "0",
"level": "200",
"task": "15",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dodKind": "0",
"ihdt": "0",
"cpAnchor": "0",
"drdoKind": "0",
"left": "0",
"top": "0",
"right": "0",
"bottom": "0"
},
"message": ""
}
Event ID 1161: tskDisplayLayoutDisplayDrdoEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1161",
"version": "0",
"level": "200",
"task": "15",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1170: tskDisplayLayoutDisplayEdl
#Fields #
| Name | Description |
|---|---|
cpFirst Int32 | |
cpLim Int32 | |
left Int32 | |
top Int32 | |
dxp Int32 | |
dyp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1170",
"version": "0",
"level": "200",
"task": "15",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpFirst": "0",
"cpLim": "0",
"left": "0",
"top": "0",
"dxp": "0",
"dyp": "0"
},
"message": ""
}
Event ID 1171: tskDisplayLayoutDisplayEdlEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1171",
"version": "0",
"level": "200",
"task": "15",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1180: tskDisplayLayoutDisplayPage
#Fields #
| Name | Description |
|---|---|
ipgd Int32 | |
xlLeft Int32 | |
ylTop Int32 | |
xlRight Int32 | |
ylBottom Int32 | |
fLandscape Boolean | |
fGoodClient Boolean | |
yaTopMargin Int32 | |
dyaBottomMargin Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1180",
"version": "0",
"level": "200",
"task": "15",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"fLandscape": "false",
"fGoodClient": "false",
"yaTopMargin": "0",
"dyaBottomMargin": "0"
},
"message": ""
}
Event ID 1181: tskDisplayLayoutDisplayPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1181",
"version": "0",
"level": "200",
"task": "15",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1185: tskDisplayLayoutInsertAbd
#Fields #
| Name | Description |
|---|---|
pabd Pointer → HexInt64 | |
cpFirst Int32 → int | |
cpLim Int32 → int | |
fInsertAbdInPlcAbd Boolean → boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1185",
"version": "0",
"level": "200",
"task": "15",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pabd": "0x0",
"cpFirst": "0",
"cpLim": "0",
"fInsertAbdInPlcAbd": "false"
},
"message": ""
}
Event ID 1190: tskLogDisplayTreeLogDisplayTreeStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1190",
"version": "0",
"level": "4",
"task": "43",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1191: tskLogDisplayTreeLogDisplayTreeEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1191",
"version": "0",
"level": "4",
"task": "43",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1192: tskLogDisplayTree_V1
#Fields #
| Name | Description |
|---|---|
cxpInch Int32 | |
cypInch Int32 | |
cxtInch Int32 | |
cytInch Int32 | |
fticmOut Int32 | |
fticmBase Int32 | |
pctZoom Int32 | |
ViewType UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1192",
"version": "1",
"level": "4",
"task": "43",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cxpInch": "0",
"cypInch": "0",
"cxtInch": "0",
"cytInch": "0",
"fticmOut": "0",
"fticmBase": "0",
"pctZoom": "0",
"ViewType": ""
},
"message": ""
}
Event ID 1193: tskLogDisplayTreeLogDisplayTreePrStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1193",
"version": "0",
"level": "4",
"task": "43",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1194: tskLogDisplayTreeLogDisplayTreePrEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1194",
"version": "0",
"level": "4",
"task": "43",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1195: tskLogDisplayTreeLogDisplayTreePr
#Fields #
| Name | Description |
|---|---|
ipgd Int32 | |
xlLeft Int32 | |
ylTop Int32 | |
xlRight Int32 | |
ylBottom Int32 | |
yaTopMargin Int32 | |
dyaBottomMargin Int32 | |
dmOrient Int32 | |
fGoodClient Boolean | |
cpFirst Int32 | |
cpLim Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1195",
"version": "0",
"level": "4",
"task": "43",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgd": "0",
"xlLeft": "0",
"ylTop": "0",
"xlRight": "0",
"ylBottom": "0",
"yaTopMargin": "0",
"dyaBottomMargin": "0",
"dmOrient": "0",
"fGoodClient": "false",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 1196: tskLogDisplayTreeLogDisplayTreeEdlStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1196",
"version": "0",
"level": "4",
"task": "43",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1197: tskLogDisplayTreeLogDisplayTreeEdlEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1197",
"version": "0",
"level": "4",
"task": "43",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1198: tskLogDisplayTreeLogDisplayTreeEdl
#Fields #
| Name | Description |
|---|---|
xpLeft Int32 | |
ypTop Int32 | |
dxp Int32 | |
dyp Int32 | |
cpMin Int32 | |
dcp Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1198",
"version": "0",
"level": "4",
"task": "43",
"opcode": "18",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xpLeft": "0",
"ypTop": "0",
"dxp": "0",
"dyp": "0",
"cpMin": "0",
"dcp": "0"
},
"message": ""
}
Event ID 1199: tskLogDisplayTreeLogDisplayTreeDrStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1199",
"version": "0",
"level": "4",
"task": "43",
"opcode": "19",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1200: tskLogDisplayTreeLogDisplayTreeDrEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1200",
"version": "0",
"level": "4",
"task": "43",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1201: tskLogDisplayTreeLogDisplayTreeDrText
#Fields #
| Name | Description |
|---|---|
drk Int32 | |
dodKind UInt32 | |
xl Int32 | |
yl Int32 | |
dxl Int32 | |
dyl Int32 | |
xt Int32 | |
yt Int32 | |
dxt Int32 | |
dyt Int32 | |
cpFirst Int32 | |
cpLim Int32 | |
fDropCap Boolean | |
ihdt UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1201",
"version": "0",
"level": "4",
"task": "43",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"xt": "0",
"yt": "0",
"dxt": "0",
"dyt": "0",
"cpFirst": "0",
"cpLim": "0",
"fDropCap": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1202: tskLogDisplayTreeLogDisplayTreeDrTable
#Fields #
| Name | Description |
|---|---|
drk Int32 | |
dodKind UInt32 | |
xl Int32 | |
yl Int32 | |
dxl Int32 | |
dyl Int32 | |
xt Int32 | |
yt Int32 | |
dxt Int32 | |
dyt Int32 | |
cpFirst Int32 | |
cpLim Int32 | |
fDropCap Boolean | |
ihdt UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1202",
"version": "0",
"level": "4",
"task": "43",
"opcode": "22",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"xt": "0",
"yt": "0",
"dxt": "0",
"dyt": "0",
"cpFirst": "0",
"cpLim": "0",
"fDropCap": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1203: tskLogDisplayTreeLogDisplayTreeDrdo
#Fields #
| Name | Description |
|---|---|
drk Int32 | |
dodKind UInt32 | |
cpAnchor Int32 | |
drdoKind UInt64 | |
xl Int32 | |
yl Int32 | |
dxl Int32 | |
dyl Int32 | |
fHdr Boolean | |
ihdt UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1203",
"version": "0",
"level": "4",
"task": "43",
"opcode": "23",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"dodKind": "0",
"cpAnchor": "0",
"drdoKind": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0",
"fHdr": "false",
"ihdt": "0"
},
"message": ""
}
Event ID 1204: tskLogDisplayTreeLogDisplayTreeDrg
#Fields #
| Name | Description |
|---|---|
drk Int32 | |
drkx Int32 | |
xl Int32 | |
yl Int32 | |
dxl Int32 | |
dyl Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1204",
"version": "0",
"level": "4",
"task": "43",
"opcode": "24",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"drkx": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0"
},
"message": ""
}
Event ID 1205: tskLogDisplayTreeLogDisplayTreeDrarto
#Fields #
| Name | Description |
|---|---|
drk Int32 | |
drkx Int32 | |
xl Int32 | |
yl Int32 | |
dxl Int32 | |
dyl Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1205",
"version": "0",
"level": "4",
"task": "43",
"opcode": "26",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "0",
"drkx": "0",
"xl": "0",
"yl": "0",
"dxl": "0",
"dyl": "0"
},
"message": ""
}
Event ID 1206: tskLogDisplayTreeLogDisplayTreeSpx
#Fields #
| Name | Description |
|---|---|
docAnchorKind UInt32 | |
fHeader Boolean | |
ihdt UInt32 | |
cpAnchor Int32 | |
SpxKind UnicodeString | |
xlFull Int32 | |
ylFull Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1206",
"version": "0",
"level": "4",
"task": "43",
"opcode": "29",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"docAnchorKind": "0",
"fHeader": "false",
"ihdt": "0",
"cpAnchor": "0",
"SpxKind": "",
"xlFull": "0",
"ylFull": "0"
},
"message": ""
}
Event ID 1207: tskLogDisplayTreeLogDisplayTreeLinfo
#Fields #
| Name | Description |
|---|---|
dvpAscent Int32 | |
dvrAscent Int32 | |
dvpDescent Int32 | |
dvrDescent Int32 | |
dvpMultiLineHeight Int32 | |
dvrMultiLineHeight Int32 | |
dvpAscentAutoNumber Int32 | |
dvrAscentAutoNumber Int32 | |
dvpDescentAutoNumber Int32 | |
dvrDescentAutoNumber Int32 | |
durContent Int32 | |
cpLimToContinue Int32 | |
cpLimToStay Int32 | |
dcpDepend Int32 | |
endres Int32 | |
vaAdvance Int32 | |
fAdvanced Boolean | |
fFirstLineInPara Boolean | |
fTabInMarginExLine Boolean | |
fForcedBreak Boolean | |
fNoCSSInlineContent Boolean | |
fEllipsis Boolean | |
fNonTextObjectPresent Boolean | |
fAnmPresent Boolean | |
EffectsFlags UInt32 | |
kysr Int32 | |
wchYsr Int32 | |
wchYsr2 Int32 | |
lshq Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1207",
"version": "0",
"level": "4",
"task": "43",
"opcode": "30",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dvpAscent": "0",
"dvrAscent": "0",
"dvpDescent": "0",
"dvrDescent": "0",
"dvpMultiLineHeight": "0",
"dvrMultiLineHeight": "0",
"dvpAscentAutoNumber": "0",
"dvrAscentAutoNumber": "0",
"dvpDescentAutoNumber": "0",
"dvrDescentAutoNumber": "0",
"durContent": "0",
"cpLimToContinue": "0",
"cpLimToStay": "0",
"dcpDepend": "0",
"endres": "0",
"vaAdvance": "0",
"fAdvanced": "false",
"fFirstLineInPara": "false",
"fTabInMarginExLine": "false",
"fForcedBreak": "false",
"fNoCSSInlineContent": "false",
"fEllipsis": "false",
"fNonTextObjectPresent": "false",
"fAnmPresent": "false",
"EffectsFlags": "0",
"kysr": "0",
"wchYsr": "0",
"wchYsr2": "0",
"lshq": "0"
},
"message": ""
}
Event ID 1208: tskLogDisplayTreeLogDisplayTreeLinearea
#Fields #
| Name | Description |
|---|---|
upStartLineOriginal Int64 | |
upStartLine Int64 | |
upLimAutonumberingText Int64 | |
upStartMainText Int64 | |
upStartLineProper Int64 | |
upLimLineProper Int64 | |
upLimLine Int64 | |
upRightMargin Int64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1208",
"version": "0",
"level": "4",
"task": "43",
"opcode": "31",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"upStartLineOriginal": "0",
"upStartLine": "0",
"upLimAutonumberingText": "0",
"upStartMainText": "0",
"upStartLineProper": "0",
"upLimLineProper": "0",
"upLimLine": "0",
"upRightMargin": "0"
},
"message": ""
}
Event ID 1228: tskDisplayLayoutDisplayJob
#Fields #
| Name | Description |
|---|---|
xdpi Int32 | |
ydpi Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1228",
"version": "0",
"level": "200",
"task": "15",
"opcode": "20",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xdpi": "0",
"ydpi": "0"
},
"message": ""
}
Event ID 1229: tskDisplayLayoutDisplayJobEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1229",
"version": "0",
"level": "200",
"task": "15",
"opcode": "21",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1300: tskPrintDoPsBeginStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1300",
"version": "0",
"level": "100",
"task": "19",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1301: tskPrintDoPsBeginEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1301",
"version": "0",
"level": "100",
"task": "19",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1302: tskPrintDoPsBeginCopyStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1302",
"version": "0",
"level": "100",
"task": "19",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1303: tskPrintDoPsBeginCopyEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1303",
"version": "0",
"level": "100",
"task": "19",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1304: tskPrintDoPsBeginRangeStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1304",
"version": "0",
"level": "100",
"task": "19",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1305: tskPrintDoPsBeginRangeEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1305",
"version": "0",
"level": "100",
"task": "19",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1306: tskPrintDoPsRepagToPgnFirstStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1306",
"version": "0",
"level": "100",
"task": "19",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1307: tskPrintDoPsRepagToPgnFirstEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1307",
"version": "0",
"level": "100",
"task": "19",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1308: tskPrintDoPsBeginLayoutPageStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1308",
"version": "0",
"level": "100",
"task": "19",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1309: tskPrintDoPsBeginLayoutPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1309",
"version": "0",
"level": "100",
"task": "19",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1310: tskPrintDoPsLayoutPageStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1310",
"version": "0",
"level": "100",
"task": "19",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1311: tskPrintDoPsLayoutPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1311",
"version": "0",
"level": "100",
"task": "19",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1312: tskPrintDoPsBeginPrintPageStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1312",
"version": "0",
"level": "100",
"task": "19",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1313: tskPrintDoPsBeginPrintPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1313",
"version": "0",
"level": "100",
"task": "19",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1314: tskPrintDoPsSortLrsStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1314",
"version": "0",
"level": "100",
"task": "19",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1315: tskPrintDoPsSortLrsEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1315",
"version": "0",
"level": "100",
"task": "19",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1316: tskPrintDoPsPrintPageStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1316",
"version": "0",
"level": "100",
"task": "19",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1317: tskPrintDoPsPrintPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1317",
"version": "0",
"level": "100",
"task": "19",
"opcode": "27",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1318: tskPrintDoPsEndPageStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1318",
"version": "0",
"level": "100",
"task": "19",
"opcode": "28",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1319: tskPrintDoPsEndPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1319",
"version": "0",
"level": "100",
"task": "19",
"opcode": "29",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1320: tskPrintDoPsEndRangeStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1320",
"version": "0",
"level": "100",
"task": "19",
"opcode": "30",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1321: tskPrintDoPsEndRangeEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1321",
"version": "0",
"level": "100",
"task": "19",
"opcode": "31",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1322: tskPrintDoPsEndCopyStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1322",
"version": "0",
"level": "100",
"task": "19",
"opcode": "32",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1323: tskPrintDoPsEndCopyEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1323",
"version": "0",
"level": "100",
"task": "19",
"opcode": "33",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1324: tskPrintDoPsEndStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1324",
"version": "0",
"level": "100",
"task": "19",
"opcode": "34",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1325: tskPrintDoPsEndEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1325",
"version": "0",
"level": "100",
"task": "19",
"opcode": "35",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1326: tskPrintDoPsEndPageOverflowStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1326",
"version": "0",
"level": "100",
"task": "19",
"opcode": "36",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1327: tskPrintDoPsEndPageOverflowEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1327",
"version": "0",
"level": "100",
"task": "19",
"opcode": "37",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1329: tskPrintPrintAbortedByUser_V1
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
ppj Pointer | |
fCanceledByUser Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1329",
"version": "1",
"level": "4",
"task": "19",
"opcode": "39",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"ppj": "0x0",
"fCanceledByUser": "false"
},
"message": ""
}
Event ID 1330: tskPrintPrintJobSettings_V1
#Fields #
| Name | Description |
|---|---|
fMacro Boolean | |
numPages Int32 | |
rangeType Int32 | |
rangeSz UnicodeString | |
jobParity Int32 | |
jobParitySz UnicodeString | |
numCopies Int32 | |
fCollate Boolean | |
fDuplex Boolean | |
source Int32 | |
sourceSz UnicodeString | |
fPrintToFile Boolean | |
pgsPerSheet Int32 | |
dmPaper Int32 | |
numSections Int32 | |
width UInt64 | |
height UInt64 | |
lMargin UInt64 | |
rMargin UInt64 | |
tMargin UInt64 | |
bMargin UInt64 | |
dmOrient Int32 | |
dmOrientSz UnicodeString | |
prType UnicodeString | |
szPrinterDev UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1330",
"version": "1",
"level": "4",
"task": "19",
"opcode": "40",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fMacro": "false",
"numPages": "0",
"rangeType": "0",
"rangeSz": "",
"jobParity": "0",
"jobParitySz": "",
"numCopies": "0",
"fCollate": "false",
"fDuplex": "false",
"source": "0",
"sourceSz": "",
"fPrintToFile": "false",
"pgsPerSheet": "0",
"dmPaper": "0",
"numSections": "0",
"width": "0",
"height": "0",
"lMargin": "0",
"rMargin": "0",
"tMargin": "0",
"bMargin": "0",
"dmOrient": "0",
"dmOrientSz": "",
"prType": "",
"szPrinterDev": ""
},
"message": ""
}
Event ID 1331: tskPrintFPrintStart_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
grfpr UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1331",
"version": "1",
"level": "100",
"task": "19",
"opcode": "41",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"grfpr": "0"
},
"message": ""
}
Event ID 1332: tskPrintFPrintEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1332",
"version": "0",
"level": "100",
"task": "19",
"opcode": "42",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1333: tskPrintFInitPjStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1333",
"version": "0",
"level": "200",
"task": "19",
"opcode": "43",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1334: tskPrintFInitPjEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1334",
"version": "0",
"level": "100",
"task": "19",
"opcode": "44",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1335: tskPrintFStartPjStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1335",
"version": "0",
"level": "200",
"task": "19",
"opcode": "45",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1336: tskPrintFStartPjEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1336",
"version": "0",
"level": "100",
"task": "19",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1337: tskPrintStopPjStart
#Fields #
| Name | Description |
|---|---|
ppj Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1337",
"version": "0",
"level": "200",
"task": "19",
"opcode": "47",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ppj": "0x0"
},
"message": ""
}
Event ID 1338: tskPrintStopPjEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1338",
"version": "0",
"level": "100",
"task": "19",
"opcode": "48",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1339: tskPrintImmPrintPaginateStart
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1339",
"version": "0",
"level": "100",
"task": "19",
"opcode": "49",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1340: tskPrintImmPrintPaginateEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1340",
"version": "0",
"level": "100",
"task": "19",
"opcode": "50",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1341: tskPrintImmPrintMakePageStart
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | |
desiredPage Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1341",
"version": "0",
"level": "100",
"task": "19",
"opcode": "51",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0",
"desiredPage": "0"
},
"message": ""
}
Event ID 1342: tskPrintImmPrintMakePageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1342",
"version": "0",
"level": "100",
"task": "19",
"opcode": "52",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1343: tskPrintImmPrintMakeDocumentStart
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1343",
"version": "0",
"level": "100",
"task": "19",
"opcode": "53",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1344: tskPrintImmPrintMakeDocumentEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1344",
"version": "0",
"level": "100",
"task": "19",
"opcode": "54",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1345: tskPrintImmPrintTaskCompletedStart
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer | |
PTCompletion Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1345",
"version": "0",
"level": "100",
"task": "19",
"opcode": "55",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0",
"PTCompletion": "0"
},
"message": ""
}
Event ID 1346: tskPrintImmPrintTaskCompletedEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1346",
"version": "0",
"level": "100",
"task": "19",
"opcode": "56",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1347: tskPrintImmPrintHandlerCreate
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1347",
"version": "0",
"level": "100",
"task": "19",
"opcode": "57",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1348: tskPrintImmPrintHandlerDestruct
#Fields #
| Name | Description |
|---|---|
pPrintHandler Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1348",
"version": "0",
"level": "100",
"task": "19",
"opcode": "58",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pPrintHandler": "0x0"
},
"message": ""
}
Event ID 1349: tskPrintImmFastPrintTaskCreate
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1349",
"version": "0",
"level": "100",
"task": "19",
"opcode": "59",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1350: tskPrintImmFastPrintTaskDestruct
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1350",
"version": "0",
"level": "100",
"task": "19",
"opcode": "60",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1351: tskPrintImmFastPrintTaskInit
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1351",
"version": "0",
"level": "100",
"task": "19",
"opcode": "61",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0"
},
"message": ""
}
Event ID 1352: tskPrintImmFastPrintTaskPaginateStart_V1
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | |
ipgd Int32 | |
dxdipPage Int32 | |
dydipPage Int32 | |
xdipContent Int32 | |
ydipContent Int32 | |
dxdipContent Int32 | |
dydipContent Int32 | |
fPrintMarkup Boolean | |
fPrintBgImages Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1352",
"version": "1",
"level": "100",
"task": "19",
"opcode": "62",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"ipgd": "0",
"dxdipPage": "0",
"dydipPage": "0",
"xdipContent": "0",
"ydipContent": "0",
"dxdipContent": "0",
"dydipContent": "0",
"fPrintMarkup": "false",
"fPrintBgImages": "false"
},
"message": ""
}
Event ID 1353: tskPrintImmFastPrintTaskPaginateEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1353",
"version": "0",
"level": "100",
"task": "19",
"opcode": "67",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1354: tskPrintImmFastPrintTaskMakePreviewPageStart_V1
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | |
ipgd Int32 | |
dxpPreview Int32 | |
dypPreview Int32 | |
xpPrintable Int32 | |
ypPrintable Int32 | |
dxpPrintable Int32 | |
dypPrintable Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1354",
"version": "1",
"level": "100",
"task": "19",
"opcode": "63",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"ipgd": "0",
"dxpPreview": "0",
"dypPreview": "0",
"xpPrintable": "0",
"ypPrintable": "0",
"dxpPrintable": "0",
"dypPrintable": "0"
},
"message": ""
}
Event ID 1355: tskPrintImmFastPrintTaskMakePreviewPageEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1355",
"version": "0",
"level": "100",
"task": "19",
"opcode": "68",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1356: tskPrintImmFastPrintTaskMakePrintDocumentStart_V2
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | |
pPrintDocuemntPackageTarget Pointer | |
dxaPage Int32 | |
dyaPage Int32 | |
xdipContent Int32 | |
ydipContent Int32 | |
dxdipContent Int32 | |
dydipContent Int32 | |
printRange Int32 | |
customRange UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1356",
"version": "2",
"level": "100",
"task": "19",
"opcode": "64",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"pPrintDocuemntPackageTarget": "0x0",
"dxaPage": "0",
"dyaPage": "0",
"xdipContent": "0",
"ydipContent": "0",
"dxdipContent": "0",
"dydipContent": "0",
"printRange": "0",
"customRange": ""
},
"message": ""
}
Event ID 1357: tskPrintImmFastPrintTaskMakePrintDocumentEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1357",
"version": "0",
"level": "100",
"task": "19",
"opcode": "38",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1358: tskPrintImmFastPrintTaskSignalPrintTaskCompleted
#Fields #
| Name | Description |
|---|---|
pFastPrintTaskAppImpl Pointer | |
completion Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1358",
"version": "0",
"level": "100",
"task": "19",
"opcode": "65",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pFastPrintTaskAppImpl": "0x0",
"completion": "0"
},
"message": ""
}
Event ID 1359: tskPrintImmPrintPageCountUpdated
#Fields #
| Name | Description |
|---|---|
ipgdMacNew Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1359",
"version": "0",
"level": "100",
"task": "19",
"opcode": "66",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ipgdMacNew": "0"
},
"message": ""
}
Event ID 1360: tskPrintPrintSettingUpdated
#Fields #
| Name | Description |
|---|---|
PrintSettingUpdated UnicodeString | |
InOutspace Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1360",
"version": "0",
"level": "4",
"task": "19",
"opcode": "69",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PrintSettingUpdated": "",
"InOutspace": "false"
},
"message": ""
}
Event ID 1361: tskPrintPrintFileSize
#Fields #
| Name | Description |
|---|---|
fFileSize UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1361",
"version": "0",
"level": "4",
"task": "19",
"opcode": "70",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fFileSize": "0"
},
"message": ""
}
Event ID 1362: tskPrintReportPrintUnresponsivenessBucketedData
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
SqmDocId GUID | |
cIntervals UInt32 | |
Bucket1-Min-Msec UInt64 | |
Bucket2-Min-Msec UInt64 | |
Bucket3-Min-Msec UInt64 | |
Bucket4-Min-Msec UInt64 | |
Bucket5-Min-Msec UInt64 | |
Bucket6-Min-Msec UInt64 | |
Bucket7-Min-Msec UInt64 | |
Bucket8-Min-Msec UInt64 | |
Bucket9-Min-Msec UInt64 | |
Bucket10-Min-Msec UInt64 | |
Bucket1-Count UInt64 | |
Bucket2-Count UInt64 | |
Bucket3-Count UInt64 | |
Bucket4-Count UInt64 | |
Bucket5-Count UInt64 | |
Bucket6-Count UInt64 | |
Bucket7-Count UInt64 | |
Bucket8-Count UInt64 | |
Bucket9-Count UInt64 | |
Bucket10-Count UInt64 | |
TopUnresponsiveDuration1-Msec UInt64 | |
TopUnresponsiveDuration2-Msec UInt64 | |
TopUnresponsiveDuration3-Msec UInt64 | |
TopUnresponsiveDuration4-Msec UInt64 | |
TopUnresponsiveDuration5-Msec UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1362",
"version": "0",
"level": "4",
"task": "19",
"opcode": "71",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"SqmDocId": "{00000000-0000-0000-0000-000000000000}",
"cIntervals": "0",
"Bucket1-Min-Msec": "0",
"Bucket2-Min-Msec": "0",
"Bucket3-Min-Msec": "0",
"Bucket4-Min-Msec": "0",
"Bucket5-Min-Msec": "0",
"Bucket6-Min-Msec": "0",
"Bucket7-Min-Msec": "0",
"Bucket8-Min-Msec": "0",
"Bucket9-Min-Msec": "0",
"Bucket10-Min-Msec": "0",
"Bucket1-Count": "0",
"Bucket2-Count": "0",
"Bucket3-Count": "0",
"Bucket4-Count": "0",
"Bucket5-Count": "0",
"Bucket6-Count": "0",
"Bucket7-Count": "0",
"Bucket8-Count": "0",
"Bucket9-Count": "0",
"Bucket10-Count": "0",
"TopUnresponsiveDuration1-Msec": "0",
"TopUnresponsiveDuration2-Msec": "0",
"TopUnresponsiveDuration3-Msec": "0",
"TopUnresponsiveDuration4-Msec": "0",
"TopUnresponsiveDuration5-Msec": "0"
},
"message": ""
}
Event ID 1363: tskPrintPrintResponsivenessIntervalStart
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1363",
"version": "0",
"level": "50",
"task": "19",
"opcode": "72",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1364: tskPrintPrintResponsivenessIntervalEnd
#Fields #
| Name | Description |
|---|---|
Count of Intervals UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1364",
"version": "0",
"level": "50",
"task": "19",
"opcode": "73",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Count of Intervals": "0"
},
"message": ""
}
Event ID 1365: tskPrintImmFastPrintTaskInitEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1365",
"version": "0",
"level": "100",
"task": "19",
"opcode": "74",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1366: tskPrintImmPrintAppPrintTaskRequested
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1366",
"version": "0",
"level": "100",
"task": "19",
"opcode": "75",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1367: tskPrintImmPrintAppPrintTaskRequestedEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1367",
"version": "0",
"level": "100",
"task": "19",
"opcode": "76",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1368: tskPrintImmPrintFinishOnPrintTaskRequested
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1368",
"version": "0",
"level": "100",
"task": "19",
"opcode": "77",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1369: tskPrintMacPrintSessionError
#Fields #
| Name | Description |
|---|---|
MacPMSessionError Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1369",
"version": "0",
"level": "2",
"task": "19",
"opcode": "78",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MacPMSessionError": "0"
},
"message": ""
}
Event ID 1370: tskPrintRTWINDWriteCreated
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1370",
"version": "0",
"level": "4",
"task": "19",
"opcode": "79",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1371: tskPrintRTWINDWriteUsed
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1371",
"version": "0",
"level": "4",
"task": "19",
"opcode": "80",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1372: tskPrintRTWINDWriteUsedInPrinting
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1372",
"version": "0",
"level": "4",
"task": "19",
"opcode": "81",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1373: tskPrintRTWINDWriteUsedInMetafile
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1373",
"version": "0",
"level": "4",
"task": "19",
"opcode": "82",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1374: tskPrintRTWINDWriteGlyphRendered
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1374",
"version": "0",
"level": "4",
"task": "19",
"opcode": "83",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1375: tskPrintRTWINDWriteColorGlyph
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1375",
"version": "0",
"level": "4",
"task": "19",
"opcode": "84",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1376: tskPrintRTWINDWriteFarEastVertical
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1376",
"version": "0",
"level": "4",
"task": "19",
"opcode": "85",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1377: tskPrintPrintE2o
#Fields #
| Name | Description |
|---|---|
E2oType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1377",
"version": "0",
"level": "100",
"task": "19",
"opcode": "86",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"E2oType": "0"
},
"message": ""
}
Event ID 1378: tskPrintPrintE2oWithGradFill
#Fields #
| Name | Description |
|---|---|
FTransparentFill Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1378",
"version": "0",
"level": "100",
"task": "19",
"opcode": "87",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FTransparentFill": "false"
},
"message": ""
}
Event ID 1400: tskUIMUIMPreTranslateStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1400",
"version": "0",
"level": "50",
"task": "30",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1401: tskUIMUIMPreTranslateEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
Eaten Boolean | |
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1401",
"version": "0",
"level": "50",
"task": "30",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"Eaten": "false",
"Succeeded": "false"
},
"message": ""
}
Event ID 1402: tskUIMUIMTranslateStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1402",
"version": "0",
"level": "50",
"task": "30",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1403: tskUIMUIMTranslateEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 | |
Eaten Boolean | |
Succeeded Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1403",
"version": "0",
"level": "50",
"task": "30",
"opcode": "13",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"Eaten": "false",
"Succeeded": "false"
},
"message": ""
}
Event ID 1404: tskUIMUIMTfImplStart
#Fields #
| Name | Description |
|---|---|
FunctionName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "1404",
"version": "0",
"level": "50",
"task": "30",
"opcode": "14",
"keywords": 9223372036854906880,
"time_created": "2026-03-14T21:52:26.283529400+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FunctionName": "UIMTS::GetActiveView"
},
"message": ""
}
Event ID 1405: tskUIMUIMTfImplEnd
#Fields #
| Name | Description |
|---|---|
FunctionName UnicodeString | |
lid Int32 | |
HResult Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "1405",
"version": "0",
"level": "50",
"task": "30",
"opcode": "15",
"keywords": 9223372036854906880,
"time_created": "2026-03-14T21:52:26.283532500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FunctionName": "UIMTS::GetActiveView",
"lid": "1033",
"HResult": "0"
},
"message": ""
}
Event ID 1406: tskUIMUIMOurLockGrantedStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1406",
"version": "0",
"level": "50",
"task": "30",
"opcode": "16",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1407: tskUIMUIMOurLockGrantedEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1407",
"version": "0",
"level": "50",
"task": "30",
"opcode": "17",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1408: tskUIMEnableUIMOvertypeStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1408",
"version": "0",
"level": "50",
"task": "30",
"opcode": "18",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1409: tskUIMEnableUIMOvertypeEnd
#Fields #
| Name | Description |
|---|---|
lid Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1409",
"version": "0",
"level": "50",
"task": "30",
"opcode": "19",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0"
},
"message": ""
}
Event ID 1410: tskUIMUIMDeleteSurroundingTextStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1410",
"version": "0",
"level": "5",
"task": "30",
"opcode": "20",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1411: tskUIMUIMDeleteSurroundingTextEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1411",
"version": "0",
"level": "5",
"task": "30",
"opcode": "21",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1412: tskUIMUIMSetComposingTextStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1412",
"version": "0",
"level": "5",
"task": "30",
"opcode": "22",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1413: tskUIMUIMSetComposingTextEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1413",
"version": "0",
"level": "5",
"task": "30",
"opcode": "23",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1414: tskUIMUIMCommitTextStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1414",
"version": "0",
"level": "5",
"task": "30",
"opcode": "24",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1415: tskUIMUIMCommitTextEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1415",
"version": "0",
"level": "5",
"task": "30",
"opcode": "25",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1416: tskUIMUIMDispUpdateStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1416",
"version": "0",
"level": "5",
"task": "30",
"opcode": "26",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1417: tskUIMUIMDispUpdateEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1417",
"version": "0",
"level": "5",
"task": "30",
"opcode": "27",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1418: tskUIMUIMNotifyTextInputError
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1418",
"version": "0",
"level": "5",
"task": "30",
"opcode": "28",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1419: tskUIMUIMGetEditable
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1419",
"version": "0",
"level": "5",
"task": "30",
"opcode": "29",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1420: tskUIMUIMSetComposingTextUI_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
corId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1420",
"version": "1",
"level": "5",
"task": "30",
"opcode": "30",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1421: tskUIMUIMCommitTextUI_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
corId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1421",
"version": "1",
"level": "5",
"task": "30",
"opcode": "31",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1422: tskUIMUIMDeleteSurroundingTextUI_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
corId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1422",
"version": "1",
"level": "5",
"task": "30",
"opcode": "32",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1423: tskUIMUIMTerminateBatch
#Fields #
| Name | Description |
|---|---|
cBatchEdit UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1423",
"version": "0",
"level": "5",
"task": "30",
"opcode": "33",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cBatchEdit": "0"
},
"message": ""
}
Event ID 1424: tskUIMUIMRestartInProgress
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1424",
"version": "0",
"level": "5",
"task": "30",
"opcode": "34",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1425: tskUIMUIMNoActiveICObject
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1425",
"version": "0",
"level": "5",
"task": "30",
"opcode": "35",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1436: tskUIMUIMSelection
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
cpFirst UInt32 | |
cpLim UInt32 | |
grfsel UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1436",
"version": "0",
"level": "5",
"task": "30",
"opcode": "36",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"cpFirst": "0",
"cpLim": "0",
"grfsel": "0"
},
"message": ""
}
Event ID 1437: tskUIMUIMDocument
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
cpMac UInt32 | |
dk UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1437",
"version": "0",
"level": "5",
"task": "30",
"opcode": "37",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"cpMac": "0",
"dk": "0"
},
"message": ""
}
Event ID 1438: tskUIMUIMTextUpdatingUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1438",
"version": "0",
"level": "5",
"task": "30",
"opcode": "38",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1439: tskUIMUIMTextUpdatingStart_V1
#Fields #
| Name | Description |
|---|---|
logId UInt32 | |
corId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1439",
"version": "1",
"level": "5",
"task": "30",
"opcode": "39",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0",
"corId": "0"
},
"message": ""
}
Event ID 1440: tskUIMUIMTextUpdatingEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1440",
"version": "0",
"level": "5",
"task": "30",
"opcode": "40",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1441: tskUIMUIMTextRequestedUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1441",
"version": "0",
"level": "5",
"task": "30",
"opcode": "41",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1442: tskUIMUIMTextRequestedStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1442",
"version": "0",
"level": "5",
"task": "30",
"opcode": "42",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1443: tskUIMUIMTextRequestedEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1443",
"version": "0",
"level": "5",
"task": "30",
"opcode": "43",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1444: tskUIMUIMSelectionUpdatingUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1444",
"version": "0",
"level": "5",
"task": "30",
"opcode": "44",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1445: tskUIMUIMSelectionUpdatingStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1445",
"version": "0",
"level": "5",
"task": "30",
"opcode": "45",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1446: tskUIMUIMSelectionUpdatingEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1446",
"version": "0",
"level": "5",
"task": "30",
"opcode": "46",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1447: tskUIMUIMSelectionRequestedUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1447",
"version": "0",
"level": "5",
"task": "30",
"opcode": "47",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1448: tskUIMUIMSelectionRequestedStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1448",
"version": "0",
"level": "5",
"task": "30",
"opcode": "48",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1449: tskUIMUIMSelectionRequestedEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1449",
"version": "0",
"level": "5",
"task": "30",
"opcode": "49",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1450: tskUIMUIMFormatUpdatingUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1450",
"version": "0",
"level": "5",
"task": "30",
"opcode": "50",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1451: tskUIMUIMFormatUpdatingStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1451",
"version": "0",
"level": "5",
"task": "30",
"opcode": "51",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1452: tskUIMUIMFormatUpdatingEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1452",
"version": "0",
"level": "5",
"task": "30",
"opcode": "52",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1453: tskUIMUIMLayoutRequestedUI
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1453",
"version": "0",
"level": "5",
"task": "30",
"opcode": "53",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1454: tskUIMUIMLayoutRequestedStart
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1454",
"version": "0",
"level": "5",
"task": "30",
"opcode": "54",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1455: tskUIMUIMLayoutRequestedEnd
#Fields #
| Name | Description |
|---|---|
logId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1455",
"version": "0",
"level": "5",
"task": "30",
"opcode": "55",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"logId": "0"
},
"message": ""
}
Event ID 1456: tskUIMUIMApplyDisplayProperties
#Fields #
| Name | Description |
|---|---|
cp UInt32 | |
ccp UInt32 | |
cvText UInt32 | |
cvBack UInt32 | |
cvUl UInt32 | |
kul UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1456",
"version": "0",
"level": "5",
"task": "30",
"opcode": "56",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cp": "0",
"ccp": "0",
"cvText": "0",
"cvBack": "0",
"cvUl": "0",
"kul": "0"
},
"message": ""
}
Event ID 1457: tskUIMUIMTextChangedInComp
#Fields #
| Name | Description |
|---|---|
lid UInt32 | |
fRevMarkingPdod UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1457",
"version": "0",
"level": "5",
"task": "30",
"opcode": "57",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"lid": "0",
"fRevMarkingPdod": "0"
},
"message": ""
}
Event ID 1458: tskUIMUIMSetText
#Fields #
| Name | Description |
|---|---|
Pdod Pointer | |
DocKind UnicodeString | |
Lid UInt32 | |
Cicero Boolean | |
IMMForced Boolean | |
CiceroAvailable Boolean | |
UIMName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1458",
"version": "0",
"level": "4",
"task": "30",
"opcode": "58",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Pdod": "0x0",
"DocKind": "",
"Lid": "0",
"Cicero": "false",
"IMMForced": "false",
"CiceroAvailable": "false",
"UIMName": ""
},
"message": ""
}
Event ID 1459: tskUIMUIMHandleFocusChangeComplex
#Fields #
| Name | Description |
|---|---|
cpFirstChange Int32 | |
cpLimChange Int32 | |
cpFirstUrb Int32 | |
cpLimUrb Int32 | |
cpFirstComp Int32 | |
cpLimComp Int32 | |
Lid UInt32 | |
UIMName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1459",
"version": "0",
"level": "4",
"task": "30",
"opcode": "59",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpFirstChange": "0",
"cpLimChange": "0",
"cpFirstUrb": "0",
"cpLimUrb": "0",
"cpFirstComp": "0",
"cpLimComp": "0",
"Lid": "0",
"UIMName": ""
},
"message": ""
}
Event ID 1460: tskUIMIMMComposition
#Fields #
| Name | Description |
|---|---|
correlationId UInt32 | |
messagePostDelay UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1460",
"version": "0",
"level": "4",
"task": "30",
"opcode": "60",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"correlationId": "0",
"messagePostDelay": "0"
},
"message": ""
}
Event ID 1500: tskFindFindStart_V2
#Fields #
| Name | Description |
|---|---|
fSearchWord UInt32 | |
fSearchCase UInt32 | |
fSndsLike UInt32 | |
fFuzzy UInt32 | |
fMatchByte UInt32 | |
searchStringLength Int32 | |
InReadmode Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1500",
"version": "2",
"level": "4",
"task": "40",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSearchWord": "0",
"fSearchCase": "0",
"fSndsLike": "0",
"fFuzzy": "0",
"fMatchByte": "0",
"searchStringLength": "0",
"InReadmode": "false"
},
"message": ""
}
Event ID 1501: tskFindNonIncrementalFindCalled
#Fields #
| Name | Description |
|---|---|
Next Boolean | |
FindEventId Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1501",
"version": "0",
"level": "4",
"task": "40",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Next": "false",
"FindEventId": "0"
},
"message": ""
}
Event ID 1502: tskFindFindBarClosed
#Fields #
| Name | Description |
|---|---|
CloseWithFindBarButton Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1502",
"version": "0",
"level": "4",
"task": "40",
"opcode": "13",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CloseWithFindBarButton": "false"
},
"message": ""
}
Event ID 1503: tskFindFindEnd
#Fields #
| Name | Description |
|---|---|
CSearchResults Int32 | |
fResult Boolean | |
fResultInComment Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1503",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CSearchResults": "0",
"fResult": "false",
"fResultInComment": "false"
},
"message": ""
}
Event ID 1504: tskFindReplaceStart
#Fields #
| Name | Description |
|---|---|
ReplaceQueryLength Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1504",
"version": "0",
"level": "4",
"task": "40",
"opcode": "15",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReplaceQueryLength": "0"
},
"message": ""
}
Event ID 1505: tskFindReplaceEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1505",
"version": "0",
"level": "4",
"task": "40",
"opcode": "16",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1506: tskFindReplaceStart1506
#Fields #
| Name | Description |
|---|---|
ReplaceQueryLength Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1506",
"version": "0",
"level": "4",
"task": "40",
"opcode": "15",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReplaceQueryLength": "0"
},
"message": ""
}
Event ID 1507: tskFindReplaceEnd1507
#Fields #
| Name | Description |
|---|---|
cReplaces Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1507",
"version": "0",
"level": "4",
"task": "40",
"opcode": "16",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cReplaces": "0"
},
"message": ""
}
Event ID 1508: tskFindNavPaneNoPageFilter
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1508",
"version": "0",
"level": "4",
"task": "40",
"opcode": "17",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1509
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fCommentsInPane Boolean | |
findReplaceMode UInt32 | |
fSearchInComment Boolean | |
cHits UInt32 |
Event ID 1510: tskFindFindEnd1510
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1510",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1511: tskFindFindEnd1511
#Fields #
| Name | Description |
|---|---|
fFindInComments Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "1511",
"version": "0",
"level": "4",
"task": "40",
"opcode": "14",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fFindInComments": "false"
},
"message": ""
}
Event ID 2000: task_0PCODEERRORpcodeError_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001: task_0PCODEERRORpcodeError2001_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002: task_0PCODEERRORpcodeError2002_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003: task_0PCODEERRORpcodeError2003_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004: task_0PCODEERRORpcodeError2004_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005: task_0PCODEERRORpcodeError2005_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006: task_0PCODEERRORpcodeError2006_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007: task_0PCODEERRORpcodeError2007_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008: task_0PCODEERRORpcodeError2008_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009: task_0PCODEERRORpcodeError2009_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010: task_0PCODEERRORpcodeError2010_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011: task_0PCODEERRORpcodeError2011_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012: task_0PCODEERRORpcodeError2012_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013: task_0PCODEERRORpcodeError2013_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014: task_0PCODEERRORpcodeError2014_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015: task_0PCODEERRORpcodeError2015_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016: task_0PCODEERRORpcodeError2016_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017: task_0PCODEERRORpcodeError2017_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018: task_0PCODEERRORpcodeError2018_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019: task_0PCODEERRORpcodeError2019_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020: task_0PCODEERRORpcodeError2020_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021: task_0PCODEERRORpcodeError2021_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022: task_0PCODEERRORpcodeError2022_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023: task_0PCODEERRORpcodeError2023_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024: task_0PCODEERRORpcodeError2024_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025: task_0PCODEERRORpcodeError2025_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026: task_0PCODEERRORpcodeError2026_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027: task_0PCODEERRORpcodeError2027_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028: task_0PCODEERRORpcodeError2028_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2028",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2029: task_0PCODEERRORpcodeError2029_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2029",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2030: task_0PCODEERRORpcodeError2030_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2030",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2031: task_0PCODEERRORpcodeError2031_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2031",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2032: task_0PCODEWARNINGpcodeWarning
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033: task_0PCODEWARNINGpcodeWarning2033
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034: task_0PCODEWARNINGpcodeWarning2034
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035: task_0PCODEWARNINGpcodeWarning2035
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036: task_0PCODEWARNINGpcodeWarning2036
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037: task_0PCODEWARNINGpcodeWarning2037
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038: task_0PCODEWARNINGpcodeWarning2038
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039: task_0PCODEWARNINGpcodeWarning2039
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040: task_0PCODEWARNINGpcodeWarning2040
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041: task_0PCODEWARNINGpcodeWarning2041
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042: task_0PCODEWARNINGpcodeWarning2042
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043: task_0PCODEWARNINGpcodeWarning2043
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044: task_0PCODEWARNINGpcodeWarning2044
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045: task_0PCODEWARNINGpcodeWarning2045
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046: task_0PCODEWARNINGpcodeWarning2046
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047: task_0PCODEWARNINGpcodeWarning2047
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048: task_0PCODEWARNINGpcodeWarning2048
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049: task_0PCODEWARNINGpcodeWarning2049
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050: task_0PCODEWARNINGpcodeWarning2050
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051: task_0PCODEWARNINGpcodeWarning2051
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052: task_0PCODEWARNINGpcodeWarning2052
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053: task_0PCODEWARNINGpcodeWarning2053
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054: task_0PCODEWARNINGpcodeWarning2054
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055: task_0PCODEWARNINGpcodeWarning2055
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056: task_0PCODEWARNINGpcodeWarning2056
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057: task_0PCODEWARNINGpcodeWarning2057
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058: task_0PCODEWARNINGpcodeWarning2058
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059: task_0PCODEWARNINGpcodeWarning2059
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060: task_0PCODEWARNINGpcodeWarning2060
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2060",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2061: task_0PCODEWARNINGpcodeWarning2061
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2061",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2062: task_0PCODEWARNINGpcodeWarning2062
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2062",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2063: task_0PCODEWARNINGpcodeWarning2063
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2063",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2064: task_0PCODEINFORMATIONALpcodeInformational
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065: task_0PCODEINFORMATIONALpcodeInformational2065
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066: task_0PCODEINFORMATIONALpcodeInformational2066
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067: task_0PCODEINFORMATIONALpcodeInformational2067
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068: task_0PCODEINFORMATIONALpcodeInformational2068
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069: task_0PCODEINFORMATIONALpcodeInformational2069
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070: task_0PCODEINFORMATIONALpcodeInformational2070
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071: task_0PCODEINFORMATIONALpcodeInformational2071
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072: task_0PCODEINFORMATIONALpcodeInformational2072
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073: task_0PCODEINFORMATIONALpcodeInformational2073
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074: task_0PCODEINFORMATIONALpcodeInformational2074
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075: task_0PCODEINFORMATIONALpcodeInformational2075
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076: task_0PCODEINFORMATIONALpcodeInformational2076
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077: task_0PCODEINFORMATIONALpcodeInformational2077
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078: task_0PCODEINFORMATIONALpcodeInformational2078
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079: task_0PCODEINFORMATIONALpcodeInformational2079
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080: task_0PCODEINFORMATIONALpcodeInformational2080
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081: task_0PCODEINFORMATIONALpcodeInformational2081
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082: task_0PCODEINFORMATIONALpcodeInformational2082
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083: task_0PCODEINFORMATIONALpcodeInformational2083
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084: task_0PCODEINFORMATIONALpcodeInformational2084
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085: task_0PCODEINFORMATIONALpcodeInformational2085
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086: task_0PCODEINFORMATIONALpcodeInformational2086
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087: task_0PCODEINFORMATIONALpcodeInformational2087
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088: task_0PCODEINFORMATIONALpcodeInformational2088
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089: task_0PCODEINFORMATIONALpcodeInformational2089
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090: task_0PCODEINFORMATIONALpcodeInformational2090
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091: task_0PCODEINFORMATIONALpcodeInformational2091
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092: task_0PCODEINFORMATIONALpcodeInformational2092
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2092",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2093: task_0PCODEINFORMATIONALpcodeInformational2093
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2093",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2094: task_0PCODEINFORMATIONALpcodeInformational2094
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2094",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2095: task_0PCODEINFORMATIONALpcodeInformational2095
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2095",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2500: tskViewportHandleViewportMoveLater
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2500",
"version": "0",
"level": "4",
"task": "11",
"opcode": "28",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2501: tskViewportDirectManipulationStarted_V1
#Fields #
| Name | Description |
|---|---|
zoomScrollCorrelationId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2501",
"version": "1",
"level": "4",
"task": "11",
"opcode": "29",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"zoomScrollCorrelationId": "0"
},
"message": ""
}
Event ID 2502: tskViewportInitializeDirectManipulation
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2502",
"version": "0",
"level": "4",
"task": "11",
"opcode": "30",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2504: tskRtcRtcOpStart_V1
#Fields #
| Name | Description |
|---|---|
MessageId UInt32 | |
ClientType Int32 | |
AuthorId UnicodeString | |
DocumentId UInt64 | |
OpKind Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2504",
"version": "1",
"level": "4",
"task": "51",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"ClientType": "0",
"AuthorId": "",
"DocumentId": "0",
"OpKind": "0"
},
"message": ""
}
Event ID 2505: tskRtcRtcOpEnd_V3
#Fields #
| Name | Description |
|---|---|
MessageId UInt32 | |
ClientType Int32 | |
AuthorId UnicodeString | |
OpResult Int32 | |
ParaID UInt32 | |
OpKind Int32 | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2505",
"version": "3",
"level": "4",
"task": "51",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"ClientType": "0",
"AuthorId": "",
"OpResult": "0",
"ParaID": "0",
"OpKind": "0",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 2600: tskRtcRtcBroken_V1
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
ParaId UInt32 | |
RtcOn Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2600",
"version": "1",
"level": "4",
"task": "51",
"opcode": "18",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"ParaId": "0",
"RtcOn": "false"
},
"message": ""
}
Event ID 2601: tskRtcRtcAnalyzeAndDoFailure_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ParaId UInt32 | |
AnalyzeAndDoResult Int32 | |
AnalyzeAndDoResultString UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2601",
"version": "1",
"level": "4",
"task": "51",
"opcode": "19",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ParaId": "0",
"AnalyzeAndDoResult": "0",
"AnalyzeAndDoResultString": ""
},
"message": ""
}
Event ID 2602: tskRtcRtcRevertStart
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2602",
"version": "0",
"level": "4",
"task": "51",
"opcode": "20",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2603: tskRtcRtcRevertEnd
#Fields #
| Name | Description |
|---|---|
cParasReverted UInt32 | |
cCpTraversed UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2603",
"version": "0",
"level": "4",
"task": "51",
"opcode": "21",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cParasReverted": "0",
"cCpTraversed": "0"
},
"message": ""
}
Event ID 2604: tskRtcRtcCaretOpDoStart
#Fields #
| Name | Description |
|---|---|
MessageId UInt32 | |
AuthorId UnicodeString | |
DocumentId UInt64 | |
SelType UInt32 | |
ParaId UInt32 | |
TextId UInt32 | |
CaretPos UInt32 | |
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2604",
"version": "0",
"level": "4",
"task": "51",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"DocumentId": "0",
"SelType": "0",
"ParaId": "0",
"TextId": "0",
"CaretPos": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 2605: tskRtcRtcCaretOpDoEnd_V1
#Fields #
| Name | Description |
|---|---|
MessageId UInt32 | |
AuthorId UnicodeString | |
fSetPresence Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2605",
"version": "1",
"level": "4",
"task": "51",
"opcode": "13",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"fSetPresence": "false"
},
"message": ""
}
Event ID 2606: tskRtcRtcProcessAllRbodStart
#Fields #
| Name | Description |
|---|---|
RbodQueueSize UInt32 | |
fReplay Boolean | |
fUnpause Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2606",
"version": "0",
"level": "5",
"task": "51",
"opcode": "14",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodQueueSize": "0",
"fReplay": "false",
"fUnpause": "false"
},
"message": ""
}
Event ID 2607: tskRtcRtcProcessAllRbodEnd
#Fields #
| Name | Description |
|---|---|
CountRbodProccessed UInt32 | |
fRet Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2607",
"version": "0",
"level": "5",
"task": "51",
"opcode": "15",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CountRbodProccessed": "0",
"fRet": "false"
},
"message": ""
}
Event ID 2609: tskRtcRtcConnected_V1
#Fields #
| Name | Description |
|---|---|
GuidFileId GUID | |
pdod Pointer | |
pIRtcConnection Pointer | |
pioldoc Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2609",
"version": "1",
"level": "4",
"task": "51",
"opcode": "16",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"pIRtcConnection": "0x0",
"pioldoc": "0x0"
},
"message": ""
}
Event ID 2610: tskRtcRtcDisconnected_V1
#Fields #
| Name | Description |
|---|---|
GuidFileId GUID | |
pIRtcConnection Pointer | |
DusecEffectiveRTCSessionDuration UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2610",
"version": "1",
"level": "4",
"task": "51",
"opcode": "17",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pIRtcConnection": "0x0",
"DusecEffectiveRTCSessionDuration": "0"
},
"message": ""
}
Event ID 2611: tskRtcRtcPreprocessRbodStart
#Fields #
| Name | Description |
|---|---|
MessageId UInt32 | |
AuthorId UnicodeString | |
DocumentId UInt64 | |
OpKind Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2611",
"version": "0",
"level": "5",
"task": "51",
"opcode": "22",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"MessageId": "0",
"AuthorId": "",
"DocumentId": "0",
"OpKind": "0"
},
"message": ""
}
Event ID 2612: tskRtcRtcPreprocessRbodEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2612",
"version": "0",
"level": "5",
"task": "51",
"opcode": "23",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2613: tskRtcRtcReplayStart_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fPlayUnpausedDocument Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2613",
"version": "1",
"level": "4",
"task": "51",
"opcode": "24",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fPlayUnpausedDocument": "false"
},
"message": ""
}
Event ID 2614: tskRtcRtcReplayEnd
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2614",
"version": "0",
"level": "4",
"task": "51",
"opcode": "25",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2615: tskRtcRtcAnalyzerUnSupportedActt
#Fields #
| Name | Description |
|---|---|
actt Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2615",
"version": "0",
"level": "4",
"task": "51",
"opcode": "26",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"actt": "0"
},
"message": ""
}
Event ID 2616: tskRtcRtcAlive
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
dusecAliveTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2616",
"version": "0",
"level": "4",
"task": "51",
"opcode": "27",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecAliveTime": "0"
},
"message": ""
}
Event ID 2617: tskRtcRtcDead
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
dusecDeadTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2617",
"version": "0",
"level": "4",
"task": "51",
"opcode": "28",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecDeadTime": "0"
},
"message": ""
}
Event ID 2618: tskRtcRtcAnalyzerUnSupportedContent
#Fields #
| Name | Description |
|---|---|
fSpec Boolean | |
xchSpec Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2618",
"version": "0",
"level": "4",
"task": "51",
"opcode": "29",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fSpec": "false",
"xchSpec": "0"
},
"message": ""
}
Event ID 2619: tskRtcRtcColorsValidation
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ibstshort Int32 | |
fBroken Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2619",
"version": "0",
"level": "4",
"task": "51",
"opcode": "30",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ibstshort": "0",
"fBroken": "false"
},
"message": ""
}
Event ID 2620: tskRtcRtcChangeAlwaysSave
#Fields #
| Name | Description |
|---|---|
fStart Boolean | |
fCanRtc Boolean | |
fAlwaysSaveActivated Boolean | |
HR Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2620",
"version": "0",
"level": "4",
"task": "51",
"opcode": "31",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fStart": "false",
"fCanRtc": "false",
"fAlwaysSaveActivated": "false",
"HR": "0"
},
"message": ""
}
Event ID 2621: tskRtcRtcOptInState_V1
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
pcoa Pointer | |
Automatic Boolean | |
OptInSource Int32 | |
Response Boolean | |
AlwaysAsk Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2621",
"version": "1",
"level": "4",
"task": "51",
"opcode": "32",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"pcoa": "0x0",
"Automatic": "false",
"OptInSource": "0",
"Response": "false",
"AlwaysAsk": "false"
},
"message": ""
}
Event ID 2622: tskRtcRtcAnalyzerUnSupportedBssck
#Fields #
| Name | Description |
|---|---|
Bssck Int32 | |
count Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2622",
"version": "0",
"level": "4",
"task": "51",
"opcode": "33",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Bssck": "0",
"count": "0"
},
"message": ""
}
Event ID 2623: tskRtcRtcSharedCpFromCpStart
#Fields #
| Name | Description |
|---|---|
cpIn Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2623",
"version": "0",
"level": "5",
"task": "51",
"opcode": "34",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpIn": "0"
},
"message": ""
}
Event ID 2624: tskRtcRtcSharedCpFromCpEnd
#Fields #
| Name | Description |
|---|---|
cpOut Int32 | |
cFetch Int32 | |
scps Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2624",
"version": "0",
"level": "5",
"task": "51",
"opcode": "35",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpOut": "0",
"cFetch": "0",
"scps": "0"
},
"message": ""
}
Event ID 2625: tskRtcRtcCpFromSharedCpStart
#Fields #
| Name | Description |
|---|---|
cpIn Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2625",
"version": "0",
"level": "5",
"task": "51",
"opcode": "36",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpIn": "0"
},
"message": ""
}
Event ID 2626: tskRtcRtcCpFromSharedCpEnd
#Fields #
| Name | Description |
|---|---|
cpOut Int32 | |
cFetch Int32 | |
scps Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2626",
"version": "0",
"level": "5",
"task": "51",
"opcode": "37",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cpOut": "0",
"cFetch": "0",
"scps": "0"
},
"message": ""
}
Event ID 2627: tskRtcRtcWetAccept
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2627",
"version": "0",
"level": "4",
"task": "51",
"opcode": "38",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 2628: tskRtcRtcWetReject
#Fields #
| Name | Description |
|---|---|
Tag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2628",
"version": "0",
"level": "4",
"task": "51",
"opcode": "39",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0"
},
"message": ""
}
Event ID 2629: tskRtcRtcWetRevMarkHelperCreate
#Fields #
| Name | Description |
|---|---|
pthis Pointer | |
pdodMain Pointer | |
pdod Pointer | |
cpFirst Int32 | |
cpLim Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2629",
"version": "0",
"level": "5",
"task": "51",
"opcode": "40",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pthis": "0x0",
"pdodMain": "0x0",
"pdod": "0x0",
"cpFirst": "0",
"cpLim": "0"
},
"message": ""
}
Event ID 2630: tskRtcRtcWetRevMarkHelperDestroy
#Fields #
| Name | Description |
|---|---|
pthis Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2630",
"version": "0",
"level": "5",
"task": "51",
"opcode": "41",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pthis": "0x0"
},
"message": ""
}
Event ID 2631: tskRtcRtcParaMarksDeleted
#Fields #
| Name | Description |
|---|---|
cParasDeleted UInt64 | |
cParasDelMax Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2631",
"version": "0",
"level": "5",
"task": "51",
"opcode": "42",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cParasDeleted": "0",
"cParasDelMax": "0"
},
"message": ""
}
Event ID 2632: tskRtcRtcLegalSelChange
#Fields #
| Name | Description |
|---|---|
FirstReason Int32 | |
GrfReasons UInt64 | |
pdod Pointer | |
cpFirstOld Int32 | |
cpLimOld Int32 | |
cpFirstNew Int32 | |
cpLimNew Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2632",
"version": "0",
"level": "4",
"task": "51",
"opcode": "43",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FirstReason": "0",
"GrfReasons": "0",
"pdod": "0x0",
"cpFirstOld": "0",
"cpLimOld": "0",
"cpFirstNew": "0",
"cpLimNew": "0"
},
"message": ""
}
Event ID 2633: tskRtcRtcRegisterContentHandlers
#Fields #
| Name | Description |
|---|---|
GuidFileId GUID | |
pdod Pointer | |
pcoa Pointer | |
pIRtcConnection Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2633",
"version": "0",
"level": "4",
"task": "51",
"opcode": "44",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"pdod": "0x0",
"pcoa": "0x0",
"pIRtcConnection": "0x0"
},
"message": ""
}
Event ID 2634: tskRtcRtcUnregisterContentHandlers_V1
#Fields #
| Name | Description |
|---|---|
pcoa Pointer | |
pIRtcConnection Pointer | |
DusecRTCContentHandlerDuration UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2634",
"version": "1",
"level": "4",
"task": "51",
"opcode": "45",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pcoa": "0x0",
"pIRtcConnection": "0x0",
"DusecRTCContentHandlerDuration": "0"
},
"message": ""
}
Event ID 2635: tskRtcRtcUnbiasedAlive
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
dusecAliveTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2635",
"version": "0",
"level": "4",
"task": "51",
"opcode": "46",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecAliveTime": "0"
},
"message": ""
}
Event ID 2636: tskRtcRtcUnbiasedDead
#Fields #
| Name | Description |
|---|---|
pdodMain Pointer | |
dusecDeadTime UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2636",
"version": "0",
"level": "4",
"task": "51",
"opcode": "47",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdodMain": "0x0",
"dusecDeadTime": "0"
},
"message": ""
}
Event ID 2637: tskRtcRtcPaused
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2637",
"version": "0",
"level": "4",
"task": "51",
"opcode": "48",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2638: tskRtcRtcUnpaused
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2638",
"version": "0",
"level": "4",
"task": "51",
"opcode": "49",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2639: tskRtcRtcPacketsStatistic
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ClientType Int32 | |
fPresence Boolean | |
cReceived UInt64 | |
cLost UInt64 | |
cUnordered UInt64 | |
cDelayedStart UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2639",
"version": "0",
"level": "4",
"task": "51",
"opcode": "50",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ClientType": "0",
"fPresence": "false",
"cReceived": "0",
"cLost": "0",
"cUnordered": "0",
"cDelayedStart": "0"
},
"message": ""
}
Event ID 2640: tskRtcRtcUnbiasedAliveDead_V2
#Fields #
| Name | Description |
|---|---|
fAlive Boolean | |
DeadReason Int32 | |
pdod Pointer | |
pdodMain Pointer | |
paraid UInt32 | |
dusecAliveDeadTime UInt64 | |
InitialOpResult Int32 | |
InitialOpKind Int32 | |
InitialClientType Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2640",
"version": "2",
"level": "4",
"task": "51",
"opcode": "51",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fAlive": "false",
"DeadReason": "0",
"pdod": "0x0",
"pdodMain": "0x0",
"paraid": "0",
"dusecAliveDeadTime": "0",
"InitialOpResult": "0",
"InitialOpKind": "0",
"InitialClientType": "0"
},
"message": ""
}
Event ID 2641: tskRtcRtcRbodCreateToBroadcastAckTime_V1
#Fields #
| Name | Description |
|---|---|
RbodIdentifier UnicodeString | |
OpKind Int32 | |
fPresence Boolean | |
MessageId UInt32 | |
usecCreateTime UInt64 | |
usecInsertTime UInt64 | |
usecCoalesceTime UInt64 | |
usecSerializeTime UInt64 | |
usecBroadcastTime UInt64 | |
dusecCreateToBroadcastTime UInt64 | |
usecAckTime UInt64 | |
dusecRoundtripTime UInt64 | |
retryBucket UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2641",
"version": "1",
"level": "4",
"task": "51",
"opcode": "52",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodIdentifier": "",
"OpKind": "0",
"fPresence": "false",
"MessageId": "0",
"usecCreateTime": "0",
"usecInsertTime": "0",
"usecCoalesceTime": "0",
"usecSerializeTime": "0",
"usecBroadcastTime": "0",
"dusecCreateToBroadcastTime": "0",
"usecAckTime": "0",
"dusecRoundtripTime": "0",
"retryBucket": "0"
},
"message": ""
}
Event ID 2642: tskRtcRtcRbodReceiveToPlayTime
#Fields #
| Name | Description |
|---|---|
RbodIdentifier UnicodeString | |
OpKind Int32 | |
MessageId UInt32 | |
usecCreateTime UInt64 | |
usecInsertTime UInt64 | |
usecProcessAllRbodsTime UInt64 | |
usecRorDoIfPossibleTime UInt64 | |
dusecReceiveToPlayTime UInt64 | |
OpResult Int32 | |
Paused Boolean | |
UnderPauseEffect Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2642",
"version": "0",
"level": "4",
"task": "51",
"opcode": "53",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RbodIdentifier": "",
"OpKind": "0",
"MessageId": "0",
"usecCreateTime": "0",
"usecInsertTime": "0",
"usecProcessAllRbodsTime": "0",
"usecRorDoIfPossibleTime": "0",
"dusecReceiveToPlayTime": "0",
"OpResult": "0",
"Paused": "false",
"UnderPauseEffect": "false"
},
"message": ""
}
Event ID 2643: tskRtcRtcDependsOnTrackChangesFeatureGate
#Fields #
| Name | Description |
|---|---|
FeatureGateOn Boolean | |
pdodMain Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2643",
"version": "0",
"level": "4",
"task": "51",
"opcode": "54",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FeatureGateOn": "false",
"pdodMain": "0x0"
},
"message": ""
}
Event ID 2644: tskRtcRtcEncounteredFlakyNetwork
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2644",
"version": "0",
"level": "4",
"task": "51",
"opcode": "55",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2645: tskRtcRtcPresenceTextType
#Fields #
| Name | Description |
|---|---|
PresenceTextType UInt32 | |
AggregationHelper Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2645",
"version": "0",
"level": "4",
"task": "51",
"opcode": "56",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"PresenceTextType": "0",
"AggregationHelper": "0"
},
"message": ""
}
Event ID 2646: tskRtcRtcUnknownEditorTime
#Fields #
| Name | Description |
|---|---|
UnknownEditorTime UInt32 | |
fNeverKnown Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2646",
"version": "0",
"level": "4",
"task": "51",
"opcode": "57",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"UnknownEditorTime": "0",
"fNeverKnown": "false"
},
"message": ""
}
Event ID 2650: tskRtcRtcBlockedByRtcLock
#Fields #
| Name | Description |
|---|---|
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2650",
"version": "0",
"level": "4",
"task": "51",
"opcode": "61",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0"
},
"message": ""
}
Event ID 2651: tskRtcRtcUnorderedBufferTimeout
#Fields #
| Name | Description |
|---|---|
fPresence Boolean | |
GuidFileId GUID | |
ParaId UInt32 | |
cParaIds UInt32 | |
cSequence UInt32 | |
cUnordered UInt32 | |
cLost UInt32 | |
usecInBuffer UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2651",
"version": "0",
"level": "4",
"task": "51",
"opcode": "62",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnordered": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2652: tskRtcRtcUnorderedBufferFull
#Fields #
| Name | Description |
|---|---|
fPresence Boolean | |
GuidFileId GUID | |
ParaId UInt32 | |
cParaIds UInt32 | |
cSequence UInt32 | |
cUnordered UInt32 | |
cLost UInt32 | |
usecInBuffer UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2652",
"version": "0",
"level": "4",
"task": "51",
"opcode": "63",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnordered": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2653: tskRtcRtcUnorderedBufferReady
#Fields #
| Name | Description |
|---|---|
fPresence Boolean | |
GuidFileId GUID | |
ParaId UInt32 | |
cParaIds UInt32 | |
cSequence UInt32 | |
cUnorderedResolved UInt32 | |
cLost UInt32 | |
usecInBuffer UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2653",
"version": "0",
"level": "4",
"task": "51",
"opcode": "64",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"cParaIds": "0",
"cSequence": "0",
"cUnorderedResolved": "0",
"cLost": "0",
"usecInBuffer": "0"
},
"message": ""
}
Event ID 2654: tskRtcRtcLostMiscount
#Fields #
| Name | Description |
|---|---|
fPresence Boolean | |
GuidFileId GUID | |
ParaId UInt32 | |
drwmidss UInt32 | |
dusecDelay UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2654",
"version": "0",
"level": "4",
"task": "51",
"opcode": "65",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fPresence": "false",
"GuidFileId": "{00000000-0000-0000-0000-000000000000}",
"ParaId": "0",
"drwmidss": "0",
"dusecDelay": "0"
},
"message": ""
}
Event ID 2900: tskDocCorruptionDocCorruptionPossible
#Fields #
| Name | Description |
|---|---|
TagCaller UInt32 | |
pdod Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2900",
"version": "0",
"level": "4",
"task": "53",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TagCaller": "0",
"pdod": "0x0"
},
"message": ""
}
Event ID 2901: tskProofingProofingNoProofRegion
#Fields #
| Name | Description |
|---|---|
NoProofRegion UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2901",
"version": "0",
"level": "4",
"task": "24",
"opcode": "25",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NoProofRegion": "0"
},
"message": ""
}
Event ID 2902: tskReadAloudReadAloudVoiceLang
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
lang UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2902",
"version": "0",
"level": "4",
"task": "61",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"lang": ""
},
"message": ""
}
Event ID 2903: tskProofingProofingLanguagePreferences
#Fields #
| Name | Description |
|---|---|
Lid UInt16 | |
fIsDifferentLangSelected Boolean | |
fIsNoProofChecked Boolean | |
fIsAutoDetectUnchecked Boolean | |
fIsSetDefaultPressed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2903",
"version": "0",
"level": "4",
"task": "24",
"opcode": "26",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Lid": "0",
"fIsDifferentLangSelected": "false",
"fIsNoProofChecked": "false",
"fIsAutoDetectUnchecked": "false",
"fIsSetDefaultPressed": "false"
},
"message": ""
}
Event ID 2904: tskDocCorruptionTableDocCorruptionError
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pdod Pointer | |
cp Int32 | |
itap Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2904",
"version": "0",
"level": "2",
"task": "53",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pdod": "0x0",
"cp": "0",
"itap": "0"
},
"message": ""
}
Event ID 2905: tskDocCorruptionTableDocCorruptionWarning
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
pdod Pointer | |
cp Int32 | |
itap Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2905",
"version": "0",
"level": "3",
"task": "53",
"opcode": "13",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"pdod": "0x0",
"cp": "0",
"itap": "0"
},
"message": ""
}
Event ID 2906: tskCustomFlyoutsCustomFlyoutVisPropChanged
#Fields #
| Name | Description |
|---|---|
fVisible Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2906",
"version": "0",
"level": "4",
"task": "62",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fVisible": "false"
},
"message": ""
}
Event ID 2907: tskCustomFlyoutsCustomFlyoutViewportMove
#Fields #
| Name | Description |
|---|---|
fMoving Boolean | |
xPos Double | |
yPos Double | |
xMaxOffset Double | |
yMaxOffset Double | |
xZoom Double | |
yZoom Double |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2907",
"version": "0",
"level": "5",
"task": "62",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fMoving": "false",
"xPos": "0.0",
"yPos": "0.0",
"xMaxOffset": "0.0",
"yMaxOffset": "0.0",
"xZoom": "0.0",
"yZoom": "0.0"
},
"message": ""
}
Event ID 2908: tskCustomFlyoutsCustomFlyoutDismissed
#Fields #
| Name | Description |
|---|---|
fVisible Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2908",
"version": "0",
"level": "4",
"task": "62",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fVisible": "false"
},
"message": ""
}
Event ID 2909: tskXsz
#Fields #
| Name | Description |
|---|---|
XszName UnicodeString | |
XszPayload UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2909",
"version": "0",
"level": "4",
"task": "63",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"XszName": "",
"XszPayload": ""
},
"message": ""
}
Event ID 2910: tskReadAloudPane
#Fields #
| Name | Description |
|---|---|
dwTag UInt32 | |
pdod Pointer | |
wkViewKind UInt32 | |
fIsMotherWwd Boolean | |
fInListWwd Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "2910",
"version": "0",
"level": "4",
"task": "64",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-14T21:57:27.602330200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "3792",
"thread_id": "7880"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0x248B244",
"pdod": "0x2CA3EA2C1D0",
"wkViewKind": " 2048",
"fIsMotherWwd": "true",
"fInListWwd": "true"
},
"message": ""
}
Event ID 2911
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
lTagBkmk UInt64 | |
fHasAtMention Boolean | |
fCommentSelChangeFG Boolean |
Event ID 2912: tskBootBootGlobalDotMatchesDefault
#Fields #
| Name | Description |
|---|---|
fGlobalDotMatchesDefault Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{bb00e856-a12f-4ab7-b2c8-4e80caea5b07}",
"event_source_name": "",
"event_id": "2912",
"version": "0",
"level": "4",
"task": "45",
"opcode": "26",
"keywords": 9223372036858970112,
"time_created": "2026-03-14T22:34:52.702361800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10104",
"thread_id": "13232"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fGlobalDotMatchesDefault": "false"
},
"message": ""
}
Event ID 2913: tskUiaSculptingTableUIAHeuristic
#Fields #
| Name | Description |
|---|---|
fDifferentDoc Boolean | |
fUiaNodeAllowed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "2913",
"version": "0",
"level": "4",
"task": "70",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDifferentDoc": "false",
"fUiaNodeAllowed": "false"
},
"message": ""
}
Event ID 3000: tskPrintTraceDeviceCmd
#Fields #
| Name | Description |
|---|---|
Device UnicodeString | |
Mode UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3000",
"version": "0",
"level": "4",
"task": "65",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Device": "",
"Mode": "0"
},
"message": ""
}
Event ID 3001: tskPrintTraceDeviceModeIn
#Fields #
| Name | Description |
|---|---|
Devmode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3001",
"version": "0",
"level": "100",
"task": "65",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Devmode": ""
},
"message": ""
}
Event ID 3002: tskPrintTraceDeviceModeOut
#Fields #
| Name | Description |
|---|---|
Devmode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3002",
"version": "0",
"level": "100",
"task": "65",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Devmode": ""
},
"message": ""
}
Event ID 3003: tskPrintTraceDeviceModeRet
#Fields #
| Name | Description |
|---|---|
ReturnValue Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3003",
"version": "0",
"level": "4",
"task": "65",
"opcode": "13",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReturnValue": "0"
},
"message": ""
}
Event ID 3004: tskPrintTraceDeviceCapsRet
#Fields #
| Name | Description |
|---|---|
ReturnValue Int32 | |
Index Int32 | |
DC Pointer | |
fError Boolean | |
fFaking Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3004",
"version": "0",
"level": "4",
"task": "65",
"opcode": "14",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ReturnValue": "0",
"Index": "0",
"DC": "0x0",
"fError": "false",
"fFaking": "false"
},
"message": ""
}
Event ID 3005: tskPrintTraceWordGetDefaultPrinter
#Fields #
| Name | Description |
|---|---|
RetVal Boolean | |
Printer UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3005",
"version": "0",
"level": "5",
"task": "65",
"opcode": "15",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RetVal": "false",
"Printer": ""
},
"message": ""
}
Event ID 3006: tskPrintTracePrGetDefaultPrinter
#Fields #
| Name | Description |
|---|---|
fQuery Boolean | |
fFakePrinterNameOK Boolean | |
fHaveDefaultPrinterName Boolean | |
fEmptyPrinterName Boolean | |
RetVal Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3006",
"version": "0",
"level": "5",
"task": "65",
"opcode": "16",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fQuery": "false",
"fFakePrinterNameOK": "false",
"fHaveDefaultPrinterName": "false",
"fEmptyPrinterName": "false",
"RetVal": "false"
},
"message": ""
}
Event ID 3007: tskPrintTraceDeviceConnectCancellableFail
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3007",
"version": "0",
"level": "5",
"task": "65",
"opcode": "17",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3008: tskPrintTraceCreateDCPrinter
#Fields #
| Name | Description |
|---|---|
Driver UnicodeString | |
Device UnicodeString | |
Port UnicodeString | |
Devmode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3008",
"version": "0",
"level": "5",
"task": "65",
"opcode": "18",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Driver": "",
"Device": "",
"Port": "",
"Devmode": ""
},
"message": ""
}
Event ID 3009: tskPrintTraceCreateDCPrinterRet
#Fields #
| Name | Description |
|---|---|
RetVal Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3009",
"version": "0",
"level": "5",
"task": "65",
"opcode": "19",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"RetVal": "false"
},
"message": ""
}
Event ID 3010: tskPrintTraceResetDCPrinter
#Fields #
| Name | Description |
|---|---|
DCIn Pointer | |
Devmode UnicodeString | |
DCOut Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3010",
"version": "0",
"level": "5",
"task": "65",
"opcode": "20",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DCIn": "0x0",
"Devmode": "",
"DCOut": "0x0"
},
"message": ""
}
Event ID 3011: tskPrintTraceDeleteDCPrinter
#Fields #
| Name | Description |
|---|---|
DC Pointer | |
RetVal Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3011",
"version": "0",
"level": "5",
"task": "65",
"opcode": "21",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"DC": "0x0",
"RetVal": "false"
},
"message": ""
}
Event ID 3012: tskPrintTracePrGetEmergDCCore
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3012",
"version": "0",
"level": "5",
"task": "65",
"opcode": "22",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3013: tskPrintTraceDeviceCapabilities
#Fields #
| Name | Description |
|---|---|
Printer UnicodeString | |
Index UInt32 | |
fOutput Boolean | |
fDevmode Boolean | |
ReturnValue Int32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3013",
"version": "0",
"level": "5",
"task": "65",
"opcode": "23",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Printer": "",
"Index": "0",
"fOutput": "false",
"fDevmode": "false",
"ReturnValue": "0"
},
"message": ""
}
Event ID 3014: tskPrintTraceResetDCPrinterExternal
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3014",
"version": "0",
"level": "5",
"task": "65",
"opcode": "24",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 3015: tskPrintTracePrefPrinterSet
#Fields #
| Name | Description |
|---|---|
Printer UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3015",
"version": "0",
"level": "5",
"task": "65",
"opcode": "25",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Printer": ""
},
"message": ""
}
Event ID 3016: tskPrintTracePrefPrinterFree
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "3016",
"version": "0",
"level": "5",
"task": "65",
"opcode": "26",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 30291: tskGlyph_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30291",
"version": "1",
"level": "1",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30292: tskGlyph30292_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30292",
"version": "1",
"level": "2",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30293: tskGlyph30293_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30293",
"version": "1",
"level": "3",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30294: tskGlyph30294_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30294",
"version": "1",
"level": "4",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30295: tskGlyph30295_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30295",
"version": "1",
"level": "5",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30296: tskGlyph30296_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30296",
"version": "1",
"level": "16",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30297: tskGlyph30297_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30297",
"version": "1",
"level": "50",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30298: tskGlyph30298_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30298",
"version": "1",
"level": "100",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30299: tskGlyph30299_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30299",
"version": "1",
"level": "200",
"task": "1033",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30300: tskSelection_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30300",
"version": "1",
"level": "1",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30301: tskSelection30301_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30301",
"version": "1",
"level": "2",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30302: tskSelection30302_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30302",
"version": "1",
"level": "3",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30303: tskSelection30303_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30303",
"version": "1",
"level": "4",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30304: tskSelection30304_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30304",
"version": "1",
"level": "5",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30305: tskSelection30305_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30305",
"version": "1",
"level": "16",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30306: tskSelection30306_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30306",
"version": "1",
"level": "50",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30307: tskSelection30307_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30307",
"version": "1",
"level": "100",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30308: tskSelection30308_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30308",
"version": "1",
"level": "200",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30309: tskDynamicDataExchange_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30309",
"version": "1",
"level": "1",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30310: tskDynamicDataExchange30310_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30310",
"version": "1",
"level": "2",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30311: tskDynamicDataExchange30311_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30311",
"version": "1",
"level": "3",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30312: tskDynamicDataExchange30312_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30312",
"version": "1",
"level": "4",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30313: tskDynamicDataExchange30313_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30313",
"version": "1",
"level": "5",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30314: tskDynamicDataExchange30314_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30314",
"version": "1",
"level": "16",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30315: tskDynamicDataExchange30315_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30315",
"version": "1",
"level": "50",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30316: tskDynamicDataExchange30316_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30316",
"version": "1",
"level": "100",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30317: tskDynamicDataExchange30317_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30317",
"version": "1",
"level": "200",
"task": "1035",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30318: tskGraphics_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30318",
"version": "1",
"level": "1",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30319: tskGraphics30319_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30319",
"version": "1",
"level": "2",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30320: tskGraphics30320_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30320",
"version": "1",
"level": "3",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30321: tskGraphics30321_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30321",
"version": "1",
"level": "4",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30322: tskGraphics30322_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30322",
"version": "1",
"level": "5",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30323: tskGraphics30323_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30323",
"version": "1",
"level": "16",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30324: tskGraphics30324_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30324",
"version": "1",
"level": "50",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30325: tskGraphics30325_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30325",
"version": "1",
"level": "100",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30326: tskGraphics30326_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30326",
"version": "1",
"level": "200",
"task": "1036",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30327: tskCommanding_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30327",
"version": "1",
"level": "1",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30328: tskCommanding30328_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30328",
"version": "1",
"level": "2",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30329: tskCommanding30329_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30329",
"version": "1",
"level": "3",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30330: tskCommanding30330_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30330",
"version": "1",
"level": "4",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30331: tskCommanding30331_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30331",
"version": "1",
"level": "5",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30332: tskCommanding30332_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30332",
"version": "1",
"level": "16",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30333: tskCommanding30333_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30333",
"version": "1",
"level": "50",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30334: tskCommanding30334_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30334",
"version": "1",
"level": "100",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30335: tskCommanding30335_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30335",
"version": "1",
"level": "200",
"task": "9",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30336: tskAccessibility_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30336",
"version": "1",
"level": "1",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30337: tskAccessibility30337_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30337",
"version": "1",
"level": "2",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30338: tskAccessibility30338_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30338",
"version": "1",
"level": "3",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30339: tskAccessibility30339_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30339",
"version": "1",
"level": "4",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30340: tskAccessibility30340_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30340",
"version": "1",
"level": "5",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30341: tskAccessibility30341_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30341",
"version": "1",
"level": "16",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30342: tskAccessibility30342_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30342",
"version": "1",
"level": "50",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30343: tskAccessibility30343_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30343",
"version": "1",
"level": "100",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30344: tskAccessibility30344_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30344",
"version": "1",
"level": "200",
"task": "1038",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30345: tskZoomScroll_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30345",
"version": "1",
"level": "1",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30346: tskZoomScroll30346_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30346",
"version": "1",
"level": "2",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30347: tskZoomScroll30347_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30347",
"version": "1",
"level": "3",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30348: tskZoomScroll30348_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30348",
"version": "1",
"level": "4",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30349: tskZoomScroll30349_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30349",
"version": "1",
"level": "5",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30350: tskZoomScroll30350_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30350",
"version": "1",
"level": "16",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30351: tskZoomScroll30351_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30351",
"version": "1",
"level": "50",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30352: tskZoomScroll30352_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30352",
"version": "1",
"level": "100",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30353: tskZoomScroll30353_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30353",
"version": "1",
"level": "200",
"task": "1039",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30354: tskLayoutDump_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30354",
"version": "1",
"level": "1",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30355: tskLayoutDump30355_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30355",
"version": "1",
"level": "2",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30356: tskLayoutDump30356_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30356",
"version": "1",
"level": "3",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30357: tskLayoutDump30357_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30357",
"version": "1",
"level": "4",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30358: tskLayoutDump30358_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30358",
"version": "1",
"level": "5",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30359: tskLayoutDump30359_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30359",
"version": "1",
"level": "16",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30360: tskLayoutDump30360_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30360",
"version": "1",
"level": "50",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30361: tskLayoutDump30361_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30361",
"version": "1",
"level": "100",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30362: tskLayoutDump30362_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30362",
"version": "1",
"level": "200",
"task": "1040",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30363: tskComments_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30363",
"version": "1",
"level": "1",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30364: tskComments30364_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30364",
"version": "1",
"level": "2",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30365: tskComments30365_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30365",
"version": "1",
"level": "3",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30366: tskComments30366_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30366",
"version": "1",
"level": "4",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30367: tskComments30367_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30367",
"version": "1",
"level": "5",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30368: tskComments30368_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30368",
"version": "1",
"level": "16",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30369: tskComments30369_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30369",
"version": "1",
"level": "50",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30370: tskComments30370_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30370",
"version": "1",
"level": "100",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30371: tskComments30371_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30371",
"version": "1",
"level": "200",
"task": "26",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30372: tskPrint_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30372",
"version": "1",
"level": "1",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30373: tskPrint30373_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30373",
"version": "1",
"level": "2",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30374: tskPrint30374_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30374",
"version": "1",
"level": "3",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30375: tskPrint30375_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30375",
"version": "1",
"level": "4",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30376: tskPrint30376_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30376",
"version": "1",
"level": "5",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30377: tskPrint30377_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30377",
"version": "1",
"level": "16",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30378: tskPrint30378_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30378",
"version": "1",
"level": "50",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30379: tskPrint30379_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30379",
"version": "1",
"level": "100",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30380: tskPrint30380_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30380",
"version": "1",
"level": "200",
"task": "19",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30381: tskReadingMode_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30381",
"version": "1",
"level": "1",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30382: tskReadingMode30382_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30382",
"version": "1",
"level": "2",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30383: tskReadingMode30383_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30383",
"version": "1",
"level": "3",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30384: tskReadingMode30384_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30384",
"version": "1",
"level": "4",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30385: tskReadingMode30385_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30385",
"version": "1",
"level": "5",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30386: tskReadingMode30386_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30386",
"version": "1",
"level": "16",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30387: tskReadingMode30387_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30387",
"version": "1",
"level": "50",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30388: tskReadingMode30388_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30388",
"version": "1",
"level": "100",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30389: tskReadingMode30389_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30389",
"version": "1",
"level": "200",
"task": "35",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30390: tskPropertyFormatting_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30390",
"version": "1",
"level": "1",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30391: tskPropertyFormatting30391_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30391",
"version": "1",
"level": "2",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30392: tskPropertyFormatting30392_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30392",
"version": "1",
"level": "3",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30393: tskPropertyFormatting30393_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30393",
"version": "1",
"level": "4",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30394: tskPropertyFormatting30394_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30394",
"version": "1",
"level": "5",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30395: tskPropertyFormatting30395_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30395",
"version": "1",
"level": "16",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30396: tskPropertyFormatting30396_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30396",
"version": "1",
"level": "50",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30397: tskPropertyFormatting30397_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30397",
"version": "1",
"level": "100",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30398: tskPropertyFormatting30398_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30398",
"version": "1",
"level": "200",
"task": "18",
"opcode": "0",
"keywords": 9223372036854777856,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30399: tskProofing_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30399",
"version": "1",
"level": "1",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30400: tskProofing30400_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30400",
"version": "1",
"level": "2",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30401: tskProofing30401_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30401",
"version": "1",
"level": "3",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30402: tskProofing30402_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30402",
"version": "1",
"level": "4",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30403: tskProofing30403_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30403",
"version": "1",
"level": "5",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30404: tskProofing30404_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30404",
"version": "1",
"level": "16",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30405: tskProofing30405_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30405",
"version": "1",
"level": "50",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30406: tskProofing30406_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30406",
"version": "1",
"level": "100",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30407: tskProofing30407_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30407",
"version": "1",
"level": "200",
"task": "24",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30408: tskLiveDrag_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30408",
"version": "1",
"level": "1",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30409: tskLiveDrag30409_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30409",
"version": "1",
"level": "2",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30410: tskLiveDrag30410_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30410",
"version": "1",
"level": "3",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30411: tskLiveDrag30411_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30411",
"version": "1",
"level": "4",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30412: tskLiveDrag30412_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30412",
"version": "1",
"level": "5",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30413: tskLiveDrag30413_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30413",
"version": "1",
"level": "16",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30414: tskLiveDrag30414_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30414",
"version": "1",
"level": "50",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30415: tskLiveDrag30415_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30415",
"version": "1",
"level": "100",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30416: tskLiveDrag30416_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30416",
"version": "1",
"level": "200",
"task": "25",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30417: tskClipboard_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30417",
"version": "1",
"level": "1",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30418: tskClipboard30418_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30418",
"version": "1",
"level": "2",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30419: tskClipboard30419_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30419",
"version": "1",
"level": "3",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30420: tskClipboard30420_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30420",
"version": "1",
"level": "4",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30421: tskClipboard30421_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30421",
"version": "1",
"level": "5",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30422: tskClipboard30422_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30422",
"version": "1",
"level": "16",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30423: tskClipboard30423_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30423",
"version": "1",
"level": "50",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30424: tskClipboard30424_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30424",
"version": "1",
"level": "100",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30425: tskClipboard30425_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30425",
"version": "1",
"level": "200",
"task": "27",
"opcode": "0",
"keywords": 9223372036854792192,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30426: tskGlobalGeneric_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30426",
"version": "1",
"level": "1",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30427: tskGlobalGeneric30427_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30427",
"version": "1",
"level": "2",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30428: tskGlobalGeneric30428_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30428",
"version": "1",
"level": "3",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30429: tskGlobalGeneric30429_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30429",
"version": "1",
"level": "4",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30430: tskGlobalGeneric30430_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30430",
"version": "1",
"level": "5",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30431: tskGlobalGeneric30431_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30431",
"version": "1",
"level": "16",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30432: tskGlobalGeneric30432_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30432",
"version": "1",
"level": "50",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30433: tskGlobalGeneric30433_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30433",
"version": "1",
"level": "100",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30434: tskGlobalGeneric30434_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30434",
"version": "1",
"level": "200",
"task": "1048",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30435: tskCoreDocEdit30435_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30435",
"version": "1",
"level": "1",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30436: tskCoreDocEdit30436_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30436",
"version": "1",
"level": "2",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30437: tskCoreDocEdit30437_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30437",
"version": "1",
"level": "3",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30438: tskCoreDocEdit30438_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30438",
"version": "1",
"level": "4",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30439: tskCoreDocEdit30439_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30439",
"version": "1",
"level": "5",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30440: tskCoreDocEdit30440_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30440",
"version": "1",
"level": "16",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30441: tskCoreDocEdit30441_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30441",
"version": "1",
"level": "50",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30442: tskCoreDocEdit30442_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30442",
"version": "1",
"level": "100",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30443: tskCoreDocEdit30443_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30443",
"version": "1",
"level": "200",
"task": "29",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30444: tskUIM_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30444",
"version": "1",
"level": "1",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30445: tskUIM30445_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30445",
"version": "1",
"level": "2",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30446: tskUIM30446_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30446",
"version": "1",
"level": "3",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30447: tskUIM30447_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30447",
"version": "1",
"level": "4",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30448: tskUIM30448_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30448",
"version": "1",
"level": "5",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30449: tskUIM30449_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30449",
"version": "1",
"level": "16",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30450: tskUIM30450_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30450",
"version": "1",
"level": "50",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30451: tskUIM30451_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30451",
"version": "1",
"level": "100",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30452: tskUIM30452_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30452",
"version": "1",
"level": "200",
"task": "30",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30453: tskBulletsNumbering_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30453",
"version": "1",
"level": "1",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30454: tskBulletsNumbering30454_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30454",
"version": "1",
"level": "2",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30455: tskBulletsNumbering30455_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30455",
"version": "1",
"level": "3",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30456: tskBulletsNumbering30456_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30456",
"version": "1",
"level": "4",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30457: tskBulletsNumbering30457_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30457",
"version": "1",
"level": "5",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30458: tskBulletsNumbering30458_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30458",
"version": "1",
"level": "16",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30459: tskBulletsNumbering30459_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30459",
"version": "1",
"level": "50",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30460: tskBulletsNumbering30460_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30460",
"version": "1",
"level": "100",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30461: tskBulletsNumbering30461_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30461",
"version": "1",
"level": "200",
"task": "1051",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30462: tskFindReplace_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30462",
"version": "1",
"level": "1",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30463: tskFindReplace30463_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30463",
"version": "1",
"level": "2",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30464: tskFindReplace30464_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30464",
"version": "1",
"level": "3",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30465: tskFindReplace30465_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30465",
"version": "1",
"level": "4",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30466: tskFindReplace30466_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30466",
"version": "1",
"level": "5",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30467: tskFindReplace30467_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30467",
"version": "1",
"level": "16",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30468: tskFindReplace30468_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30468",
"version": "1",
"level": "50",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30469: tskFindReplace30469_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30469",
"version": "1",
"level": "100",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30470: tskFindReplace30470_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30470",
"version": "1",
"level": "200",
"task": "1052",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30471: tskTrackChanges_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30471",
"version": "1",
"level": "1",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30472: tskTrackChanges30472_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30472",
"version": "1",
"level": "2",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30473: tskTrackChanges30473_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30473",
"version": "1",
"level": "3",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30474: tskTrackChanges30474_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30474",
"version": "1",
"level": "4",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30475: tskTrackChanges30475_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30475",
"version": "1",
"level": "5",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30476: tskTrackChanges30476_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30476",
"version": "1",
"level": "16",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30477: tskTrackChanges30477_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30477",
"version": "1",
"level": "50",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30478: tskTrackChanges30478_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30478",
"version": "1",
"level": "100",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30479: tskTrackChanges30479_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30479",
"version": "1",
"level": "200",
"task": "42",
"opcode": "0",
"keywords": 9223372036855824384,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30480: tskFieldUpdate_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30480",
"version": "1",
"level": "1",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30481: tskFieldUpdate30481_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30481",
"version": "1",
"level": "2",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30482: tskFieldUpdate30482_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30482",
"version": "1",
"level": "3",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30483: tskFieldUpdate30483_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30483",
"version": "1",
"level": "4",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30484: tskFieldUpdate30484_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30484",
"version": "1",
"level": "5",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30485: tskFieldUpdate30485_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30485",
"version": "1",
"level": "16",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30486: tskFieldUpdate30486_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30486",
"version": "1",
"level": "50",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30487: tskFieldUpdate30487_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30487",
"version": "1",
"level": "100",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30488: tskFieldUpdate30488_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30488",
"version": "1",
"level": "200",
"task": "44",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30489: tskBoot_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30489",
"version": "1",
"level": "1",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30490: tskBoot30490_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30490",
"version": "1",
"level": "2",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30491: tskBoot30491_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30491",
"version": "1",
"level": "3",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30492: tskBoot30492_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30492",
"version": "1",
"level": "4",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30493: tskBoot30493_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30493",
"version": "1",
"level": "5",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30494: tskBoot30494_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30494",
"version": "1",
"level": "16",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30495: tskBoot30495_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30495",
"version": "1",
"level": "50",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30496: tskBoot30496_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30496",
"version": "1",
"level": "100",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30497: tskBoot30497_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30497",
"version": "1",
"level": "200",
"task": "45",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30498: tskWordMail_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30498",
"version": "1",
"level": "1",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30499: tskWordMail30499_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30499",
"version": "1",
"level": "2",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30500: tskWordMail30500_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30500",
"version": "1",
"level": "3",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30501: tskWordMail30501_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30501",
"version": "1",
"level": "4",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30502: tskWordMail30502_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30502",
"version": "1",
"level": "5",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30503: tskWordMail30503_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30503",
"version": "1",
"level": "16",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30504: tskWordMail30504_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30504",
"version": "1",
"level": "50",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30505: tskWordMail30505_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30505",
"version": "1",
"level": "100",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30506: tskWordMail30506_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30506",
"version": "1",
"level": "200",
"task": "46",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30507: tskRtc_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30507",
"version": "1",
"level": "1",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30508: tskRtc30508_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30508",
"version": "1",
"level": "2",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30509: tskRtc30509_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30509",
"version": "1",
"level": "3",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30510: tskRtc30510_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30510",
"version": "1",
"level": "4",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30511: tskRtc30511_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30511",
"version": "1",
"level": "5",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30512: tskRtc30512_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30512",
"version": "1",
"level": "16",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30513: tskRtc30513_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30513",
"version": "1",
"level": "50",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30514: tskRtc30514_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30514",
"version": "1",
"level": "100",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30515: tskRtc30515_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30515",
"version": "1",
"level": "200",
"task": "51",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30516: tskWebScalingView_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30516",
"version": "1",
"level": "1",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30517: tskWebScalingView30517_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30517",
"version": "1",
"level": "2",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30518: tskWebScalingView30518_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30518",
"version": "1",
"level": "3",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30519: tskWebScalingView30519_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30519",
"version": "1",
"level": "4",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30520: tskWebScalingView30520_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30520",
"version": "1",
"level": "5",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30521: tskWebScalingView30521_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30521",
"version": "1",
"level": "16",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30522: tskWebScalingView30522_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30522",
"version": "1",
"level": "50",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30523: tskWebScalingView30523_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30523",
"version": "1",
"level": "100",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30524: tskWebScalingView30524_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30524",
"version": "1",
"level": "200",
"task": "49",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30525: tskEdp_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30525",
"version": "1",
"level": "1",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30526: tskEdp30526_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30526",
"version": "1",
"level": "2",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30527: tskEdp30527_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30527",
"version": "1",
"level": "3",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30528: tskEdp30528_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30528",
"version": "1",
"level": "4",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30529: tskEdp30529_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30529",
"version": "1",
"level": "5",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30530: tskEdp30530_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30530",
"version": "1",
"level": "16",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30531: tskEdp30531_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30531",
"version": "1",
"level": "50",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30532: tskEdp30532_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30532",
"version": "1",
"level": "100",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30533: tskEdp30533_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30533",
"version": "1",
"level": "200",
"task": "52",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30534: tskDiagnostics_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30534",
"version": "1",
"level": "1",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30535: tskDiagnostics30535_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30535",
"version": "1",
"level": "2",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30536: tskDiagnostics30536_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30536",
"version": "1",
"level": "3",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30537: tskDiagnostics30537_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30537",
"version": "1",
"level": "4",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30538: tskDiagnostics30538_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30538",
"version": "1",
"level": "5",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30539: tskDiagnostics30539_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30539",
"version": "1",
"level": "16",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30540: tskDiagnostics30540_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30540",
"version": "1",
"level": "50",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30541: tskDiagnostics30541_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30541",
"version": "1",
"level": "100",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30542: tskDiagnostics30542_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30542",
"version": "1",
"level": "200",
"task": "1060",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30543: tskDocCorruption_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30543",
"version": "1",
"level": "1",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30544: tskDocCorruption30544_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30544",
"version": "1",
"level": "2",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30545: tskDocCorruption30545_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30545",
"version": "1",
"level": "3",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30546: tskDocCorruption30546_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30546",
"version": "1",
"level": "4",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30547: tskDocCorruption30547_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30547",
"version": "1",
"level": "5",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30548: tskDocCorruption30548_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30548",
"version": "1",
"level": "16",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30549: tskDocCorruption30549_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30549",
"version": "1",
"level": "50",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30550: tskDocCorruption30550_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30550",
"version": "1",
"level": "100",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30551: tskDocCorruption30551_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30551",
"version": "1",
"level": "200",
"task": "53",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30552: tskObjectModel30552_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30552",
"version": "1",
"level": "1",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30553: tskObjectModel30553_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30553",
"version": "1",
"level": "2",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30554: tskObjectModel30554_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30554",
"version": "1",
"level": "3",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30555: tskObjectModel30555_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30555",
"version": "1",
"level": "4",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30556: tskObjectModel30556_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30556",
"version": "1",
"level": "5",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30557: tskObjectModel30557_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30557",
"version": "1",
"level": "16",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30558: tskObjectModel30558_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30558",
"version": "1",
"level": "50",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30559: tskObjectModel30559_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30559",
"version": "1",
"level": "100",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30560: tskObjectModel30560_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30560",
"version": "1",
"level": "200",
"task": "54",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30561: tskAtMentions_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30561",
"version": "1",
"level": "1",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30562: tskAtMentions30562_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30562",
"version": "1",
"level": "2",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30563: tskAtMentions30563_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30563",
"version": "1",
"level": "3",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30564: tskAtMentions30564_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30564",
"version": "1",
"level": "4",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30565: tskAtMentions30565_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30565",
"version": "1",
"level": "5",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30566: tskAtMentions30566_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30566",
"version": "1",
"level": "16",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30567: tskAtMentions30567_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30567",
"version": "1",
"level": "50",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30568: tskAtMentions30568_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30568",
"version": "1",
"level": "100",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30569: tskAtMentions30569_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30569",
"version": "1",
"level": "200",
"task": "55",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30570: tskAuthoringAssistant_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30570",
"version": "1",
"level": "1",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30571: tskAuthoringAssistant30571_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30571",
"version": "1",
"level": "2",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30572: tskAuthoringAssistant30572_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30572",
"version": "1",
"level": "3",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30573: tskAuthoringAssistant30573_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30573",
"version": "1",
"level": "4",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30574: tskAuthoringAssistant30574_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30574",
"version": "1",
"level": "5",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30575: tskAuthoringAssistant30575_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30575",
"version": "1",
"level": "16",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30576: tskAuthoringAssistant30576_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30576",
"version": "1",
"level": "50",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30577: tskAuthoringAssistant30577_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30577",
"version": "1",
"level": "100",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30578: tskAuthoringAssistant30578_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word2",
"guid": "{BB00E856-A12F-4AB7-B2C8-4E80CAEA5B07}",
"event_source_name": "",
"event_id": "30578",
"version": "1",
"level": "200",
"task": "1064",
"opcode": "0",
"keywords": 9223372039002259456,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID bb00e856-a12f-4ab7-b2c8-4e80caea5b07
Defined in Program, which carries the event manifest.
Observed on:
- Win11-26200.6584, schema read from the registered manifest, binary version 16.0.17932.20790, captured 2026-06-02