Microsoft-Office-Word3
450 events across 1 channel
Event ID 0: tskVclok
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "0",
"version": "0",
"level": "4",
"task": "1",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 1: tskVclok
#Fields #
| Name | Description |
|---|---|
receivingClientVclokId GUID | |
sendingClientVclokId GUID | |
senderSaveActionGuid GUID | |
sendingClientVclokValueMin UInt32 | |
sendingClientVclokValueMax UInt32 | |
uploadDuration UInt64 | |
rtcPacketArrivalToMergeDuration UInt64 | |
rtcPacketArrivalToDownloadStartDuration UInt64 | |
downloadStartToEndDuration UInt64 | |
downloadEndToMergeDuration UInt64 | |
mergeToDisplayDuration UInt64 | |
e2eDuration UInt64 | |
deepSleepDuration UInt64 | |
mergeStartToEndDuration UInt64 | |
downloadBranchNotificationDuration UInt64 | |
idleDuration UInt64 | |
loadDuration UInt64 | |
fMergedContent Boolean | |
rtcBrkSenderDuration UInt64 | |
rtcBrkE2EDuration UInt64 | |
idleDocLoadEndToMergeStartDuration UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "1",
"version": "8",
"level": "4",
"task": "1",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"senderSaveActionGuid": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokValueMin": "0",
"sendingClientVclokValueMax": "0",
"uploadDuration": "0",
"rtcPacketArrivalToMergeDuration": "0",
"rtcPacketArrivalToDownloadStartDuration": "0",
"downloadStartToEndDuration": "0",
"downloadEndToMergeDuration": "0",
"mergeToDisplayDuration": "0",
"e2eDuration": "0",
"deepSleepDuration": "0",
"mergeStartToEndDuration": "0",
"downloadBranchNotificationDuration": "0",
"idleDuration": "0",
"loadDuration": "0",
"fMergedContent": "false",
"rtcBrkSenderDuration": "0",
"rtcBrkE2EDuration": "0",
"idleDocLoadEndToMergeStartDuration": "0"
},
"message": ""
}
Event ID 2: tskVclokVclokEntryPacketDelayed
#Fields #
| Name | Description |
|---|---|
receivingClientVclokId GUID | |
sendingClientVclokId GUID | |
sendingClientVclokValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2",
"version": "0",
"level": "4",
"task": "1",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"sendingClientVclokValue": "0"
},
"message": ""
}
Event ID 3: tskVclok3
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "3",
"version": "0",
"level": "4",
"task": "1",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 4: tskVclokVclokOnUploadComplete_V1
#Fields #
| Name | Description |
|---|---|
savingClientVclokId GUID | |
savingClientVclokValueMin UInt32 | |
savingClientVclokValueMax UInt32 | |
uploadDuration UInt64 | |
editToUploadTimeMicroseconds UInt64 | |
rtcBrkEditToUploadTimeMicroseconds UInt64 | |
saveToUploadInitTimeMicroseconds UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "4",
"version": "1",
"level": "4",
"task": "1",
"opcode": "14",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"savingClientVclokValueMin": "0",
"savingClientVclokValueMax": "0",
"uploadDuration": "0",
"editToUploadTimeMicroseconds": "0",
"rtcBrkEditToUploadTimeMicroseconds": "0",
"saveToUploadInitTimeMicroseconds": "0"
},
"message": ""
}
Event ID 5: tskHashtagsHashtagAdded
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "5",
"version": "0",
"level": "5",
"task": "2",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 6: tskHashtagsHashtagRemoved
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "6",
"version": "0",
"level": "5",
"task": "2",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 7: tskHashtagsHashtagError
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "7",
"version": "0",
"level": "5",
"task": "2",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 8: tskHashtagsHashtagFlyoutInvoke
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "8",
"version": "0",
"level": "5",
"task": "2",
"opcode": "13",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 9: tskHashtagsHashtagFlyoutDismiss
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "9",
"version": "0",
"level": "5",
"task": "2",
"opcode": "14",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 10: tskHashtagsHashtagDocOpen
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "10",
"version": "0",
"level": "5",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 11: tskHashtagsHashtagDocOpen11
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "11",
"version": "0",
"level": "5",
"task": "2",
"opcode": "15",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 12: tskHashtagsHashtagNotificationCollectorProcessList
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "12",
"version": "0",
"level": "5",
"task": "2",
"opcode": "16",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 13: tskHashtagsHashtagNotificationCollectorResetList
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "13",
"version": "0",
"level": "5",
"task": "2",
"opcode": "17",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 14: tskEmojisEmojiFlyoutInvoke
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "14",
"version": "0",
"level": "5",
"task": "3",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 15: tskEmojisEmojiFlyoutDismiss
#Fields #
| Name | Description |
|---|---|
Dismissal Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "15",
"version": "0",
"level": "5",
"task": "3",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Dismissal Reason": "0"
},
"message": ""
}
Event ID 16: tskVclok
#Fields #
| Name | Description |
|---|---|
savingClientVclokId GUID | |
savingClientVclokValue UInt32 | |
saveTimeMicroseconds UInt64 | |
rtcBrkEditToSaveTimeMicroseconds UInt64 | |
editToSaveTimeMicroseconds UInt64 | |
firstRtcBrkEditId GUID | |
firstEditId GUID | |
minOcsAutoSaveIntervalMicroseconds UInt64 | |
idleAutoSaveDelayTimeMicroseconds UInt64 | |
autoSaveIdleToSaveTimeMicroseconds UInt64 | |
deepSleepDurationMicroseconds UInt64 | |
saveActionGuid GUID |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "16",
"version": "5",
"level": "4",
"task": "1",
"opcode": "15",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
"savingClientVclokValue": "0",
"saveTimeMicroseconds": "0",
"rtcBrkEditToSaveTimeMicroseconds": "0",
"editToSaveTimeMicroseconds": "0",
"firstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
"firstEditId": "{00000000-0000-0000-0000-000000000000}",
"minOcsAutoSaveIntervalMicroseconds": "0",
"idleAutoSaveDelayTimeMicroseconds": "0",
"autoSaveIdleToSaveTimeMicroseconds": "0",
"deepSleepDurationMicroseconds": "0",
"saveActionGuid": "{00000000-0000-0000-0000-000000000000}"
},
"message": ""
}
Event ID 18: tskFormsDocHasFormsField
#Fields #
| Name | Description |
|---|---|
fDocHasFormsField Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "18",
"version": "0",
"level": "4",
"task": "41",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fDocHasFormsField": "false"
},
"message": ""
}
Event ID 20: tskInvalTrashWwdPages_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
pdod Pointer | |
dk UnicodeString | |
cpFirst Int32 | |
cpLim Int32 | |
grftr UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "20",
"version": "1",
"level": "5",
"task": "6",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:52:32.892257500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"pdod": "0x1FF3C67AD60",
"dk": "Doc",
"cpFirst": "-1",
"cpLim": "-1",
"grftr": " 1"
},
"message": ""
}
Event ID 21: tskInvalInvalDoc
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
dk UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "21",
"version": "0",
"level": "5",
"task": "6",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": ""
},
"message": ""
}
Event ID 22: tskInvalInvalCp
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
dk UnicodeString | |
cpFirst Int32 | |
dcp Int32 | |
grfef_low UInt32 | |
grfef_high UInt32 | |
grfef2_low UInt32 | |
grfef2_high UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "22",
"version": "0",
"level": "5",
"task": "6",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"dk": "",
"cpFirst": "0",
"dcp": "0",
"grfef_low": "0",
"grfef_high": "0",
"grfef2_low": "0",
"grfef2_high": "0"
},
"message": ""
}
Event ID 23: tskInvalInvalRegion
#Fields #
| Name | Description |
|---|---|
drk UnicodeString | |
Bounding Box UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "23",
"version": "0",
"level": "5",
"task": "6",
"opcode": "13",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "",
"Bounding Box": ""
},
"message": ""
}
Event ID 24: tskInvalInvalRegionVerbose
#Fields #
| Name | Description |
|---|---|
drk UnicodeString | |
Bounding Box UnicodeString | |
Rectangles UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "24",
"version": "0",
"level": "50",
"task": "6",
"opcode": "14",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:51:50.468738700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"drk": "DirtyAll DR",
"Bounding Box": "(733, 163)+[83 x 33]\n",
"Rectangles": "(733, 163)+[83 x 33]\n"
},
"message": ""
}
Event ID 25: tskInvalInvalCpDisp_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
pdod Pointer | |
dk UnicodeString | |
cpFirst Int32 | |
dcp Int32 | |
fNoLayoutChange Boolean | |
fSelectionChange Boolean | |
fUpdateArtvNVersion Boolean | |
fDirtyMtxi Boolean | |
grfef_low UInt32 | |
grfef_high UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "25",
"version": "1",
"level": "50",
"task": "6",
"opcode": "15",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:56:14.893026300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"pdod": "0x1FF3C67AD60",
"dk": "Doc",
"cpFirst": "287",
"dcp": "4",
"fNoLayoutChange": "false",
"fSelectionChange": "false",
"fUpdateArtvNVersion": "false",
"fDirtyMtxi": "false",
"grfef_low": " 0",
"grfef_high": " 0"
},
"message": ""
}
Event ID 26: tskFileNewAutoCreateEventHandlerStart_V2
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
AutoCreateEventHandler UInt32 | |
tSucceeded Int32 | |
fDocRenamed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "26",
"version": "2",
"level": "4",
"task": "5",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 27: tskFileNewAutoCreateEventHandlerUpdate_V2
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
AutoCreateEventHandler UInt32 | |
tSucceeded Int32 | |
fDocRenamed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "27",
"version": "2",
"level": "4",
"task": "5",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 28: tskFileNewAutoCreateEventHandlerEnd_V2
#Fields #
| Name | Description |
|---|---|
Tag UInt32 | |
pdod Pointer | |
AutoCreateEventHandler UInt32 | |
tSucceeded Int32 | |
fDocRenamed Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "28",
"version": "2",
"level": "4",
"task": "5",
"opcode": "13",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Tag": "0",
"pdod": "0x0",
"AutoCreateEventHandler": "0",
"tSucceeded": "0",
"fDocRenamed": "false"
},
"message": ""
}
Event ID 30: tskCoauthUndoCoauthUndoAttemptUndoWithConflict_V1
#Fields #
| Name | Description |
|---|---|
Reason for Conflict UInt32 | |
fciUser UInt32 | |
fciCoauth UInt32 | |
User CA type UInt32 | |
camoUser.cp UInt32 | |
camoUser.dcpOld UInt32 | |
camoUser.dcpNew UInt32 | |
camoCoauth.cp UInt32 | |
camoCoauth.dcpOld UInt32 | |
camoCoauth.dcpNew UInt32 | |
fUndo Boolean | |
fRepeat Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30",
"version": "1",
"level": "4",
"task": "4",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Reason for Conflict": "0",
"fciUser": "0",
"fciCoauth": "0",
"User CA type": "0",
"camoUser.cp": "0",
"camoUser.dcpOld": "0",
"camoUser.dcpNew": "0",
"camoCoauth.cp": "0",
"camoCoauth.dcpOld": "0",
"camoCoauth.dcpNew": "0",
"fUndo": "false",
"fRepeat": "false"
},
"message": ""
}
Event ID 31: tskCoauthUndoCoauthUndoDeleteDomoRangeError
#Fields #
| Name | Description |
|---|---|
ETW_TrackbackTag UInt32 | |
IdomoMacUsk UInt32 | |
idomoUndoLim UInt32 | |
idomoRedoLim UInt32 | |
idomoFirst UInt32 | |
cdomo UInt32 | |
UAD.fci UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "31",
"version": "0",
"level": "2",
"task": "4",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ETW_TrackbackTag": "0",
"IdomoMacUsk": "0",
"idomoUndoLim": "0",
"idomoRedoLim": "0",
"idomoFirst": "0",
"cdomo": "0",
"UAD.fci": "0"
},
"message": ""
}
Event ID 100: tskInvalUpdateInvalidWwd_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
fPrivateInvalRgn Boolean | |
Sum of Pixel Count for Rects UInt32 | |
Bounding Box Pixel Count UInt32 | |
Rectangles UnicodeString | |
Bounding Box UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
"event_source_name": "",
"event_id": "100",
"version": "1",
"level": "50",
"task": "6",
"opcode": "16",
"keywords": 9223372036854775936,
"time_created": "2026-03-14T21:51:50.468726700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x1FF3BF2B670",
"fPrivateInvalRgn": "true",
"Sum of Pixel Count for Rects": "0xAB3",
"Bounding Box Pixel Count": "0xAB3",
"Rectangles": "(661, 180)+[83 x 33]\n",
"Bounding Box": "(661, 180)+[83 x 33]\n"
},
"message": ""
}
Event ID 101: tskInvalRequestPprUpdate_V1
#Fields #
| Name | Description |
|---|---|
pwwd Pointer | |
ppr Pointer | |
grfrpu UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "101",
"version": "1",
"level": "5",
"task": "6",
"opcode": "17",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pwwd": "0x0",
"ppr": "0x0",
"grfrpu": "0"
},
"message": ""
}
Event ID 102
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
LinkedInResumeClassification UInt32 | |
JobTitleMatch Boolean | |
JobCityMatch Boolean | |
JobStateMatch Boolean | |
JobZipCodeMatch Boolean | |
AuthorMatch Boolean |
Event ID 104: tskMailMergeMailMergeStarted
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "104",
"version": "0",
"level": "4",
"task": "8",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 105: tskMailMergeMailMergeFinished
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "105",
"version": "0",
"level": "4",
"task": "8",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 155
#Event ID 156
#Event ID 250: tskFastCoauthFastCoauthChangeReceived
#Fields #
| Name | Description |
|---|---|
xszText UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "250",
"version": "0",
"level": "4",
"task": "64",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"xszText": ""
},
"message": ""
}
Event ID 251: tskFastCoauthFastCoauthDocumentReplicated
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "251",
"version": "0",
"level": "4",
"task": "64",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 300: tskEasyBibCalloutEasyBibPastedFrom
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "300",
"version": "0",
"level": "4",
"task": "65",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 301: tskEasyBibCalloutEasyBibRibbonOrChunkHidden
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "301",
"version": "0",
"level": "4",
"task": "65",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 302: tskEasyBibCalloutEasyBibAddinBlocked
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "302",
"version": "0",
"level": "4",
"task": "65",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 303: tskEasyBibCalloutEasyBibCalloutDisplayed
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "303",
"version": "0",
"level": "4",
"task": "65",
"opcode": "13",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 304: tskEasyBibCalloutEasyBibCalloutDismissClicked
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "304",
"version": "0",
"level": "4",
"task": "65",
"opcode": "14",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 305: tskEasyBibCalloutEasyBibCalloutLaunchClicked
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "305",
"version": "0",
"level": "4",
"task": "65",
"opcode": "15",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 306: tskEasyBibCalloutEasyBibCalloutOutsideClicked
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "306",
"version": "0",
"level": "4",
"task": "65",
"opcode": "16",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 307: tskEasyBibCalloutEasyBibStoreClicked
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "307",
"version": "0",
"level": "4",
"task": "65",
"opcode": "17",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 308: tskEasyBibCalloutEasyBibAddinInsertedFromCallout
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "308",
"version": "0",
"level": "4",
"task": "65",
"opcode": "18",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 309: tskEasyBibCalloutEasyBibAddinLoadedBefore
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "309",
"version": "0",
"level": "4",
"task": "65",
"opcode": "19",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 310: tskEasyBibCalloutEasyBibFeatureOff
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "310",
"version": "0",
"level": "4",
"task": "65",
"opcode": "20",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 311: tskEasyBibCalloutEasyBibNotEnglish
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "311",
"version": "0",
"level": "4",
"task": "65",
"opcode": "21",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 312: tskEasyBibCalloutEasyBibDisplayedManyTimes
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "312",
"version": "0",
"level": "4",
"task": "65",
"opcode": "22",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 313: tskEasyBibCalloutEasyBibSendStatusEvent
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "313",
"version": "0",
"level": "4",
"task": "65",
"opcode": "23",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 351: tskFocusModeEntryPoint
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
EntryType UInt32 | |
ViewType UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "351",
"version": "0",
"level": "4",
"task": "66",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"EntryType": "0",
"ViewType": ""
},
"message": ""
}
Event ID 352: tskFocusModeExitPoint
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
ExitType UInt32 | |
BackgroundColor UInt32 | |
BackgroundType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "352",
"version": "0",
"level": "4",
"task": "67",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"ExitType": "0",
"BackgroundColor": "0",
"BackgroundType": "0"
},
"message": ""
}
Event ID 361: tskAddinMonitorAddinMonitorIdleStart
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "361",
"version": "0",
"level": "5",
"task": "68",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 362: tskAddinMonitorAddinMonitorIdleStop
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "362",
"version": "0",
"level": "5",
"task": "68",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 363: tskAddinMonitorAddinMonitorNotifyUserResult
#Fields #
| Name | Description |
|---|---|
NotifyUserResult UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "363",
"version": "0",
"level": "4",
"task": "68",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"NotifyUserResult": "0"
},
"message": ""
}
Event ID 364: tskAddinMonitorAddinMonitorShowNotificationResult
#Fields #
| Name | Description |
|---|---|
ShowNotificationResult UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "364",
"version": "0",
"level": "4",
"task": "68",
"opcode": "13",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ShowNotificationResult": "0"
},
"message": ""
}
Event ID 365: tskAddinMonitorAddinMonitorInit
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "365",
"version": "0",
"level": "4",
"task": "68",
"opcode": "14",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 366: tskAddinMonitorAddinMonitorInitLoadBoot
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "366",
"version": "0",
"level": "5",
"task": "68",
"opcode": "15",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 367: tskAddinMonitorAddinMonitorInitLoadConnect
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "367",
"version": "0",
"level": "5",
"task": "68",
"opcode": "16",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 368: tskAddinMonitorAddinMonitorEnumReg
#Fields #
| Name | Description |
|---|---|
dwIndex UInt32 | |
name UnicodeString | |
dwType UInt32 | |
cb UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "368",
"version": "0",
"level": "5",
"task": "68",
"opcode": "17",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwIndex": "0",
"name": "",
"dwType": "0",
"cb": "0"
},
"message": ""
}
Event ID 369: tskAddinMonitorAddinMonitorDeserializeCValue
#Fields #
| Name | Description |
|---|---|
dwCValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "369",
"version": "0",
"level": "5",
"task": "68",
"opcode": "18",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwCValue": "0"
},
"message": ""
}
Event ID 370: tskAddinMonitorAddinMonitorDeserializeValue
#Fields #
| Name | Description |
|---|---|
dwValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "370",
"version": "0",
"level": "5",
"task": "68",
"opcode": "19",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwValue": "0"
},
"message": ""
}
Event ID 371: tskAddinMonitorAddinMonitorGateBizbar
#Fields #
| Name | Description |
|---|---|
GateValue Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "371",
"version": "0",
"level": "5",
"task": "68",
"opcode": "20",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 372: tskAddinMonitorAddinMonitorGateOM
#Fields #
| Name | Description |
|---|---|
GateValue Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "372",
"version": "0",
"level": "5",
"task": "68",
"opcode": "21",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 373: tskAddinMonitorAddinMonitorShouldNotify
#Fields #
| Name | Description |
|---|---|
secBootLengthThreshold UInt32 | |
pctBootPercentageThreshold UInt32 | |
AddinScenario UInt32 | |
time UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "373",
"version": "0",
"level": "4",
"task": "68",
"opcode": "22",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"secBootLengthThreshold": "0",
"pctBootPercentageThreshold": "0",
"AddinScenario": "0",
"time": "0"
},
"message": ""
}
Event ID 374: tskAddinMonitorAddinMonitorDisplayBizbar
#Fields #
| Name | Description |
|---|---|
name UnicodeString | |
fDisplay Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "374",
"version": "0",
"level": "5",
"task": "68",
"opcode": "23",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"fDisplay": "false"
},
"message": ""
}
Event ID 375: tskAddinMonitorAddinMonitorSlowest
#Fields #
| Name | Description |
|---|---|
name UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "375",
"version": "0",
"level": "5",
"task": "68",
"opcode": "24",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": ""
},
"message": ""
}
Event ID 376: tskAddinMonitorAddinMonitorDialogShow
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "376",
"version": "0",
"level": "4",
"task": "68",
"opcode": "25",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 377: tskAddinMonitorAddinMonitorDialogAddPadii_V1
#Fields #
| Name | Description |
|---|---|
name UnicodeString | |
FIsCOMAddin Boolean | |
FIsGroupPolicyDisabled Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "377",
"version": "1",
"level": "5",
"task": "68",
"opcode": "26",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"FIsCOMAddin": "false",
"FIsGroupPolicyDisabled": "false"
},
"message": ""
}
Event ID 378: tskAddinMonitorAddinMonitorDialogOnEvent
#Fields #
| Name | Description |
|---|---|
name UnicodeString | |
SelectedAction UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "378",
"version": "0",
"level": "4",
"task": "68",
"opcode": "27",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"name": "",
"SelectedAction": ""
},
"message": ""
}
Event ID 379: tskAddinMonitorAddinMonitorDwConnect
#Fields #
| Name | Description |
|---|---|
dwConnect UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "379",
"version": "0",
"level": "5",
"task": "68",
"opcode": "28",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwConnect": "0"
},
"message": ""
}
Event ID 380: tskAddinMonitorAddinMonitorDwPolicy
#Fields #
| Name | Description |
|---|---|
dwPolicy UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "380",
"version": "0",
"level": "5",
"task": "68",
"opcode": "29",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwPolicy": "0"
},
"message": ""
}
Event ID 381: tskAddinMonitorAddinMonitorGateVBA
#Fields #
| Name | Description |
|---|---|
GateValue Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "381",
"version": "0",
"level": "5",
"task": "68",
"opcode": "30",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"GateValue": "false"
},
"message": ""
}
Event ID 441: tskDragDropDragImageSize
#Fields #
| Name | Description |
|---|---|
areaPoints Float |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "441",
"version": "0",
"level": "4",
"task": "70",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"areaPoints": "0.0"
},
"message": ""
}
Event ID 451: tskOleAutoActivationOleAutoActivatedOnOpen
#Fields #
| Name | Description |
|---|---|
pdod Pointer | |
fRTF Boolean | |
callType UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "451",
"version": "0",
"level": "4",
"task": "71",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"pdod": "0x0",
"fRTF": "false",
"callType": "0"
},
"message": ""
}
Event ID 461: tskEditAggregationFromSave
#Fields #
| Name | Description |
|---|---|
changes UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "461",
"version": "0",
"level": "4",
"task": "72",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"changes": "0"
},
"message": ""
}
Event ID 462: tskEditAggregationFromMerge
#Fields #
| Name | Description |
|---|---|
changes UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "462",
"version": "0",
"level": "4",
"task": "73",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"changes": "0"
},
"message": ""
}
Event ID 463: tskQMUnsafeOpSource
#Fields #
| Name | Description |
|---|---|
mrtTag UInt32 | |
source UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "463",
"version": "0",
"level": "4",
"task": "74",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"mrtTag": "0",
"source": "0"
},
"message": ""
}
Event ID 464: tskQMUnsafeProperty
#Fields #
| Name | Description |
|---|---|
property UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "464",
"version": "0",
"level": "4",
"task": "75",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"property": "0"
},
"message": ""
}
Event ID 471: task_0
#Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "471",
"version": "0",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 472: task_0472
#Fields #
| Name | Description |
|---|---|
CountOfRecipients UInt64 | |
LinkPermissionType UInt32 | |
CountOfRecipientsOptimizedAway UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "472",
"version": "0",
"level": "4",
"task": "0",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CountOfRecipients": "0",
"LinkPermissionType": "0",
"CountOfRecipientsOptimizedAway": "0"
},
"message": ""
}
Event ID 481: tskPerformanceProfilerJson
#Fields #
| Name | Description |
|---|---|
featureDwTag UInt32 | |
ProfilerModules UnicodeString | |
ProfilerSamples UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "481",
"version": "0",
"level": "5",
"task": "9",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"featureDwTag": "0",
"ProfilerModules": "",
"ProfilerSamples": ""
},
"message": ""
}
Event ID 2000: task_0PCODEERRORpcodeError_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2000",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2001: task_0PCODEERRORpcodeError2001_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2001",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2002: task_0PCODEERRORpcodeError2002_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2002",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2003: task_0PCODEERRORpcodeError2003_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2003",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2004: task_0PCODEERRORpcodeError2004_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2004",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2005: task_0PCODEERRORpcodeError2005_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2005",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2006: task_0PCODEERRORpcodeError2006_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2006",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2007: task_0PCODEERRORpcodeError2007_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2007",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2008: task_0PCODEERRORpcodeError2008_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2008",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2009: task_0PCODEERRORpcodeError2009_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2009",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2010: task_0PCODEERRORpcodeError2010_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2010",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2011: task_0PCODEERRORpcodeError2011_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2011",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2012: task_0PCODEERRORpcodeError2012_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2012",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2013: task_0PCODEERRORpcodeError2013_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2013",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2014: task_0PCODEERRORpcodeError2014_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2014",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2015: task_0PCODEERRORpcodeError2015_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2015",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2016: task_0PCODEERRORpcodeError2016_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2016",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2017: task_0PCODEERRORpcodeError2017_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2017",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2018: task_0PCODEERRORpcodeError2018_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2018",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2019: task_0PCODEERRORpcodeError2019_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2019",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2020: task_0PCODEERRORpcodeError2020_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2020",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2021: task_0PCODEERRORpcodeError2021_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2021",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2022: task_0PCODEERRORpcodeError2022_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2022",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2023: task_0PCODEERRORpcodeError2023_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2023",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2024: task_0PCODEERRORpcodeError2024_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2024",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2025: task_0PCODEERRORpcodeError2025_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2025",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2026: task_0PCODEERRORpcodeError2026_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2026",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2027: task_0PCODEERRORpcodeError2027_V1
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2027",
"version": "1",
"level": "2",
"task": "0",
"opcode": "10",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"Pdod": "0x0",
"VoidPtr": "0x0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2028
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Event ID 2029
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
Pdod Pointer | |
VoidPtr Pointer | |
ETW_TrackbackTag UInt32 |
Event ID 2032: task_0PCODEWARNINGpcodeWarning
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2032",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2033: task_0PCODEWARNINGpcodeWarning2033
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2033",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2034: task_0PCODEWARNINGpcodeWarning2034
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2034",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2035: task_0PCODEWARNINGpcodeWarning2035
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2035",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2036: task_0PCODEWARNINGpcodeWarning2036
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2036",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2037: task_0PCODEWARNINGpcodeWarning2037
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2037",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2038: task_0PCODEWARNINGpcodeWarning2038
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2038",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2039: task_0PCODEWARNINGpcodeWarning2039
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2039",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2040: task_0PCODEWARNINGpcodeWarning2040
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2040",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2041: task_0PCODEWARNINGpcodeWarning2041
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2041",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2042: task_0PCODEWARNINGpcodeWarning2042
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2042",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2043: task_0PCODEWARNINGpcodeWarning2043
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2043",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2044: task_0PCODEWARNINGpcodeWarning2044
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2044",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2045: task_0PCODEWARNINGpcodeWarning2045
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2045",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2046: task_0PCODEWARNINGpcodeWarning2046
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2046",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2047: task_0PCODEWARNINGpcodeWarning2047
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2047",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2048: task_0PCODEWARNINGpcodeWarning2048
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2048",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2049: task_0PCODEWARNINGpcodeWarning2049
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2049",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2050: task_0PCODEWARNINGpcodeWarning2050
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2050",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2051: task_0PCODEWARNINGpcodeWarning2051
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2051",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2052: task_0PCODEWARNINGpcodeWarning2052
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2052",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2053: task_0PCODEWARNINGpcodeWarning2053
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2053",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2054: task_0PCODEWARNINGpcodeWarning2054
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2054",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2055: task_0PCODEWARNINGpcodeWarning2055
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2055",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2056: task_0PCODEWARNINGpcodeWarning2056
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2056",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2057: task_0PCODEWARNINGpcodeWarning2057
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2057",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2058: task_0PCODEWARNINGpcodeWarning2058
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2058",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2059: task_0PCODEWARNINGpcodeWarning2059
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2059",
"version": "0",
"level": "3",
"task": "0",
"opcode": "11",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Message": "",
"InfoString": "",
"ErrIdOptional": "0",
"HROptional": "0",
"InfoOptDeci": "0",
"InfoOptHex": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2060
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Event ID 2061
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
InfoString UnicodeString | |
ErrIdOptional Int32 | |
HROptional Int32 | |
InfoOptDeci UInt64 | |
InfoOptHex UInt64 | |
ETW_TrackbackTag UInt32 |
Event ID 2064: task_0PCODEINFORMATIONALpcodeInformational
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2064",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2065: task_0PCODEINFORMATIONALpcodeInformational2065
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2065",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2066: task_0PCODEINFORMATIONALpcodeInformational2066
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2066",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2067: task_0PCODEINFORMATIONALpcodeInformational2067
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2067",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2068: task_0PCODEINFORMATIONALpcodeInformational2068
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2068",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2069: task_0PCODEINFORMATIONALpcodeInformational2069
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2069",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2070: task_0PCODEINFORMATIONALpcodeInformational2070
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2070",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2071: task_0PCODEINFORMATIONALpcodeInformational2071
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2071",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2072: task_0PCODEINFORMATIONALpcodeInformational2072
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2072",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2073: task_0PCODEINFORMATIONALpcodeInformational2073
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2073",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2074: task_0PCODEINFORMATIONALpcodeInformational2074
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2074",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2075: task_0PCODEINFORMATIONALpcodeInformational2075
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2075",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2076: task_0PCODEINFORMATIONALpcodeInformational2076
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2076",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2077: task_0PCODEINFORMATIONALpcodeInformational2077
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2077",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2078: task_0PCODEINFORMATIONALpcodeInformational2078
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2078",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2079: task_0PCODEINFORMATIONALpcodeInformational2079
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2079",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2080: task_0PCODEINFORMATIONALpcodeInformational2080
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2080",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2081: task_0PCODEINFORMATIONALpcodeInformational2081
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2081",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2082: task_0PCODEINFORMATIONALpcodeInformational2082
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2082",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2083: task_0PCODEINFORMATIONALpcodeInformational2083
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2083",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2084: task_0PCODEINFORMATIONALpcodeInformational2084
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2084",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2085: task_0PCODEINFORMATIONALpcodeInformational2085
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2085",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2086: task_0PCODEINFORMATIONALpcodeInformational2086
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2086",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2087: task_0PCODEINFORMATIONALpcodeInformational2087
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2087",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2088: task_0PCODEINFORMATIONALpcodeInformational2088
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2088",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2089: task_0PCODEINFORMATIONALpcodeInformational2089
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2089",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2090: task_0PCODEINFORMATIONALpcodeInformational2090
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2090",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2091: task_0PCODEINFORMATIONALpcodeInformational2091
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "2091",
"version": "0",
"level": "4",
"task": "0",
"opcode": "12",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"InfoOptional1": "0",
"InfoOptional2": "0",
"InfoOptional3": "0",
"InfoOptional4": "0",
"ETW_TrackbackTag": "0"
},
"message": ""
}
Event ID 2092
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Event ID 2093
#Fields #
| Name | Description |
|---|---|
InfoOptional1 UInt64 | |
InfoOptional2 UInt64 | |
InfoOptional3 UInt64 | |
InfoOptional4 UInt64 | |
ETW_TrackbackTag UInt32 |
Event ID 30579: tskOCSB_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30579",
"version": "1",
"level": "1",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30580: tskOCSB30580_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30580",
"version": "1",
"level": "2",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30581: tskOCSB30581_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30581",
"version": "1",
"level": "3",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30582: tskOCSB30582_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30582",
"version": "1",
"level": "4",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30583: tskOCSB30583_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30583",
"version": "1",
"level": "5",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30584: tskOCSB30584_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30584",
"version": "1",
"level": "16",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30585: tskOCSB30585_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30585",
"version": "1",
"level": "50",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30586: tskOCSB30586_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30586",
"version": "1",
"level": "100",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30587: tskOCSB30587_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30587",
"version": "1",
"level": "200",
"task": "1065",
"opcode": "0",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30588: tskCoauthUndo_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30588",
"version": "1",
"level": "1",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30589: tskCoauthUndo30589_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30589",
"version": "1",
"level": "2",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30590: tskCoauthUndo30590_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30590",
"version": "1",
"level": "3",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30591: tskCoauthUndo30591_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30591",
"version": "1",
"level": "4",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30592: tskCoauthUndo30592_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30592",
"version": "1",
"level": "5",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30593: tskCoauthUndo30593_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30593",
"version": "1",
"level": "16",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30594: tskCoauthUndo30594_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30594",
"version": "1",
"level": "50",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30595: tskCoauthUndo30595_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30595",
"version": "1",
"level": "100",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30596: tskCoauthUndo30596_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30596",
"version": "1",
"level": "200",
"task": "4",
"opcode": "0",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30597: tskHashtags_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30597",
"version": "1",
"level": "1",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30598: tskHashtags30598_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30598",
"version": "1",
"level": "2",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30599: tskHashtags30599_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30599",
"version": "1",
"level": "3",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30600: tskHashtags30600_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30600",
"version": "1",
"level": "4",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30601: tskHashtags30601_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30601",
"version": "1",
"level": "5",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30602: tskHashtags30602_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30602",
"version": "1",
"level": "16",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30603: tskHashtags30603_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30603",
"version": "1",
"level": "50",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30604: tskHashtags30604_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30604",
"version": "1",
"level": "100",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30605: tskHashtags30605_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30605",
"version": "1",
"level": "200",
"task": "2",
"opcode": "0",
"keywords": 9223372036854775812,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30606: tskEmojis_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30606",
"version": "1",
"level": "1",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30607: tskEmojis30607_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30607",
"version": "1",
"level": "2",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30608: tskEmojis30608_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30608",
"version": "1",
"level": "3",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30609: tskEmojis30609_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30609",
"version": "1",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30610: tskEmojis30610_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30610",
"version": "1",
"level": "5",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30611: tskEmojis30611_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30611",
"version": "1",
"level": "16",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30612: tskEmojis30612_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30612",
"version": "1",
"level": "50",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30613: tskEmojis30613_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30613",
"version": "1",
"level": "100",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30614: tskEmojis30614_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30614",
"version": "1",
"level": "200",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30615: tskAsyncEdit_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30615",
"version": "1",
"level": "1",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30616: tskAsyncEdit30616_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30616",
"version": "1",
"level": "2",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30617: tskAsyncEdit30617_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30617",
"version": "1",
"level": "3",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30618: tskAsyncEdit30618_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30618",
"version": "1",
"level": "4",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30619: tskAsyncEdit30619_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30619",
"version": "1",
"level": "5",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30620: tskAsyncEdit30620_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30620",
"version": "1",
"level": "16",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30621: tskAsyncEdit30621_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30621",
"version": "1",
"level": "50",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30622: tskAsyncEdit30622_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30622",
"version": "1",
"level": "100",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30623: tskAsyncEdit30623_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30623",
"version": "1",
"level": "200",
"task": "1069",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30624: tskForms_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30624",
"version": "1",
"level": "1",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30625: tskForms30625_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30625",
"version": "1",
"level": "2",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30626: tskForms30626_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30626",
"version": "1",
"level": "3",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30627: tskForms30627_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30627",
"version": "1",
"level": "4",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30628: tskForms30628_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30628",
"version": "1",
"level": "5",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30629: tskForms30629_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30629",
"version": "1",
"level": "16",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30630: tskForms30630_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30630",
"version": "1",
"level": "50",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30631: tskForms30631_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30631",
"version": "1",
"level": "100",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30632: tskForms30632_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30632",
"version": "1",
"level": "200",
"task": "41",
"opcode": "0",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30633: tskFileNew_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30633",
"version": "1",
"level": "1",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30634: tskFileNew30634_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30634",
"version": "1",
"level": "2",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30635: tskFileNew30635_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30635",
"version": "1",
"level": "3",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30636: tskFileNew30636_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30636",
"version": "1",
"level": "4",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30637: tskFileNew30637_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30637",
"version": "1",
"level": "5",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30638: tskFileNew30638_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30638",
"version": "1",
"level": "16",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30639: tskFileNew30639_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30639",
"version": "1",
"level": "50",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30640: tskFileNew30640_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30640",
"version": "1",
"level": "100",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30641: tskFileNew30641_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30641",
"version": "1",
"level": "200",
"task": "5",
"opcode": "0",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30642: tskInval_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30642",
"version": "1",
"level": "1",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30643: tskInval30643_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30643",
"version": "1",
"level": "2",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30644: tskInval30644_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30644",
"version": "1",
"level": "3",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30645: tskInval30645_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30645",
"version": "1",
"level": "4",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30646: tskInval30646_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30646",
"version": "1",
"level": "5",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30647: tskInval30647_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30647",
"version": "1",
"level": "16",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30648: tskInval30648_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30648",
"version": "1",
"level": "50",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30649: tskInval30649_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30649",
"version": "1",
"level": "100",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30650: tskInval30650_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30650",
"version": "1",
"level": "200",
"task": "6",
"opcode": "0",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30651: tskSuggestionService_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30651",
"version": "1",
"level": "1",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30652: tskSuggestionService30652_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30652",
"version": "1",
"level": "2",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30653: tskSuggestionService30653_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30653",
"version": "1",
"level": "3",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30654: tskSuggestionService30654_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30654",
"version": "1",
"level": "4",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30655: tskSuggestionService30655_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30655",
"version": "1",
"level": "5",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30656: tskSuggestionService30656_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30656",
"version": "1",
"level": "16",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30657: tskSuggestionService30657_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30657",
"version": "1",
"level": "50",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30658: tskSuggestionService30658_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30658",
"version": "1",
"level": "100",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30659: tskSuggestionService30659_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30659",
"version": "1",
"level": "200",
"task": "1073",
"opcode": "0",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30660: tskDocTiling_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30660",
"version": "1",
"level": "1",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30661: tskDocTiling30661_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30661",
"version": "1",
"level": "2",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30662: tskDocTiling30662_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30662",
"version": "1",
"level": "3",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30663: tskDocTiling30663_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30663",
"version": "1",
"level": "4",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30664: tskDocTiling30664_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30664",
"version": "1",
"level": "5",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30665: tskDocTiling30665_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30665",
"version": "1",
"level": "16",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30666: tskDocTiling30666_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30666",
"version": "1",
"level": "50",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30667: tskDocTiling30667_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30667",
"version": "1",
"level": "100",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30668: tskDocTiling30668_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30668",
"version": "1",
"level": "200",
"task": "1074",
"opcode": "0",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30669: tskOLE_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30669",
"version": "1",
"level": "1",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30670: tskOLE30670_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30670",
"version": "1",
"level": "2",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30671: tskOLE30671_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30671",
"version": "1",
"level": "3",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30672: tskOLE30672_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30672",
"version": "1",
"level": "4",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30673: tskOLE30673_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30673",
"version": "1",
"level": "5",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30674: tskOLE30674_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30674",
"version": "1",
"level": "16",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30675: tskOLE30675_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30675",
"version": "1",
"level": "50",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30676: tskOLE30676_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30676",
"version": "1",
"level": "100",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30677: tskOLE30677_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30677",
"version": "1",
"level": "200",
"task": "1075",
"opcode": "0",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30678: tskMailMerge_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30678",
"version": "1",
"level": "1",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30679: tskMailMerge30679_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30679",
"version": "1",
"level": "2",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30680: tskMailMerge30680_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30680",
"version": "1",
"level": "3",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30681: tskMailMerge30681_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30681",
"version": "1",
"level": "4",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30682: tskMailMerge30682_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30682",
"version": "1",
"level": "5",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30683: tskMailMerge30683_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30683",
"version": "1",
"level": "16",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30684: tskMailMerge30684_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30684",
"version": "1",
"level": "50",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30685: tskMailMerge30685_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30685",
"version": "1",
"level": "100",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30686: tskMailMerge30686_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30686",
"version": "1",
"level": "200",
"task": "8",
"opcode": "0",
"keywords": 9223372036854779904,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30687: tskLanguage_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30687",
"version": "1",
"level": "1",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30688: tskLanguage30688_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30688",
"version": "1",
"level": "2",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30689: tskLanguage30689_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30689",
"version": "1",
"level": "3",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30690: tskLanguage30690_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30690",
"version": "1",
"level": "4",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30691: tskLanguage30691_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30691",
"version": "1",
"level": "5",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30692: tskLanguage30692_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30692",
"version": "1",
"level": "16",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30693: tskLanguage30693_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30693",
"version": "1",
"level": "50",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30694: tskLanguage30694_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30694",
"version": "1",
"level": "100",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30695: tskLanguage30695_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30695",
"version": "1",
"level": "200",
"task": "1077",
"opcode": "0",
"keywords": 9223372036854784000,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30696: tskFlashEdits_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30696",
"version": "1",
"level": "1",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30697: tskFlashEdits30697_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30697",
"version": "1",
"level": "2",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30698: tskFlashEdits30698_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30698",
"version": "1",
"level": "3",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30699: tskFlashEdits30699_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30699",
"version": "1",
"level": "4",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30700: tskFlashEdits30700_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30700",
"version": "1",
"level": "5",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30701: tskFlashEdits30701_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30701",
"version": "1",
"level": "16",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30702: tskFlashEdits30702_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30702",
"version": "1",
"level": "50",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30703: tskFlashEdits30703_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30703",
"version": "1",
"level": "100",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30704: tskFlashEdits30704_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30704",
"version": "1",
"level": "200",
"task": "1078",
"opcode": "0",
"keywords": 9223372036854808576,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30705: tskEasyBib_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30705",
"version": "1",
"level": "1",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30706: tskEasyBib30706_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30706",
"version": "1",
"level": "2",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30707: tskEasyBib30707_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30707",
"version": "1",
"level": "3",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30708: tskEasyBib30708_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30708",
"version": "1",
"level": "4",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30709: tskEasyBib30709_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30709",
"version": "1",
"level": "5",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30710: tskEasyBib30710_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30710",
"version": "1",
"level": "16",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30711: tskEasyBib30711_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30711",
"version": "1",
"level": "50",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30712: tskEasyBib30712_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30712",
"version": "1",
"level": "100",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30713: tskEasyBib30713_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30713",
"version": "1",
"level": "200",
"task": "1079",
"opcode": "0",
"keywords": 9223372036854841344,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30714: tskFastCoauth_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30714",
"version": "1",
"level": "1",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30715: tskFastCoauth30715_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30715",
"version": "1",
"level": "2",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30716: tskFastCoauth30716_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30716",
"version": "1",
"level": "3",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30717: tskFastCoauth30717_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30717",
"version": "1",
"level": "4",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30718: tskFastCoauth30718_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30718",
"version": "1",
"level": "5",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30719: tskFastCoauth30719_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30719",
"version": "1",
"level": "16",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30720: tskFastCoauth30720_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30720",
"version": "1",
"level": "50",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30721: tskFastCoauth30721_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30721",
"version": "1",
"level": "100",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30722: tskFastCoauth30722_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30722",
"version": "1",
"level": "200",
"task": "64",
"opcode": "0",
"keywords": 9223372036854906880,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30723: tskDigitalPrint_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30723",
"version": "1",
"level": "1",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30724: tskDigitalPrint30724_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30724",
"version": "1",
"level": "2",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30725: tskDigitalPrint30725_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30725",
"version": "1",
"level": "3",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30726: tskDigitalPrint30726_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30726",
"version": "1",
"level": "4",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30727: tskDigitalPrint30727_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30727",
"version": "1",
"level": "5",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30728: tskDigitalPrint30728_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30728",
"version": "1",
"level": "16",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30729: tskDigitalPrint30729_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30729",
"version": "1",
"level": "50",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30730: tskDigitalPrint30730_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30730",
"version": "1",
"level": "100",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30731: tskDigitalPrint30731_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30731",
"version": "1",
"level": "200",
"task": "1081",
"opcode": "0",
"keywords": 9223372036855037952,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30732: tskFocusMode_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30732",
"version": "1",
"level": "1",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30733: tskFocusMode30733_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30733",
"version": "1",
"level": "2",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30734: tskFocusMode30734_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30734",
"version": "1",
"level": "3",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30735: tskFocusMode30735_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30735",
"version": "1",
"level": "4",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30736: tskFocusMode30736_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30736",
"version": "1",
"level": "5",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30737: tskFocusMode30737_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30737",
"version": "1",
"level": "16",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30738: tskFocusMode30738_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30738",
"version": "1",
"level": "50",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30739: tskFocusMode30739_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30739",
"version": "1",
"level": "100",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30740: tskFocusMode30740_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30740",
"version": "1",
"level": "200",
"task": "1082",
"opcode": "0",
"keywords": 9223372036855300096,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30741: tskAsyncCoAuthoring_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30741",
"version": "1",
"level": "1",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30742: tskAsyncCoAuthoring30742_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30742",
"version": "1",
"level": "2",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30743: tskAsyncCoAuthoring30743_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30743",
"version": "1",
"level": "3",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30744: tskAsyncCoAuthoring30744_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30744",
"version": "1",
"level": "4",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30745: tskAsyncCoAuthoring30745_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30745",
"version": "1",
"level": "5",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30746: tskAsyncCoAuthoring30746_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30746",
"version": "1",
"level": "16",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30747: tskAsyncCoAuthoring30747_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30747",
"version": "1",
"level": "50",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30748: tskAsyncCoAuthoring30748_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30748",
"version": "1",
"level": "100",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30749: tskAsyncCoAuthoring30749_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30749",
"version": "1",
"level": "200",
"task": "1083",
"opcode": "0",
"keywords": 9223372036856872960,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30750: tskAddinMonitor_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30750",
"version": "1",
"level": "1",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30751: tskAddinMonitor30751_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30751",
"version": "1",
"level": "2",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30752: tskAddinMonitor30752_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30752",
"version": "1",
"level": "3",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30753: tskAddinMonitor30753_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30753",
"version": "1",
"level": "4",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30754: tskAddinMonitor30754_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30754",
"version": "1",
"level": "5",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30755: tskAddinMonitor30755_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30755",
"version": "1",
"level": "16",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30756: tskAddinMonitor30756_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30756",
"version": "1",
"level": "50",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30757: tskAddinMonitor30757_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30757",
"version": "1",
"level": "100",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30758: tskAddinMonitor30758_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30758",
"version": "1",
"level": "200",
"task": "68",
"opcode": "0",
"keywords": 9223372036858970112,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30759: tskAcronyms_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30759",
"version": "1",
"level": "1",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30760: tskAcronyms30760_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30760",
"version": "1",
"level": "2",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30761: tskAcronyms30761_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30761",
"version": "1",
"level": "3",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30762: tskAcronyms30762_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30762",
"version": "1",
"level": "4",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30763: tskAcronyms30763_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30763",
"version": "1",
"level": "5",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30764: tskAcronyms30764_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30764",
"version": "1",
"level": "16",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30765: tskAcronyms30765_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30765",
"version": "1",
"level": "50",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30766: tskAcronyms30766_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30766",
"version": "1",
"level": "100",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30767: tskAcronyms30767_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30767",
"version": "1",
"level": "200",
"task": "1085",
"opcode": "0",
"keywords": 9223372036863164416,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30768: tskRewrite_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30768",
"version": "1",
"level": "1",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30769: tskRewrite30769_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30769",
"version": "1",
"level": "2",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30770: tskRewrite30770_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30770",
"version": "1",
"level": "3",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30771: tskRewrite30771_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30771",
"version": "1",
"level": "4",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30772: tskRewrite30772_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30772",
"version": "1",
"level": "5",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30773: tskRewrite30773_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30773",
"version": "1",
"level": "16",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30774: tskRewrite30774_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30774",
"version": "1",
"level": "50",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30775: tskRewrite30775_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30775",
"version": "1",
"level": "100",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30776: tskRewrite30776_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30776",
"version": "1",
"level": "200",
"task": "1086",
"opcode": "0",
"keywords": 9223372036871553024,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30777: tskSmartLinks_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30777",
"version": "1",
"level": "1",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30778: tskSmartLinks30778_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30778",
"version": "1",
"level": "2",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30779: tskSmartLinks30779_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30779",
"version": "1",
"level": "3",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30780: tskSmartLinks30780_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30780",
"version": "1",
"level": "4",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30781: tskSmartLinks30781_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30781",
"version": "1",
"level": "5",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30782: tskSmartLinks30782_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30782",
"version": "1",
"level": "16",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30783: tskSmartLinks30783_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30783",
"version": "1",
"level": "50",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30784: tskSmartLinks30784_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30784",
"version": "1",
"level": "100",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30785: tskSmartLinks30785_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30785",
"version": "1",
"level": "200",
"task": "1087",
"opcode": "0",
"keywords": 9223372036888330240,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30786: tskDocumentTasks_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30786",
"version": "1",
"level": "1",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30787: tskDocumentTasks30787_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30787",
"version": "1",
"level": "2",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30788: tskDocumentTasks30788_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30788",
"version": "1",
"level": "3",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30789: tskDocumentTasks30789_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30789",
"version": "1",
"level": "4",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30790: tskDocumentTasks30790_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30790",
"version": "1",
"level": "5",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30791: tskDocumentTasks30791_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30791",
"version": "1",
"level": "16",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30792: tskDocumentTasks30792_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30792",
"version": "1",
"level": "50",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30793: tskDocumentTasks30793_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30793",
"version": "1",
"level": "100",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30794: tskDocumentTasks30794_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30794",
"version": "1",
"level": "200",
"task": "1088",
"opcode": "0",
"keywords": 9223372036921884672,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30795: tskShutdown_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30795",
"version": "1",
"level": "1",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30796: tskShutdown30796_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30796",
"version": "1",
"level": "2",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30797: tskShutdown30797_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30797",
"version": "1",
"level": "3",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30798: tskShutdown30798_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30798",
"version": "1",
"level": "4",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30799: tskShutdown30799_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30799",
"version": "1",
"level": "5",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30800: tskShutdown30800_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30800",
"version": "1",
"level": "16",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30801: tskShutdown30801_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30801",
"version": "1",
"level": "50",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30802: tskShutdown30802_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30802",
"version": "1",
"level": "100",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30803: tskShutdown30803_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30803",
"version": "1",
"level": "200",
"task": "1089",
"opcode": "0",
"keywords": 9223372036988993536,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30804: tskSidetrack_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30804",
"version": "1",
"level": "1",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30805: tskSidetrack30805_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30805",
"version": "1",
"level": "2",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30806: tskSidetrack30806_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30806",
"version": "1",
"level": "3",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30807: tskSidetrack30807_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30807",
"version": "1",
"level": "4",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30808: tskSidetrack30808_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30808",
"version": "1",
"level": "5",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30809: tskSidetrack30809_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30809",
"version": "1",
"level": "16",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30810: tskSidetrack30810_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30810",
"version": "1",
"level": "50",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30811: tskSidetrack30811_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30811",
"version": "1",
"level": "100",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30812: tskSidetrack30812_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30812",
"version": "1",
"level": "200",
"task": "1090",
"opcode": "0",
"keywords": 9223372037123211264,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30813: tskPerformance_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30813",
"version": "1",
"level": "1",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30814: tskPerformance30814_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30814",
"version": "1",
"level": "2",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30815: tskPerformance30815_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30815",
"version": "1",
"level": "3",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30816: tskPerformance30816_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30816",
"version": "1",
"level": "4",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30817: tskPerformance30817_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30817",
"version": "1",
"level": "5",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30818: tskPerformance30818_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30818",
"version": "1",
"level": "16",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30819: tskPerformance30819_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30819",
"version": "1",
"level": "50",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30820: tskPerformance30820_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30820",
"version": "1",
"level": "100",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30821: tskPerformance30821_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30821",
"version": "1",
"level": "200",
"task": "9",
"opcode": "0",
"keywords": 9223372037391646720,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30822: tskInfoProtection_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30822",
"version": "1",
"level": "1",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30823: tskInfoProtection30823_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30823",
"version": "1",
"level": "2",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30824: tskInfoProtection30824_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30824",
"version": "1",
"level": "3",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30825: tskInfoProtection30825_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30825",
"version": "1",
"level": "4",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30826: tskInfoProtection30826_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30826",
"version": "1",
"level": "5",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30827: tskInfoProtection30827_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30827",
"version": "1",
"level": "16",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30828: tskInfoProtection30828_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30828",
"version": "1",
"level": "50",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30829: tskInfoProtection30829_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30829",
"version": "1",
"level": "100",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Event ID 30830: tskInfoProtection30830_V1
#Fields #
| Name | Description |
|---|---|
tag UnicodeString | |
xsz UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Word3",
"guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
"event_source_name": "",
"event_id": "30830",
"version": "1",
"level": "200",
"task": "1092",
"opcode": "0",
"keywords": 9223372037928517632,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "WordChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "",
"xsz": ""
},
"message": ""
}
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID a1b69d49-2195-4f59-9d33-bdf30c0fe473
Defined in Program, which carries the event manifest.
Observed on:
- Win11-26200.6584, schema read from the registered manifest, binary version 16.0.17932.20790, captured 2026-06-02