detection.wiki

Microsoft-Windows-ApplicationExperience-LookupServiceTrigger

EventTitleChannelSampleRule
1task_0OperationalNN

Event ID 1: task_0

#
Channel
Operational

Fields #

NameDescription
AeLookupServieTrigger GUID

Provenance

ETW provider GUID 18f4a5fd-fd3b-40a5-8fc2-e5d261c5d02e

Defined in Microsoft-Windows-System-Events.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3932, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB