Microsoft-Windows-Defrag-Core
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | TierOptimizationStart | Debug | N | N |
| 2 | TierOptimizationStop | Debug | N | N |
| 3 | TierOptimizationStart3 | Debug | N | N |
| 4 | TierOptimizationStop4 | Debug | N | N |
| 5 | TierOptimizationStart5 | Debug | N | N |
| 6 | TierOptimizationStop6 | Debug | N | N |
| 7 | TierOptimizationStart7 | Debug | N | N |
| 8 | TierOptimizationStop8 | Debug | N | N |
| 9 | TierOptimizationStart9 | Debug | N | N |
| 10 | TierOptimizationStop10 | Debug | N | N |
| 11 | TierOptimizationStart11 | Debug | N | N |
| 12 | TierOptimizationStop12 | Debug | N | N |
Event ID 1: TierOptimizationStart
#Event ID 2: TierOptimizationStop
#Event ID 3: TierOptimizationStart3
#Event ID 4: TierOptimizationStop4
#Event ID 5: TierOptimizationStart5
#Event ID 6: TierOptimizationStop6
#Event ID 7: TierOptimizationStart7
#Event ID 8: TierOptimizationStop8
#Event ID 9: TierOptimizationStart9
#Event ID 10: TierOptimizationStop10
#Event ID 11: TierOptimizationStart11
#Event ID 12: TierOptimizationStop12
#Provenance
ETW provider GUID e3257c8c-c7cb-444f-9da0-5d92a2625289
Defined in defragres.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4893, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB