Microsoft-Windows-Devices-Query
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 100 | Event ID 100 | Performance | N | N |
| 101 | Event ID 101 | Performance | N | N |
| 102 | Event ID 102 | Performance | N | N |
| 200 | Event ID 200 | Performance | N | N |
| 201 | Event ID 201 | Performance | N | N |
| 202 | Event ID 202 | Performance | N | N |
| 300 | Event ID 300 | Performance | N | N |
| 301 | Event ID 301 | Performance | N | N |
| 302 | Event ID 302 | Performance | N | N |
Event ID 100
#Fields #
| Name | Description |
|---|---|
context Pointer | |
objectType UInt32 | |
queryType UInt32 | |
objectIds UnicodeString | |
queryFlags HexInt32 | |
preferredLanguages UnicodeString | |
requestedPropertiesCount UInt32 | |
filterLength UInt32 | |
extendedParametersLength UInt32 |
Event ID 200
#Fields #
| Name | Description |
|---|---|
context Pointer | |
objectType UInt32 | |
queryType UInt32 | |
objectIds UnicodeString | |
queryFlags HexInt32 | |
preferredLanguages UnicodeString | |
requestedPropertiesCount UInt32 | |
filterLength UInt32 | |
extendedParametersLength UInt32 |