detection.wiki

Microsoft-Windows-DevMgmt-UefiCsp

EventTitleChannelSampleRule
10FunctionName: enter.OperationalNN
11Function ErrorString failed with status ErrorCode.OperationalNN

Event ID 10: FunctionName: enter.

#
Channel
Operational

Message #

%1: enter...

Fields #

NameDescription
FunctionName UnicodeString

Event ID 11: Function ErrorString failed with status ErrorCode.

#
Channel
Operational

Message #

Function %1 failed with status %2.

Fields #

NameDescription
ErrorString UnicodeString
ErrorCode HexInt32

Provenance

ETW provider GUID 739d66d8-76c4-4004-873f-169ae5c6eaca

Defined in UefiCsp.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB