Microsoft-Windows-DirectAccess-MediaManager

Event	Title	Channel	Sample	Rule
7001	InitStart	Diagnostic	N	N
7002	InitStop	Diagnostic	N	N
7003	EnumerateStart	Diagnostic	N	N
7004	EnumerateStop	Diagnostic	N	N

Event ID 7001: InitStart

Channel: Diagnostic
Task: Init
Opcode: Start

Event ID 7002: InitStop

Channel: Diagnostic
Task: Init
Opcode: Stop

Event ID 7003: EnumerateStart

Channel: Diagnostic
Task: Enumerate
Opcode: Start

Event ID 7004: EnumerateStop

Channel: Diagnostic
Task: Enumerate
Opcode: Stop

Provenance

ETW provider GUID dd2fe441-6c12-41fd-8232-3709c6045f63

Defined in damm.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB