Microsoft-Windows-DisplaySwitch
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | DisplaySwitch_ApplicationStart | Diagnostic | N | N |
| 2 | DisplaySwitch_ApplicationStop | Diagnostic | N | N |
| 3 | DisplaySwitch_CreateAndShowStart | Diagnostic | N | N |
| 4 | DisplaySwitch_CreateAndShowStop | Diagnostic | N | N |
| 5 | ProjectionUI_InitializationStart | Diagnostic | N | N |
| 6 | ProjectionUI_InitializationStop | Diagnostic | N | N |
| 7 | ProjectionUI_Selector_CreateAndShowStart | Diagnostic | N | N |
| 8 | ProjectionUI_Selector_CreateAndShowStop | Diagnostic | N | N |
| 9 | ProjectionUI_Confirmation_CreateAndShowStart | Diagnostic | N | N |
| 10 | ProjectionUI_Confirmation_CreateAndShowStop | Diagnostic | N | N |
Event ID 1: DisplaySwitch_ApplicationStart
#Event ID 2: DisplaySwitch_ApplicationStop
#Event ID 3: DisplaySwitch_CreateAndShowStart
#Event ID 4: DisplaySwitch_CreateAndShowStop
#Event ID 5: ProjectionUI_InitializationStart
#Event ID 6: ProjectionUI_InitializationStop
#Event ID 7: ProjectionUI_Selector_CreateAndShowStart
#Event ID 8: ProjectionUI_Selector_CreateAndShowStop
#Event ID 9: ProjectionUI_Confirmation_CreateAndShowStart
#Event ID 10: ProjectionUI_Confirmation_CreateAndShowStop
#Provenance
ETW provider GUID 192ede41-9175-4c86-ac02-9d003c9d43ab
Defined in DisplaySwitch.exe, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB