Microsoft-Windows-Dot3MM

Event	Title	Channel	Sample	Rule
8001	InitStart	Diagnostic	N	N
8002	InitStop	Diagnostic	N	N
8003	EnumerateStart	Diagnostic	N	N
8004	EnumerateStop	Diagnostic	N	N

Event ID 8001: InitStart

Channel: Diagnostic
Task: Init
Opcode: Start

Event ID 8002: InitStop

Channel: Diagnostic
Task: Init
Opcode: Stop

Event ID 8003: EnumerateStart

Channel: Diagnostic
Task: Enumerate
Opcode: Start

Event ID 8004: EnumerateStop

Channel: Diagnostic
Task: Enumerate
Opcode: Stop

Provenance

ETW provider GUID f3419a17-e994-4c40-b593-79b8edec54e9

Defined in dot3mm.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB