Microsoft-Windows-DriverFrameworks-KernelMode-Performance
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | FxRequestTaskStart | Operational | N | N |
| 2 | FxRequestTaskStop | Operational | N | N |
| 3 | FxPowerTaskStart | Operational | N | N |
| 4 | FxPowerTaskStop | Operational | N | N |
| 5 | FxPowerTaskStart5 | Operational | N | N |
| 6 | FxPowerTaskStop6 | Operational | N | N |
| 7 | FxPowerTaskStart7 | Operational | N | N |
| 8 | FxPowerTaskStop8 | Operational | N | N |
| 9 | FxPowerTaskStart9 | Operational | N | N |
| 10 | FxPowerTaskStop10 | Operational | N | N |
| 11 | FxPowerTaskStart11 | Operational | N | N |
| 12 | FxPowerTaskStop12 | Operational | N | N |
Provenance
ETW provider GUID 486a5c7c-11cc-46c5-9de7-43dfe0bb57c1
Defined in wdf01000.sys, the binary that emits these events.
- WS2022-20348.4893, schema read from the registered manifest, binary version 1.33.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 1.35.26100.3323, captured 2026-06-02 — Manifest XML pack, 2.0 MB