Microsoft-Windows-EnhancedPhishingProtection-Events
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 8265 | Aggregated Threat assessment of current system instance | System | N | N |
Provenance
ETW provider GUID e8abc5fb-bf87-5462-278d-1b5e18775a8f
Defined in ThreatAssessment.dll, which carries the event manifest.
- Win11-26200.6584, schema read from the registered manifest, binary version 1.0.0.221, captured 2026-06-02 — Manifest XML pack, 2.0 MB