Microsoft-Windows-FederationServices-Deployment
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 100 | Prop_UnicodeString. | Operational | N | N |
| 101 | Prop_UnicodeString. | Operational | N | N |
| 102 | Prop_UnicodeString. | Operational | N | N |
| 103 | Prop_UnicodeString. | Operational | N | N |
| 104 | Prop_UnicodeString. | Operational | N | N |
| 105 | Prop_UnicodeString. | Operational | N | N |
Provenance
ETW provider GUID c19e175b-30a0-42da-a5e3-124011de54b6
Defined in FSDeployRes.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB