Microsoft-Windows-Hyper-V-Chipset

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-Chipset",
    "guid": "DE9BA731-7F33-4F44-98C9-6CAC856B9F83",
    "event_source_name": "",
    "event_id": 18601,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-13T20:08:20.711339+00:00",
    "event_record_id": 8,
    "correlation": {
      "ActivityID": "A5B814C5-B324-0007-3329-B8A524B3DC01"
    },
    "execution": {
      "process_id": 9752,
      "thread_id": 8468
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-83-1-754131803-1256623942-3691508397-1420384594"
    }
  },
  "user_data": {
    "VmlEventLog": {
      "VmName": "2cf3235b-8f46-4ae6-adf2-07dc5259a954",
      "VmId": "2CF3235B-8F46-4AE6-ADF2-07DC5259A954",
      "VmBootSourceCount": 1,
      "VmBootSourceResult": "<VmBootSourceResultDetail><Status>0x00010005</Status><ExtendedStatus>0x00000000</ExtendedStatus><DevicePath>AcpiEx(VMBus,0,0)/VenHw(9B17E5A2-0891-42DD-B653-80B5C22809BA,C3C176C376D2D24890A9C04748072C60DF9B3CC6A55F0842B03F6B458B365592)/\\EFI\\Microsoft\\Boot\\bootmgfw.efi</DevicePath></VmBootSourceResultDetail>"
    }
  },
  "message": ""
}

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-Chipset",
    "guid": "DE9BA731-7F33-4F44-98C9-6CAC856B9F83",
    "event_source_name": "",
    "event_id": 18603,
    "version": 0,
    "level": 3,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-13T20:25:28.192759+00:00",
    "event_record_id": 43,
    "correlation": {},
    "execution": {
      "process_id": 2520,
      "thread_id": 8480
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-83-1-2656045725-1227044221-1802231738-3450451864"
    }
  },
  "user_data": {
    "VmlEventLog": {
      "VmName": "TestVM2",
      "VmId": "9E500A9D-357D-4923-BADF-6B6B98B7A9CD",
      "VmBootSourceCount": 4,
      "VmBootSourceResult": "Optical",
      "VmBootSourceResult_1": "HardDrive",
      "VmBootSourceResult_2": "Network",
      "VmBootSourceResult_3": "Floppy"
    }
  },
  "message": ""
}

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-Chipset",
    "guid": "{DE9BA731-7F33-4F44-98C9-6CAC856B9F83}",
    "event_source_name": "",
    "event_id": 18606,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T15:12:00.6967133+00:00",
    "event_record_id": 70,
    "correlation": {},
    "execution": {
      "process_id": 9832,
      "thread_id": 8208
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "telemetry-W11-d.cell-d.ludus.domain",
    "security": {
      "user_id": "S-1-5-83-1-601903291-1075843831-834788227-4211237455"
    }
  },
  "user_data": {
    "VmlEventLog": {
      "VmName": "evtgen-tiny",
      "VmId": "23E050BB-12F7-4020-83DB-C1314F6202FB",
      "VmBootSourceCount": "4",
      "VmBootSourceResult": "Floppy"
    }
  },
  "message": "'evtgen-tiny' is attempting to boot an operating system. (Virtual machine ID 23E050BB-12F7-4020-83DB-C1314F6202FB)"
}