Microsoft-Windows-Magnification
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | LensCreate | Operational | N | N |
| 2 | LensDestroy | Operational | N | N |
| 3 | SetWindowSource | Operational | N | N |
| 4 | SetWindowTransform | Operational | N | N |
| 5 | UpdateLensContentStart | Operational | N | N |
| 6 | UpdateLensContentStop | Operational | N | N |
| 7 | UpdateContentSurfacesStart | Operational | N | N |
| 8 | UpdateContentSurfacesStop | Operational | N | N |
| 9 | UpdateRedirectionSurfacesStart | Operational | N | N |
| 10 | UpdateRedirectionSurfacesStop | Operational | N | N |
| 11 | UpdateRedirectionResourcesStart | Operational | N | N |
| 12 | UpdateRedirectionResourcesStop | Operational | N | N |
| 13 | UpdateSettingsStart | Operational | N | N |
| 14 | UpdateSettingsStop | Operational | N | N |
| 15 | RecreateTexturesStart | Operational | N | N |
| 16 | RecreateTexturesStop | Operational | N | N |
Event ID 5: UpdateLensContentStart
#Fields #
| Name | Description |
|---|---|
hWndLensCtx UInt64 | |
DesktopComposited UInt32 |
Event ID 11: UpdateRedirectionResourcesStart
#Fields #
| Name | Description |
|---|---|
hWndLensCtx UInt64 | |
UpdateId UInt64 |
Event ID 12: UpdateRedirectionResourcesStop
#Fields #
| Name | Description |
|---|---|
hWndLensCtx UInt64 | |
UpdateId UInt64 |
Provenance
ETW provider GUID c882ff1d-7585-4b33-b135-95c577179137
Defined in magnification.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB