Microsoft-Windows-MemoryDiagnostics-Schedule
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1001 | The Windows Memory Diagnostic scheduled the testing of the computer's memory to … | System | N | N |
| 1002 | The Windows Memory Diagnostic scheduled the testing of the computer's memory to … | System | N | N |
| 1003 | The Windows Memory Diagnostic could not schedule the testing of the computer's … | System | N | N |
Event ID 1001: The Windows Memory Diagnostic scheduled the testing of the computer's memory to run immediately
#Fields #
| Name | Description |
|---|---|
LaunchType UnicodeString | |
ScheduleType UnicodeString |
Provenance
ETW provider GUID 73e9c9de-a148-41f7-b1db-4da051fdc327
Defined in mdsched.exe, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB