Microsoft-Windows-MF

204 events across 12 channels

Event	Title	Channel	Sample
1	Devproxy QueueBuffersToDevice Notification	MF_MediaFoundationDeviceProxy	N
1	Devproxy QueueBuffersToDevice Notification	MF_DeviceProxy_Analytic	N
2	Devproxy SendBuffersToDevice Start	MF_MediaFoundationDeviceProxy	N
2	Devproxy SendBuffersToDevice Start	MF_DeviceProxy_Analytic	N
3	Devproxy SendBuffersToDevice Stop	MF_MediaFoundationDeviceProxy	N
3	Devproxy SendBuffersToDevice Stop	MF_DeviceProxy_Analytic	N
4	Devproxy ProcessInput Notification	MF_MediaFoundationDeviceProxy	N
4	Devproxy ProcessInput Notification	MF_DeviceProxy_Analytic	N
5	Devproxy HaveOutput Notification	MF_MediaFoundationDeviceProxy	N
5	Devproxy HaveOutput Notification	MF_DeviceProxy_Analytic	N
6	Devproxy ProcessOutput Notification	MF_MediaFoundationDeviceProxy	N
6	Devproxy ProcessOutput Notification	MF_DeviceProxy_Analytic	N
7	Devproxy SetInputType Start	MF_MediaFoundationDeviceProxy	N
7	Devproxy SetInputType Start	MF_DeviceProxy_Analytic	N
8	Devproxy SetInputType Start	MF_MediaFoundationDeviceProxy	N
8	Devproxy SetInputType Start	MF_DeviceProxy_Analytic	N
9	Devproxy SetOutputType Start	MF_MediaFoundationDeviceProxy	N
9	Devproxy SetOutputType Start	MF_DeviceProxy_Analytic	N
10	Devproxy SetOutputType Stop	MF_MediaFoundationDeviceProxy	N
10	Devproxy SetOutputType Stop	MF_DeviceProxy_Analytic	N
11	Devproxy Flush Notification	MF_MediaFoundationDeviceProxy	N
11	Devproxy Flush Notification	MF_DeviceProxy_Analytic	N
12	Devproxy KSPinStateChange Notification	MF_MediaFoundationDeviceProxy	N
12	Devproxy KSPinStateChange Notification	MF_DeviceProxy_Analytic	N
13	Devproxy VideoPlugin Load Start	MF_MediaFoundationDeviceProxy	N
13	Devproxy VideoPlugin Load Start	MF_DeviceProxy_Analytic	N
14	Devproxy VideoPlugin Load End	MF_MediaFoundationDeviceProxy	N
14	Devproxy VideoPlugin Load End	MF_DeviceProxy_Analytic	N
15	Devproxy VideoPlugin ProcessInput Start	MF_MediaFoundationDeviceProxy	N
15	Devproxy VideoPlugin ProcessInput Start	MF_DeviceProxy_Analytic	N
16	Devproxy VideoPlugin ProcessInput End	MF_MediaFoundationDeviceProxy	N
16	Devproxy VideoPlugin ProcessInput End	MF_DeviceProxy_Analytic	N
17	Devproxy VideoPlugin ProcessOutput Start	MF_MediaFoundationDeviceProxy	N
17	Devproxy VideoPlugin ProcessOutput Start	MF_DeviceProxy_Analytic	N
18	Devproxy VideoPlugin ProcessOutput End	MF_MediaFoundationDeviceProxy	N
18	Devproxy VideoPlugin ProcessOutput End	MF_DeviceProxy_Analytic	N
19	Devproxy D3DAllocatorCreated	MF_MediaFoundationDeviceProxy	N
19	Devproxy D3DAllocatorCreated	MF_DeviceProxy_Analytic	N
20	Devproxy D3DAllocatorReleased	MF_MediaFoundationDeviceProxy	N
20	Devproxy D3DAllocatorReleased	MF_DeviceProxy_Analytic	N
21	Devproxy MFT Load	MF_MediaFoundationDeviceProxy	N
21	Devproxy MFT Load	MF_DeviceProxy_Analytic	N
22	Devproxy MFT UnLoad	MF_MediaFoundationDeviceProxy	N
22	Devproxy MFT UnLoad	MF_DeviceProxy_Analytic	N
23	Devproxy MFT DynamicFormatChange Start	MF_MediaFoundationDeviceProxy	N
23	Devproxy MFT DynamicFormatChange Start	MF_DeviceProxy_Analytic	N
24	Devproxy MFT DynamicFormatChange Stop	MF_MediaFoundationDeviceProxy	N
24	Devproxy MFT DynamicFormatChange Stop	MF_DeviceProxy_Analytic	N
25	Devproxy MFT StreamState Start	MF_MediaFoundationDeviceProxy	N
25	Devproxy MFT StreamState Start	MF_DeviceProxy_Analytic	N
26	Devproxy MFT StreamState Stop	MF_MediaFoundationDeviceProxy	N
26	Devproxy MFT StreamState Stop	MF_DeviceProxy_Analytic	N
27	Devproxy OnPinBufferCompletion Notification	MF_MediaFoundationDeviceProxy	N
27	Devproxy OnPinBufferCompletion Notification	MF_DeviceProxy_Analytic	N
28	Devproxy OutoforderBufferCompletion Notification	MF_MediaFoundationDeviceProxy	N
28	Devproxy OutoforderBufferCompletion Notification	MF_DeviceProxy_Analytic	N
29	Devproxy_DriverQueueInfo Notification	MF_MediaFoundationDeviceProxy	N
29	Devproxy_DriverQueueInfo Notification	MF_DeviceProxy_Analytic	N
30	Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification	MF_MediaFoundationDeviceProxy	N
30	Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification	MF_DeviceProxy_Analytic	N
31	Devproxy PhotoConfirmation Notification	MF_MediaFoundationDeviceProxy	N
31	Devproxy PhotoConfirmation Notification	MF_DeviceProxy_Analytic	N
32	Devproxy DMFT Notification Start	MF_MediaFoundationDeviceProxy	N
32	Devproxy DMFT Notification Start	MF_DeviceProxy_Analytic	N
33	Devproxy DMFT Notification Stop	MF_MediaFoundationDeviceProxy	N
33	Devproxy DMFT Notification Stop	MF_DeviceProxy_Analytic	N
34	Devproxy DMFT Notification is implemented	MF_MediaFoundationDeviceProxy	N
34	Devproxy DMFT Notification is implemented	MF_DeviceProxy_Analytic	N
1000	IMFTopoLoader::Load start	MediaFoundationPipeline	N
1001	IMFTopoLoader::Load returned hr.	MediaFoundationPipeline	N
1002	Creating Transform CLSID returned hr.	MediaFoundationPipeline	N
1003	Fallback to default D3D Format D3DFmt.	MediaFoundationPipeline	N
1004	New destination rect is { (left), (top), (right), (bottom)}.	MediaFoundationPipeline	N
1005	New source rect is { (left), (top), (right), (bottom)}.	MediaFoundationPipeline	N
1006	DispatchDelayedEvents (Start) - Queue (Bitpump) Count (Count).	MediaFoundationPipeline	N
1007	DispatchDelayedEvents (Stop) - Queue (QueuePtr).	MediaFoundationPipeline	N
1008	HandleStreamEvent (Start) - Queue (Bitpump) type (Type).	MediaFoundationPipeline	N
1009	HandleStreamEvent (Stop) - Queue (Bitpump) hr(Type).	MediaFoundationPipeline	N
1010	HandleMFTEvent (Start) - Queue (MFT) type (Type).	MediaFoundationPipeline	N
1011	HandleMFTEvent (Stop) - Queue (MFT) hr(Type).	MediaFoundationPipeline	N
1012	MediaProcStreamRequestSample (Start) - Queue (MPStream) node (Node) …	MediaFoundationPipeline	N
1013	MediaProcStreamRequestSample (Stop) - Queue (MPStream) node (Node) …	MediaFoundationPipeline	N
1014	HandleSinkEvent (Start) - Queue (Bitpump) type (Type).	MediaFoundationPipeline	N
1015	HandleSinkEvent (Stop) - Queue (Bitpump) hr(Type).	MediaFoundationPipeline	N
1016	PathLock_Acquire - PathLock (PathLock).	MediaFoundationPipeline	N
1017	PathLock_Release - PathLock (PathLock).	MediaFoundationPipeline	N
1018	HandleMediaSample (Start) - Queue (Bitpump) timestamp (TimeStamp).	MediaFoundationPipeline	N
1019	HandleMediaSample (Stop) - Queue (Bitpump) hr(hr).	MediaFoundationPipeline	N
1020	HandleMediaSample_Process (Start) - Queue (Bitpump) pSample (pSample).	MediaFoundationPipeline	N
1021	HandleMediaSample_Process (Stop) - Queue (Bitpump) hr (hr).	MediaFoundationPipeline	N
1022	DispatchNodeInputEvent (Start) - Queue (Node) eventtype (EventType).	MediaFoundationPipeline	N
1023	DispatchNodeInputEvent (Stop) - Queue (Node) hr (hr).	MediaFoundationPipeline	N
1024	MediaProcSourceManagerOnStreamSample (Start) - Queue (MP) node (Node) …	MediaFoundationPipeline	N
1025	MediaProcSourceManagerOnStreamSample (Stop) - Queue (MP) hr(hr).	MediaFoundationPipeline	N
1026	MediaProcStreamRequestSample (Process Start) - Queue (MPStream) index (Node) …	MediaFoundationPipeline	N
1027	MediaProcStreamRequestSample (Process Stop) - Queue (MPStream) index (Node) …	MediaFoundationPipeline	N
1028	MediaProc: SourceNode_ProcessSample Start: object=object node=node …	MediaFoundationPipeline	N
1029	MediaProc: SourceNode_ProcessSample Stop: object=object node=node …	MediaFoundationPipeline	N
1030	MFTopo MFT Inserted IsHWMFT (IsHWMFT) GUID (DecoderGUID).	MediaFoundationPipeline	N
1098	OTA Failover to constricted video from protection scheme ID (fromtype).	MediaFoundationContentProtection	N
1099	OPM Poll exit (exitPolling).	MediaFoundationContentProtection	N
1100	RequestAccess Stream Id (stream) Action (action) EnablerObject Returned …	MediaFoundationContentProtection	N
1101	GetDecrypter Stream Id (streamid) hr (hr).	MediaFoundationContentProtection	N
1102	GetPolicy Stream Id (streamid) Action (Action) Policy Returned (policyReturned) …	MediaFoundationContentProtection	N
1103	Reset Stream Id (object) hr (hr).	MediaFoundationContentProtection	N
1104	BindAccess Stream Id (object) hr (hr).	MediaFoundationContentProtection	N
1105	UpdateAccess Stream Id (object) hr (hr).	MediaFoundationContentProtection	N
1106	GetInputTrustAuthority Stream Id (streamId) hr (hr).	MediaFoundationContentProtection	N
1107	Decryptor ProcessOutput output (bytes) bytes hr (hr).	MediaFoundationContentProtection	N
1108	GetInputProtectionVersion version (value) hr (hr).	MediaFoundationContentProtection	N
1109	GetOutputProtectionVersion version (value) hr (hr).	MediaFoundationContentProtection	N
1110	GetProtectionCertificate version (value) hr (hr).	MediaFoundationContentProtection	N
1111	InitInputProtection version (version) stream ID (streamId) hr (hr).	MediaFoundationContentProtection	N
1112	InitOutputProtection version (version) stream ID (streamId) hr (hr).	MediaFoundationContentProtection	N
1113	Start MFPMP Protected (isProtected) hr (hr).	MediaFoundationContentProtection	N
1114	ContentEnablerEvent Event Type (type).	MediaFoundationContentProtection	N
1115	CreateObjectByCLSID CLSID (CLSID) hr (hr).	MediaFoundationContentProtection	N
1116	GenerateRequiredSchemas attributes (attributes) Output Subtype (outputSubtype) …	MediaFoundationContentProtection	N
1117	RequiredSchema Context Data (context) Schema ID (type).	MediaFoundationContentProtection	N
1118	PolicyEvent Event Type (type) Stream ID (streamId) hrStatus(hr).	MediaFoundationContentProtection	N
1119	ActivateClassById Class (classId) hrStatus(hr).	MediaFoundationContentProtection	N
1120	Validate Application Certificate Start	MediaFoundationContentProtection	N
1121	Validate Application Certificate Finish	MediaFoundationContentProtection	N
1122	Application Protection ({on}).	Media Foundation ContentProtection	N
1123	OTA Apply Protection Scheme ID (type) Level (level) hr (hr).	MediaFoundationContentProtection	N
1124	Need Input - Object (WrapperPtr) Stream ID (StreamID) Input Requests …	MediaFoundationAsyncWrapper	N
1125	ProcessInput - Object ({WrapperPtr}) Stream ID ({StreamID}) Sample ({SamplePtr}) …	Media Foundation AsyncWrapper	N
1126	MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationAsyncWrapper	N
1127	MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationAsyncWrapper	N
1128	MFT ProcessOutput (Start) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1129	MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime …	MediaFoundationAsyncWrapper	N
1130	Have Output (End) - Object (WrapperPtr) Output Queue Length (OutputQueueLength).	MediaFoundationAsyncWrapper	N
1131	ProcessOutput - Object (WrapperPtr) Sample (SamplePtr) SampleTime …	MediaFoundationAsyncWrapper	N
1132	MFT Running (Start) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1133	MFT Running (End) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1134	SetWorkQueue - Object (WrapperPtr) WorkQueue (WorkQueueID).	MediaFoundationAsyncWrapper	N
1135	AsyncWrapper (Start) - Object (ObjectPtr) MFT(MFTPtr).	MediaFoundationAsyncWrapper	N
1136	AsyncWrapper (End) - Object (ObjectPtr) MFT(MFTPtr).	MediaFoundationAsyncWrapper	N
1137	MFT deadline (Start) - Object (WrapperPtr) Deadline (WorkQueueID).	MediaFoundationAsyncWrapper	N
1138	MFT deadline (End) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1139	MFT Loop Running (Start) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1140	MFT Loop Running (End) - Object (WrapperPtr).	MediaFoundationAsyncWrapper	N
1141	AsyncWrapperCompactedOutput- Object (WrapperPtr) Timestamp(SampleTimestamp) …	MediaFoundationAsyncWrapper	N
1145	ProcessInput start - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) …	MediaFoundationAsyncWrapper	N
1146	ProcessInput stop - Object (WrapperPtr) Stream ID (StreamID) Input Queue Length …	MediaFoundationAsyncWrapper	N
1147	Multisample Expand - Buffer Index (Buffer Index) Time (Timestamp) Duration …	MediaFoundationAsyncWrapper	N
1148	Multisample Compact - Buffer count (Buffer Count) Time (Timestamp) OldDuration …	MediaFoundationAsyncWrapper	N
1150	Video Frame Constriction to bandwidthInPixels kilopixels.	MediaFoundationContentProtection	N
1151	Failed to establish OPM hr (hr).	MediaFoundationContentProtection	N
1160	PMP Server Proxy Launched Process ID (ProcessID).	MediaFoundationContentProtection	N
1200	Low Latency was set on an MF component.	MediaFoundationPipeline	N
1201	Low Latency was unset on an MF component.	MediaFoundationPipeline	N
1202	MF Devproxy MFT ProcessMessage Event	MF_MediaFoundationDeviceProxy	N
1202	MF Devproxy MFT ProcessMessage Event	MF_DeviceProxy_Analytic	N
1203	D3DDeviceLost	MF_MediaFoundationDeviceProxy	N
1203	D3DDeviceLost	MF_DeviceProxy_Analytic	N
1204	MF Devproxy sample_TimeStamp Event	MF_MediaFoundationDeviceProxy	N
1204	MF Devproxy sample_TimeStamp Event	MF_DeviceProxy_Analytic	N
1205	Sync MFT Running (Start) - Object (ObjectPtr).	MediaFoundationPipeline	N
1206	Sync MFT Running (End) - Object (ObjectPtr).	MediaFoundationPipeline	N
1207	Sync MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationPipeline	N
1208	Sync MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationPipeline	N
1209	Sync MFT ProcessOutput (Start) - Object (WrapperPtr).	MediaFoundationPipeline	N
1210	Sync MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime …	MediaFoundationPipeline	N
1211	Async MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationPipeline	N
1212	Async MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample …	MediaFoundationPipeline	N
1213	Async MFT ProcessOutput (Start) - Object (WrapperPtr).	MediaFoundationPipeline	N
1214	Async MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) …	MediaFoundationPipeline	N
1215	MFTInfo SetWorkQueue - Object (ObjectPtr) workq (WorkQueueID).	MediaFoundationPipeline	N
1300	MFDS ReceiveSampleCP - Object (Object) Sample(SamplePtr) TimeStamp(Timestamp).	MediaFoundationDS	N
1301	MFDS SendSampleEvent - Object (Object) StreamID(StreamID) Sample(Sample) …	MediaFoundationDS	N
1302	MFDS SamplePoolPending - Object (Object) Sample(Sample) …	MediaFoundationDS	N
1303	MFDS QueueSample - Object (Object) Sample(StreamID) SampleQueueLen(Sample).	MediaFoundationDS	N
1304	MFDS RequestSample - Object (Object) Token(StreamID) RequestQueueLen(Token).	MediaFoundationDS	N
1305	MFDS FillSampleRequest - Object (Object) Sample(StreamID) Token(Sample) …	MediaFoundationDS	N
1306	MFDS_GetTime object=Object tsOrig=tsOrig sysOrig=sysOrig tsFixed=tsFixed …	MediaFoundationDS	N
1307	MFDS_StateStart object=Object state=State.	MediaFoundationDS	N
1308	MFDS_StateStop object=Object state=State.	MediaFoundationDS	N
1310	SrcPrefetch FillBuffer Start - Object (Object).	MediaFoundationSrcPrefetch	N
1311	SrcPrefetch FillBuffer Stop - Object (Object).	MediaFoundationSrcPrefetch	N
1312	SrcStreamEOSState - Object (Object) ID (StreamID) old (Old state) new (New …	MediaFoundationSrcPrefetch	N
1313	SrcStreamNeedMoreSamples - Object (Object) UseBuffering …	MediaFoundationSrcPrefetch	N
1314	SrcPrefetch Timeout Start - Object (Object).	MediaFoundationSrcPrefetch	N
1315	SrcPrefetch Timeout Stop - Object (Object).	MediaFoundationSrcPrefetch	N
1316	SrcPrefetch Timeout Cancel - Object (Object).	MediaFoundationSrcPrefetch	N
1317	SrcStreamRequestSample Start - Object (Object) token (Token).	MediaFoundationSrcPrefetch	N
1318	SrcStreamRequestSample Stop - Object (Object) token (Token).	MediaFoundationSrcPrefetch	N
1350	MP4_CreateQTMovie Start - Object (Object).	MediaFoundationMP4	N
1351	MP4_CreateQTMovie Stop - Object (Object) (hr hr).	MediaFoundationMP4	N
1352	MP4_SampleQueue - Object (Object) StreamID (StreamID) SampleCount(SampleCount).	MediaFoundationMP4	N
1353	MP4_CompactAudioSample - Object (Object) StreamID (StreamID) …	MediaFoundationMP4	N
1417	DeviceMFTM InitializeTransform	MF_MediaFoundationDeviceMFT	N
1418	DeviceMFTM InitializeTransform	MF_MediaFoundationDeviceMFT	N
1419	DeviceMFTM SetOutputType Start	MF_MediaFoundationDeviceMFT	N
1420	DeviceMFTM SetOutputType Stop	MF_MediaFoundationDeviceMFT	N
1421	DeviceMFTM OnInputStreamState Start	MF_MediaFoundationDeviceMFT	N
1422	DeviceMFTM OnInputStreamState Stop	MF_MediaFoundationDeviceMFT	N
1423	DeviceMFTM ProcessOutput Event	MF_MediaFoundationDeviceMFT	N
1424	DeviceMFTM Error Thrown	MF_MediaFoundationDeviceMFT	N
1425	DeviceMFTM DeviceTransform SetOutputType Start	MF_MediaFoundationDeviceMFT	N
1426	DeviceMFTM DeviceTransform SetOutputType Stop	MF_MediaFoundationDeviceMFT	N
1427	DeviceMFTM DeviceTransform OutputSample	MF_MediaFoundationDeviceMFT	N
1428	DeviceMFTM DeviceTransform SetWorkQueue	MF_MediaFoundationDeviceMFT	N
1428	Event ID 1428	Operational	N

Event ID 1: Devproxy QueueBuffersToDevice Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyQueueBuffersToDevice

Description

Devproxy QueueBuffersToDevice Notification.

Message #

Devproxy QueueBuffersToDevice Notification

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 1: Devproxy QueueBuffersToDevice Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyQueueBuffersToDevice

Description

Devproxy QueueBuffersToDevice Notification.

Message #

Devproxy QueueBuffersToDevice Notification

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 2: Devproxy SendBuffersToDevice Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySendBuffersToDevice
Opcode: Start

Description

Devproxy SendBuffersToDevice Start.

Message #

Devproxy SendBuffersToDevice Start

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 2: Devproxy SendBuffersToDevice Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySendBuffersToDevice
Opcode: Start

Description

Devproxy SendBuffersToDevice Start.

Message #

Devproxy SendBuffersToDevice Start

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 3: Devproxy SendBuffersToDevice Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySendBuffersToDevice
Opcode: Stop

Description

Devproxy SendBuffersToDevice Stop.

Message #

Devproxy SendBuffersToDevice Stop

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 3: Devproxy SendBuffersToDevice Stop

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySendBuffersToDevice
Opcode: Stop

Description

Devproxy SendBuffersToDevice Stop.

Message #

Devproxy SendBuffersToDevice Stop

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 4: Devproxy ProcessInput Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyProcessInput

Description

Devproxy ProcessInput Notification.

Message #

Devproxy ProcessInput Notification

Fields #

Name	Description
`StreamID` UInt32
`SamplePtr` Pointer

Event ID 4: Devproxy ProcessInput Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyProcessInput

Description

Devproxy ProcessInput Notification.

Message #

Devproxy ProcessInput Notification

Fields #

Name	Description
`StreamID` UInt32
`SamplePtr` Pointer

Event ID 5: Devproxy HaveOutput Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyOutput
Opcode: METransformHaveOutput

Description

Devproxy HaveOutput Notification.

Message #

Devproxy HaveOutput Notification

Fields #

Name	Description
`StreamID` UInt32
`ReadySampleCount` UInt32
`Sample` Pointer
`SampleTime` UInt64
`now` UInt64
`Delta_us` UInt64

Event ID 5: Devproxy HaveOutput Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyOutput
Opcode: METransformHaveOutput

Description

Devproxy HaveOutput Notification.

Message #

Devproxy HaveOutput Notification

Fields #

Name	Description
`StreamID` UInt32
`ReadySampleCount` UInt32
`Sample` Pointer
`SampleTime` UInt64
`now` UInt64
`Delta_us` UInt64

Event ID 6: Devproxy ProcessOutput Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyOutput
Opcode: DevproxyProcessOutput

Description

Devproxy ProcessOutput Notification.

Message #

Devproxy ProcessOutput Notification

Fields #

Name	Description
`OutputBufferCount` UInt32
`OutputSamplesPtr` Pointer

Event ID 6: Devproxy ProcessOutput Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyOutput
Opcode: DevproxyProcessOutput

Description

Devproxy ProcessOutput Notification.

Message #

Devproxy ProcessOutput Notification

Fields #

Name	Description
`OutputBufferCount` UInt32
`OutputSamplesPtr` Pointer

Event ID 7: Devproxy SetInputType Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySetInputType
Opcode: Start

Description

Devproxy SetInputType Start.

Message #

Devproxy SetInputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 7: Devproxy SetInputType Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySetInputType
Opcode: Start

Description

Devproxy SetInputType Start.

Message #

Devproxy SetInputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 8: Devproxy SetInputType Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySetInputType
Opcode: Stop

Description

Devproxy SetInputType Start.

Message #

Devproxy SetInputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 8: Devproxy SetInputType Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySetInputType
Opcode: Stop

Description

Devproxy SetInputType Start.

Message #

Devproxy SetInputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 9: Devproxy SetOutputType Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySetOutputType
Opcode: Start

Description

Devproxy SetOutputType Start.

Message #

Devproxy SetOutputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 9: Devproxy SetOutputType Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySetOutputType
Opcode: Start

Description

Devproxy SetOutputType Start.

Message #

Devproxy SetOutputType Start

Fields #

Name	Description
`MediaType` AnsiString

Event ID 10: Devproxy SetOutputType Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySetOutputType
Opcode: Stop

Description

Devproxy SetOutputType Stop.

Message #

Devproxy SetOutputType Stop

Fields #

Name	Description
`MediaType` AnsiString

Event ID 10: Devproxy SetOutputType Stop

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySetOutputType
Opcode: Stop

Description

Devproxy SetOutputType Stop.

Message #

Devproxy SetOutputType Stop

Fields #

Name	Description
`MediaType` AnsiString

Event ID 11: Devproxy Flush Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyFlush

Description

Devproxy Flush Notification.

Message #

Devproxy Flush Notification

Fields #

Name	Description
`StreamingState` UInt32

Event ID 11: Devproxy Flush Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyFlush

Description

Devproxy Flush Notification.

Message #

Devproxy Flush Notification

Fields #

Name	Description
`StreamingState` UInt32

Event ID 12: Devproxy KSPinStateChange Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyKSPinStateChange

Description

Devproxy KSPinStateChange Notification.

Message #

Devproxy KSPinStateChange Notification

Fields #

Name	Description
`PinHandle` UInt64
`State` UInt32

Event ID 12: Devproxy KSPinStateChange Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyKSPinStateChange

Description

Devproxy KSPinStateChange Notification.

Message #

Devproxy KSPinStateChange Notification

Fields #

Name	Description
`PinHandle` UInt64
`State` UInt32

Event ID 13: Devproxy VideoPlugin Load Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginLoad
Opcode: Start

Description

Devproxy VideoPlugin Load Start.

Message #

Devproxy VideoPlugin Load Start

Fields #

Name	Description
`PinPtr` Pointer

Event ID 13: Devproxy VideoPlugin Load Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginLoad
Opcode: Start

Description

Devproxy VideoPlugin Load Start.

Message #

Devproxy VideoPlugin Load Start

Fields #

Name	Description
`PinPtr` Pointer

Event ID 14: Devproxy VideoPlugin Load End

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginLoad
Opcode: Stop

Description

Devproxy VideoPlugin Load End.

Message #

Devproxy VideoPlugin Load End

Fields #

Name	Description
`PinPtr` Pointer

Event ID 14: Devproxy VideoPlugin Load End

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginLoad
Opcode: Stop

Description

Devproxy VideoPlugin Load End.

Message #

Devproxy VideoPlugin Load End

Fields #

Name	Description
`PinPtr` Pointer

Event ID 15: Devproxy VideoPlugin ProcessInput Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginProcessInput
Opcode: Start

Description

Devproxy VideoPlugin ProcessInput Start.

Message #

Devproxy VideoPlugin ProcessInput Start

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 15: Devproxy VideoPlugin ProcessInput Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginProcessInput
Opcode: Start

Description

Devproxy VideoPlugin ProcessInput Start.

Message #

Devproxy VideoPlugin ProcessInput Start

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 16: Devproxy VideoPlugin ProcessInput End

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginProcessInput
Opcode: Stop

Description

Devproxy VideoPlugin ProcessInput End.

Message #

Devproxy VideoPlugin ProcessInput End

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 16: Devproxy VideoPlugin ProcessInput End

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginProcessInput
Opcode: Stop

Description

Devproxy VideoPlugin ProcessInput End.

Message #

Devproxy VideoPlugin ProcessInput End

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 17: Devproxy VideoPlugin ProcessOutput Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginProcessOnput
Opcode: Start

Description

Devproxy VideoPlugin ProcessOutput Start.

Message #

Devproxy VideoPlugin ProcessOutput Start

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 17: Devproxy VideoPlugin ProcessOutput Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginProcessOnput
Opcode: Start

Description

Devproxy VideoPlugin ProcessOutput Start.

Message #

Devproxy VideoPlugin ProcessOutput Start

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 18: Devproxy VideoPlugin ProcessOutput End

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyVideoPluginProcessOnput
Opcode: Stop

Description

Devproxy VideoPlugin ProcessOutput End.

Message #

Devproxy VideoPlugin ProcessOutput End

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 18: Devproxy VideoPlugin ProcessOutput End

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyVideoPluginProcessOnput
Opcode: Stop

Description

Devproxy VideoPlugin ProcessOutput End.

Message #

Devproxy VideoPlugin ProcessOutput End

Fields #

Name	Description
`PinPtr` Pointer
`SamplePtr` Pointer

Event ID 19: Devproxy D3DAllocatorCreated

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyD3DAllocator
Opcode: D3DAllocatorCreated

Description

Devproxy D3DAllocatorCreated.

Message #

Devproxy D3DAllocatorCreated

Fields #

Name	Description
`PinPtr` Pointer
`D3DManagerPtr` Pointer

Event ID 19: Devproxy D3DAllocatorCreated

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyD3DAllocator
Opcode: D3DAllocatorCreated

Description

Devproxy D3DAllocatorCreated.

Message #

Devproxy D3DAllocatorCreated

Fields #

Name	Description
`PinPtr` Pointer
`D3DManagerPtr` Pointer

Event ID 20: Devproxy D3DAllocatorReleased

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyD3DAllocator
Opcode: D3DAllocatorReleased

Description

Devproxy D3DAllocatorReleased.

Message #

Devproxy D3DAllocatorReleased

Fields #

Name	Description
`PinPtr` Pointer
`D3DManagerPtr` Pointer

Event ID 20: Devproxy D3DAllocatorReleased

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyD3DAllocator
Opcode: D3DAllocatorReleased

Description

Devproxy D3DAllocatorReleased.

Message #

Devproxy D3DAllocatorReleased

Fields #

Name	Description
`PinPtr` Pointer
`D3DManagerPtr` Pointer

Event ID 21: Devproxy MFT Load

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFT
Opcode: Devproxyloaded

Description

Devproxy MFT Load.

Message #

Devproxy MFT Load

Event ID 21: Devproxy MFT Load

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFT
Opcode: Devproxyloaded

Description

Devproxy MFT Load.

Message #

Devproxy MFT Load

Event ID 22: Devproxy MFT UnLoad

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFT
Opcode: DevproxyMFTunloaded

Description

Devproxy MFT UnLoad.

Message #

Devproxy MFT UnLoad

Event ID 22: Devproxy MFT UnLoad

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFT
Opcode: DevproxyMFTunloaded

Description

Devproxy MFT UnLoad.

Message #

Devproxy MFT UnLoad

Event ID 23: Devproxy MFT DynamicFormatChange Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFTDynamicFormatChange
Opcode: Start

Description

Devproxy MFT DynamicFormatChange Start.

Message #

Devproxy MFT DynamicFormatChange Start

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 23: Devproxy MFT DynamicFormatChange Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFTDynamicFormatChange
Opcode: Start

Description

Devproxy MFT DynamicFormatChange Start.

Message #

Devproxy MFT DynamicFormatChange Start

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 24: Devproxy MFT DynamicFormatChange Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFTDynamicFormatChange
Opcode: Stop

Description

Devproxy MFT DynamicFormatChange Stop.

Message #

Devproxy MFT DynamicFormatChange Stop

Fields #

Name	Description
`FormatInfoStruct` UnicodeString

Event ID 24: Devproxy MFT DynamicFormatChange Stop

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFTDynamicFormatChange
Opcode: Stop

Description

Devproxy MFT DynamicFormatChange Stop.

Message #

Devproxy MFT DynamicFormatChange Stop

Fields #

Name	Description
`FormatInfoStruct` UnicodeString

Event ID 25: Devproxy MFT StreamState Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFTStreamState
Opcode: Start

Description

Devproxy MFT StreamState Start.

Message #

Devproxy MFT StreamState Start

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 25: Devproxy MFT StreamState Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFTStreamState
Opcode: Start

Description

Devproxy MFT StreamState Start.

Message #

Devproxy MFT StreamState Start

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 26: Devproxy MFT StreamState Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyMFTStreamState
Opcode: Stop

Description

Devproxy MFT StreamState Stop.

Message #

Devproxy MFT StreamState Stop

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 26: Devproxy MFT StreamState Stop

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyMFTStreamState
Opcode: Stop

Description

Devproxy MFT StreamState Stop.

Message #

Devproxy MFT StreamState Stop

Fields #

Name	Description
`StreamID` UInt32
`IsStreaming` UInt32

Event ID 27: Devproxy OnPinBufferCompletion Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxySendBuffersToDevice

Description

Devproxy OnPinBufferCompletion Notification.

Message #

Devproxy OnPinBufferCompletion Notification

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 27: Devproxy OnPinBufferCompletion Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxySendBuffersToDevice

Description

Devproxy OnPinBufferCompletion Notification.

Message #

Devproxy OnPinBufferCompletion Notification

Fields #

Name	Description
`AsyncTaskPointer` Pointer
`StreamID` UInt32
`BufferPointer` Pointer
`PinPointer` Pointer
`ParentPointer` Pointer

Event ID 28: Devproxy OutoforderBufferCompletion Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Opcode: Info

Description

Devproxy OutoforderBufferCompletion Notification.

Message #

Devproxy OutoforderBufferCompletion Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`SampleTimestamp` UInt64
`ExpectedSampleCompletionNumber` UInt64
`ActualSampleCompletionNumber` UInt64

Event ID 28: Devproxy OutoforderBufferCompletion Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Opcode: Info

Description

Devproxy OutoforderBufferCompletion Notification.

Message #

Devproxy OutoforderBufferCompletion Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`SampleTimestamp` UInt64
`ExpectedSampleCompletionNumber` UInt64
`ActualSampleCompletionNumber` UInt64

Event ID 29: Devproxy_DriverQueueInfo Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Opcode: Info

Description

Devproxy_DriverQueueInfo Notification.

Message #

Devproxy_DriverQueueInfo Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`DriverQueueDepth` UInt32

Event ID 29: Devproxy_DriverQueueInfo Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Opcode: Info

Description

Devproxy_DriverQueueInfo Notification.

Message #

Devproxy_DriverQueueInfo Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`DriverQueueDepth` UInt32

Event ID 30: Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Opcode: Info

Description

Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification.

Message #

Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`DriverTimeStamp` UInt64
`SystemTimeStamp` UInt64
`SampleCompletionNumber` UInt64
`FlagTimeStamp` AnsiString
`StreamName` AnsiString

Event ID 30: Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Opcode: Info

Description

Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification.

Message #

Devproxy_DroppedZeroLenghtSampleFromDeviceInfo Notification

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`DriverTimeStamp` UInt64
`SystemTimeStamp` UInt64
`SampleCompletionNumber` UInt64
`FlagTimeStamp` AnsiString
`StreamName` AnsiString

Event ID 31: Devproxy PhotoConfirmation Notification

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyPhotoConfirmation

Description

Devproxy PhotoConfirmation Notification.

Message #

Devproxy PhotoConfirmation Notification

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 31: Devproxy PhotoConfirmation Notification

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyPhotoConfirmation

Description

Devproxy PhotoConfirmation Notification.

Message #

Devproxy PhotoConfirmation Notification

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 32: Devproxy DMFT Notification Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyDMFTNotification
Opcode: Start

Description

Devproxy DMFT Notification Start.

Message #

Devproxy DMFT Notification Start

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 32: Devproxy DMFT Notification Start

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyDMFTNotification
Opcode: Start

Description

Devproxy DMFT Notification Start.

Message #

Devproxy DMFT Notification Start

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 33: Devproxy DMFT Notification Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyDMFTNotification
Opcode: Stop

Description

Devproxy DMFT Notification Stop.

Message #

Devproxy DMFT Notification Stop

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 33: Devproxy DMFT Notification Stop

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyDMFTNotification
Opcode: Stop

Description

Devproxy DMFT Notification Stop.

Message #

Devproxy DMFT Notification Stop

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 34: Devproxy DMFT Notification is implemented

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MediaFoundationDevproxyDMFTNotificationInit

Description

Devproxy DMFT Notification is implemented.

Message #

Devproxy DMFT Notification is implemented

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 34: Devproxy DMFT Notification is implemented

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MediaFoundationDevproxyDMFTNotificationInit

Description

Devproxy DMFT Notification is implemented.

Message #

Devproxy DMFT Notification is implemented

Fields #

Name	Description
`SamplePtr` Pointer

Event ID 1000: IMFTopoLoader::Load start

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationLoadTopology
Opcode: Start

Description

IMFTopoLoader::Load start.

Message #

IMFTopoLoader::Load start

Event ID 1001: IMFTopoLoader::Load returned hr.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationLoadTopology
Opcode: Stop

Description

IMFTopoLoader::Load returned hr.

Message #

IMFTopoLoader::Load returned %1

Fields #

Name	Description
`hr` HexInt32

Event ID 1002: Creating Transform CLSID returned hr.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationLoadTopology

Description

Creating Transform CLSID returned hr.

Message #

Creating Transform %1 returned %2

Fields #

Name	Description
`CLSID` UnicodeString
`hr` HexInt32

Event ID 1003: Fallback to default D3D Format D3DFmt.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationFallBackToDefaultD3DFmt

Description

Fallback to default D3D Format D3DFmt.

Message #

Fallback to default D3D Format %1

Fields #

Name	Description
`D3DFmt` UInt32

Event ID 1004: New destination rect is { (left), (top), (right), (bottom)}.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: Destinationrectchanged

Description

New destination rect is { (left), (top), (right), (bottom)}.

Message #

New destination rect is { (%1), (%2), (%3), (%4)}

Fields #

Name	Description
`left` UInt32
`top` UInt32
`right` UInt32
`bottom` UInt32

Event ID 1005: New source rect is { (left), (top), (right), (bottom)}.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: Sourcerectchanged

Description

New source rect is { (left), (top), (right), (bottom)}.

Message #

New source rect is { (%1), (%2), (%3), (%4)}

Fields #

Name	Description
`left` UInt32
`top` UInt32
`right` UInt32
`bottom` UInt32

Event ID 1006: DispatchDelayedEvents (Start) - Queue (Bitpump) Count (Count).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationDispatchDelayedEvents
Opcode: Start

Description

DispatchDelayedEvents (Start) - Queue (Bitpump) Count (Count).

Message #

DispatchDelayedEvents (Start) - Queue (%1) Count (%2)

Fields #

Name	Description
`Bitpump` Pointer
`Count` UInt32

Event ID 1007: DispatchDelayedEvents (Stop) - Queue (QueuePtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationDispatchDelayedEvents
Opcode: Stop

Description

DispatchDelayedEvents (Stop) - Queue (QueuePtr).

Message #

DispatchDelayedEvents (Stop) - Queue (%1)

Fields #

Name	Description
`QueuePtr` Pointer

Event ID 1008: HandleStreamEvent (Start) - Queue (Bitpump) type (Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleStreamEvent
Opcode: Start

Description

HandleStreamEvent (Start) - Queue (Bitpump) type (Type).

Message #

HandleStreamEvent (Start) - Queue (%1) type (%2)

Fields #

Name	Description
`Bitpump` Pointer
`Type` UInt32

Event ID 1009: HandleStreamEvent (Stop) - Queue (Bitpump) hr(Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleStreamEvent
Opcode: Stop

Description

HandleStreamEvent (Stop) - Queue (Bitpump) hr(Type).

Message #

HandleStreamEvent (Stop) - Queue (%1) hr(%2)

Fields #

Name	Description
`Bitpump` Pointer
`Type` UInt32
`hr` UInt32

Event ID 1010: HandleMFTEvent (Start) - Queue (MFT) type (Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMFTEvent
Opcode: Start

Description

HandleMFTEvent (Start) - Queue (MFT) type (Type).

Message #

HandleMFTEvent (Start) - Queue (%1) type (%2)

Fields #

Name	Description
`MFT` Pointer
`Type` UInt32

Event ID 1011: HandleMFTEvent (Stop) - Queue (MFT) hr(Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMFTEvent
Opcode: Stop

Description

HandleMFTEvent (Stop) - Queue (MFT) hr(Type).

Message #

HandleMFTEvent (Stop) - Queue (%1) hr(%2)

Fields #

Name	Description
`MFT` Pointer
`Type` UInt32
`hr` UInt32

Event ID 1012: MediaProcStreamRequestSample (Start) - Queue (MPStream) node (Node) Count(SampleCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcStreamRequestSample
Opcode: Start

Description

MediaProcStreamRequestSample (Start) - Queue (MPStream) node (Node) Count(SampleCount).

Message #

MediaProcStreamRequestSample (Start) - Queue (%1) node (%2) Count(%3)

Fields #

Name	Description
`MPStream` Pointer
`Node` UInt32
`SampleCount` UInt32

Event ID 1013: MediaProcStreamRequestSample (Stop) - Queue (MPStream) node (Node) hr(SampleCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcStreamRequestSample
Opcode: Stop

Description

MediaProcStreamRequestSample (Stop) - Queue (MPStream) node (Node) hr(SampleCount).

Message #

MediaProcStreamRequestSample (Stop) - Queue (%1) node (%2) hr(%3)

Fields #

Name	Description
`MPStream` Pointer
`Node` UInt32
`SampleCount` UInt32
`hr` UInt32

Event ID 1014: HandleSinkEvent (Start) - Queue (Bitpump) type (Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleSinkEvent
Opcode: Start

Description

HandleSinkEvent (Start) - Queue (Bitpump) type (Type).

Message #

HandleSinkEvent (Start) - Queue (%1) type (%2)

Fields #

Name	Description
`Bitpump` Pointer
`Type` UInt32

Event ID 1015: HandleSinkEvent (Stop) - Queue (Bitpump) hr(Type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleSinkEvent
Opcode: Stop

Description

HandleSinkEvent (Stop) - Queue (Bitpump) hr(Type).

Message #

HandleSinkEvent (Stop) - Queue (%1) hr(%2)

Fields #

Name	Description
`Bitpump` Pointer
`Type` UInt32
`hr` UInt32

Event ID 1016: PathLock_Acquire - PathLock (PathLock).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationPathLock
Opcode: Start

Description

PathLock_Acquire - PathLock (PathLock).

Message #

PathLock_Acquire - PathLock (%1)

Fields #

Name	Description
`PathLock` Pointer

Event ID 1017: PathLock_Release - PathLock (PathLock).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationPathLock
Opcode: Stop

Description

PathLock_Release - PathLock (PathLock).

Message #

PathLock_Release - PathLock (%1)

Fields #

Name	Description
`PathLock` Pointer

Event ID 1018: HandleMediaSample (Start) - Queue (Bitpump) timestamp (TimeStamp).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMediaSample
Opcode: Start

Description

HandleMediaSample (Start) - Queue (Bitpump) timestamp (TimeStamp).

Message #

HandleMediaSample (Start) - Queue (%1) timestamp (%2)

Fields #

Name	Description
`Bitpump` Pointer
`TimeStamp` UInt64

Event ID 1019: HandleMediaSample (Stop) - Queue (Bitpump) hr(hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMediaSample
Opcode: Stop

Description

HandleMediaSample (Stop) - Queue (Bitpump) hr(hr).

Message #

HandleMediaSample (Stop) - Queue (%1) hr(%2)

Fields #

Name	Description
`Bitpump` Pointer
`hr` UInt32

Event ID 1020: HandleMediaSample_Process (Start) - Queue (Bitpump) pSample (pSample).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMediaSample_Process
Opcode: Start

Description

HandleMediaSample_Process (Start) - Queue (Bitpump) pSample (pSample).

Message #

HandleMediaSample_Process (Start) - Queue (%1) pSample (%2)

Fields #

Name	Description
`Bitpump` Pointer
`pSample` Pointer

Event ID 1021: HandleMediaSample_Process (Stop) - Queue (Bitpump) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationHandleMediaSample_Process
Opcode: Stop

Description

HandleMediaSample_Process (Stop) - Queue (Bitpump) hr (hr).

Message #

HandleMediaSample_Process (Stop) - Queue (%1) hr (%2)

Fields #

Name	Description
`Bitpump` Pointer
`hr` UInt32

Event ID 1022: DispatchNodeInputEvent (Start) - Queue (Node) eventtype (EventType).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationDispatchNodeInputEvent
Opcode: Start

Description

DispatchNodeInputEvent (Start) - Queue (Node) eventtype (EventType).

Message #

DispatchNodeInputEvent (Start) - Queue (%1) eventtype (%2)

Fields #

Name	Description
`Node` Pointer
`EventType` UInt32

Event ID 1023: DispatchNodeInputEvent (Stop) - Queue (Node) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationDispatchNodeInputEvent
Opcode: Stop

Description

DispatchNodeInputEvent (Stop) - Queue (Node) hr (hr).

Message #

DispatchNodeInputEvent (Stop) - Queue (%1) hr (%2)

Fields #

Name	Description
`Node` Pointer
`hr` UInt32

Event ID 1024: MediaProcSourceManagerOnStreamSample (Start) - Queue (MP) node (Node) Count(StreamIndex).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcSourceManagerOnStreamSample
Opcode: Start

Description

MediaProcSourceManagerOnStreamSample (Start) - Queue (MP) node (Node) Count(StreamIndex).

Message #

MediaProcSourceManagerOnStreamSample (Start) - Queue (%1) node (%2) Count(%3)

Fields #

Name	Description
`MP` Pointer
`Node` Pointer
`StreamIndex` UInt32

Event ID 1025: MediaProcSourceManagerOnStreamSample (Stop) - Queue (MP) hr(hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcSourceManagerOnStreamSample
Opcode: Stop

Description

MediaProcSourceManagerOnStreamSample (Stop) - Queue (MP) hr(hr).

Message #

MediaProcSourceManagerOnStreamSample (Stop) - Queue (%1) hr(%2)

Fields #

Name	Description
`MP` Pointer
`hr` UInt32

Event ID 1026: MediaProcStreamRequestSample (Process Start) - Queue (MPStream) index (Node) count(Index).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcStreamRequestSample_Process
Opcode: Start

Description

MediaProcStreamRequestSample (Process Start) - Queue (MPStream) index (Node) count(Index).

Message #

MediaProcStreamRequestSample (Process Start) - Queue (%1) index (%2) count(%3)

Fields #

Name	Description
`MPStream` Pointer
`Node` UInt32
`Index` UInt32
`SampleCount` UInt32

Event ID 1027: MediaProcStreamRequestSample (Process Stop) - Queue (MPStream) index (Node) count(Index) hr(SampleCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMediaProcStreamRequestSample_Process
Opcode: Stop

Description

MediaProcStreamRequestSample (Process Stop) - Queue (MPStream) index (Node) count(Index) hr(SampleCount).

Message #

MediaProcStreamRequestSample (Process Stop) - Queue (%1) index (%2) count(%3) hr(%4)

Fields #

Name	Description
`MPStream` Pointer
`Node` UInt32
`Index` UInt32
`SampleCount` UInt32
`hr` UInt32

Event ID 1028: MediaProc: SourceNode_ProcessSample Start: object=object node=node output=OutputIndex.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaProc:SourceNode_ProcessSample
Opcode: Start

Description

MediaProc: SourceNode_ProcessSample Start: object=object node=node output=OutputIndex.

Message #

MediaProc: SourceNode_ProcessSample Start: object=%1 node=%2 output=%3

Fields #

Name	Description
`object` Pointer
`node` Pointer
`OutputIndex` UInt32

Event ID 1029: MediaProc: SourceNode_ProcessSample Stop: object=object node=node HRESULT=result.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaProc:SourceNode_ProcessSample
Opcode: Stop

Description

MediaProc: SourceNode_ProcessSample Stop: object=object node=node HRESULT=result.

Message #

MediaProc: SourceNode_ProcessSample Stop: object=%1 node=%2 HRESULT=%3

Fields #

Name	Description
`object` Pointer
`node` Pointer
`result` UInt32

Event ID 1030: MFTopo MFT Inserted IsHWMFT (IsHWMFT) GUID (DecoderGUID).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationMFTopo_MFT_Inserted

Description

MFTopo MFT Inserted IsHWMFT (IsHWMFT) GUID (DecoderGUID).

Message #

MFTopo MFT Inserted IsHWMFT (%1) GUID (%2)

Fields #

Name	Description
`IsHWMFT` Boolean
`DecoderGUID` GUID

Event ID 1098: OTA Failover to constricted video from protection scheme ID (fromtype).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationOPMPoll

Description

OTA Failover to constricted video from protection scheme ID (fromtype).

Message #

OTA Failover to constricted video from protection scheme ID (%1)

Fields #

Name	Description
`fromtype` GUID

Event ID 1099: OPM Poll exit (exitPolling).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationOPMPoll_1099

Description

OPM Poll exit (exitPolling).

Message #

OPM Poll exit (%1)

Fields #

Name	Description
`exitPolling` Boolean

Event ID 1100: RequestAccess Stream Id (stream) Action (action) EnablerObject Returned (enablerReturned) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_RequestAccess

Description

RequestAccess Stream Id (stream) Action (action) EnablerObject Returned (enablerReturned) hr (hr).

Message #

RequestAccess Stream Id (%1) Action (%2) EnablerObject Returned (%3) hr (%4)

Fields #

Name	Description
`stream` UInt32
`action` UInt32
`enablerReturned` Boolean
`hr` HexInt32

Event ID 1101: GetDecrypter Stream Id (streamid) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_GetDecrypter

Description

GetDecrypter Stream Id (streamid) hr (hr).

Message #

GetDecrypter Stream Id (%1) hr (%2)

Fields #

Name	Description
`streamid` UInt32
`hr` HexInt32

Event ID 1102: GetPolicy Stream Id (streamid) Action (Action) Policy Returned (policyReturned) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_GetPolicy

Description

GetPolicy Stream Id (streamid) Action (Action) Policy Returned (policyReturned) hr (hr).

Message #

GetPolicy Stream Id (%1) Action (%2) Policy Returned (%3) hr (%4)

Fields #

Name	Description
`streamid` UInt32
`Action` UInt32
`policyReturned` Boolean
`hr` HexInt32

Event ID 1103: Reset Stream Id (object) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_Reset

Description

Reset Stream Id (object) hr (hr).

Message #

Reset Stream Id (%1) hr (%2)

Fields #

Name	Description
`object` UInt32
`hr` HexInt32

Event ID 1104: BindAccess Stream Id (object) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_BindAccess

Description

BindAccess Stream Id (object) hr (hr).

Message #

BindAccess Stream Id (%1) hr (%2)

Fields #

Name	Description
`object` UInt32
`hr` HexInt32

Event ID 1105: UpdateAccess Stream Id (object) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFInputTrustAuthority_UpdateAccess

Description

UpdateAccess Stream Id (object) hr (hr).

Message #

UpdateAccess Stream Id (%1) hr (%2)

Fields #

Name	Description
`object` UInt32
`hr` HexInt32

Event ID 1106: GetInputTrustAuthority Stream Id (streamId) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFTrustedInput_GetInputTrustAuthority
Opcode: Start

Description

GetInputTrustAuthority Stream Id (streamId) hr (hr).

Message #

GetInputTrustAuthority Stream Id (%1) hr (%2)

Fields #

Name	Description
`streamId` HexInt32
`hr` HexInt32

Event ID 1107: Decryptor ProcessOutput output (bytes) bytes hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationDecrypt

Description

Decryptor ProcessOutput output (bytes) bytes hr (hr).

Message #

Decryptor ProcessOutput output (%1) bytes hr (%2)

Fields #

Name	Description
`bytes` UInt32
`hr` HexInt32

Event ID 1108: GetInputProtectionVersion version (value) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFSampleProtection_GetInputProtectionVersion

Description

GetInputProtectionVersion version (value) hr (hr).

Message #

GetInputProtectionVersion version (%1) hr (%2)

Fields #

Name	Description
`value` UInt32
`hr` HexInt32

Event ID 1109: GetOutputProtectionVersion version (value) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFSampleProtection_GetOutputProtectionVersion

Description

GetOutputProtectionVersion version (value) hr (hr).

Message #

GetOutputProtectionVersion version (%1) hr (%2)

Fields #

Name	Description
`value` UInt32
`hr` HexInt32

Event ID 1110: GetProtectionCertificate version (value) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFSampleProtection_GetProtectionCertificate

Description

GetProtectionCertificate version (value) hr (hr).

Message #

GetProtectionCertificate version (%1) hr (%2)

Fields #

Name	Description
`value` UInt32
`hr` HexInt32

Event ID 1111: InitInputProtection version (version) stream ID (streamId) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFSampleProtection_InitInputProtection

Description

InitInputProtection version (version) stream ID (streamId) hr (hr).

Message #

InitInputProtection version (%1) stream ID (%2) hr (%3)

Fields #

Name	Description
`version` UInt32
`streamId` UInt32
`hr` HexInt32

Event ID 1112: InitOutputProtection version (version) stream ID (streamId) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFSampleProtection_InitOutputProtection

Description

InitOutputProtection version (version) stream ID (streamId) hr (hr).

Message #

InitOutputProtection version (%1) stream ID (%2) hr (%3)

Fields #

Name	Description
`version` UInt32
`streamId` UInt32
`hr` HexInt32

Event ID 1113: Start MFPMP Protected (isProtected) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationCreateMFPMP

Description

Start MFPMP Protected (isProtected) hr (hr).

Message #

Start MFPMP Protected (%1) hr (%2)

Fields #

Name	Description
`isProtected` Boolean
`hr` HexInt32

Event ID 1114: ContentEnablerEvent Event Type (type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationContentEnablerEvent

Description

ContentEnablerEvent Event Type (type).

Message #

ContentEnablerEvent Event Type (%1)

Fields #

Name	Description
`type` GUID
`hr` HexInt32

Event ID 1115: CreateObjectByCLSID CLSID (CLSID) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFPMPHost_CreateObjectByCLSID

Description

CreateObjectByCLSID CLSID (CLSID) hr (hr).

Message #

CreateObjectByCLSID CLSID (%1) hr (%2)

Fields #

Name	Description
`CLSID` GUID
`hr` HexInt32

Event ID 1116: GenerateRequiredSchemas attributes (attributes) Output Subtype (outputSubtype) Number of Schemas (cSchemas) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFOutputPolicy_GenerateRequiredSchemas

Description

GenerateRequiredSchemas attributes (attributes) Output Subtype (outputSubtype) Number of Schemas (cSchemas) hr (hr).

Message #

GenerateRequiredSchemas attributes (%1) Output Subtype (%2) Number of Schemas (%3) hr (%4)

Fields #

Name	Description
`attributes` HexInt32
`outputSubtype` GUID
`cSchemas` UInt32
`hr` HexInt32

Event ID 1117: RequiredSchema Context Data (context) Schema ID (type).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationRequiredSchema

Description

RequiredSchema Context Data (context) Schema ID (type).

Message #

RequiredSchema Context Data (%1) Schema ID (%2)

Fields #

Name	Description
`context` HexInt32
`type` GUID

Event ID 1118: PolicyEvent Event Type (type) Stream ID (streamId) hrStatus(hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationPolicyEvent

Description

PolicyEvent Event Type (type) Stream ID (streamId) hrStatus(hr).

Message #

PolicyEvent Event Type (%1) Stream ID (%2) hrStatus(%3)

Fields #

Name	Description
`type` UInt32
`streamId` HexInt32
`hr` HexInt32

Event ID 1119: ActivateClassById Class (classId) hrStatus(hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationIMFPMPHostApp_ActivateClassById

Description

ActivateClassById Class (classId) hrStatus(hr).

Message #

ActivateClassById Class (%1) hrStatus(%2)

Fields #

Name	Description
`classId` UnicodeString
`hr` HexInt32

Event ID 1120: Validate Application Certificate Start

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationValidateApplicationCertificate
Opcode: Start

Description

Validate Application Certificate Start.

Message #

Validate Application Certificate Start

Event ID 1121: Validate Application Certificate Finish

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationValidateApplicationCertificate
Opcode: Stop

Description

Validate Application Certificate Finish.

Message #

Validate Application Certificate Finish

Fields #

Name	Description
`hr` HexInt32

Event ID 1122: Application Protection ({on}).

Provider: Microsoft-Windows-MF
Channel: Media Foundation ContentProtection

Description

Application Protection ({on}).

Message #

Application Protection ({on})

Fields #

Name	Description
`on`

Event ID 1123: OTA Apply Protection Scheme ID (type) Level (level) hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationOTAApplyProtection

Description

OTA Apply Protection Scheme ID (type) Level (level) hr (hr).

Message #

OTA Apply Protection Scheme ID (%1) Level (%2) hr (%3)

Fields #

Name	Description
`type` GUID
`level` UInt32
`hr` HexInt32

Event ID 1124: Need Input - Object (WrapperPtr) Stream ID (StreamID) Input Requests (InputRequestsCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperNeedInput

Description

Need Input - Object (WrapperPtr) Stream ID (StreamID) Input Requests (InputRequestsCount).

Message #

Need Input - Object (%1) Stream ID (%2) Input Requests (%3)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`InputRequestsCount` UInt32

Event ID 1125: ProcessInput - Object ({WrapperPtr}) Stream ID ({StreamID}) Sample ({SamplePtr}) Input Queue Length ({SampleTimestamp}) Result ({InputQueueLength}).

Provider: Microsoft-Windows-MF
Channel: Media Foundation AsyncWrapper

Description

ProcessInput - Object ({WrapperPtr}) Stream ID ({StreamID}) Sample ({SamplePtr}) Input Queue Length ({SampleTimestamp}) Result ({InputQueueLength}).

Message #

ProcessInput - Object ({WrapperPtr}) Stream ID ({StreamID}) Sample ({SamplePtr}) Input Queue Length ({SampleTimestamp}) Result ({InputQueueLength})

Fields #

Name	Description
`WrapperPtr`
`StreamID`
`SamplePtr`
`SampleTimestamp`
`InputQueueLength`

Event ID 1126: MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessInput(MFT)
Opcode: Start

Description

MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr).

Message #

MFT ProcessInput (Start) - Object (%1) Stream ID (%2) Sample (%3)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer

Event ID 1127: MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessInput(MFT)
Opcode: Stop

Description

MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Message #

MFT ProcessInput (End) - Object (%1) Stream ID (%2) Sample (%3) SampleTime (%4) Input Queue Length (%5) Result (%6)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`SampleTimestamp` UInt64
`InputQueueLength` UInt32
`hr` UInt32

Event ID 1128: MFT ProcessOutput (Start) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessOutput(MFT)
Opcode: Start

Description

MFT ProcessOutput (Start) - Object (WrapperPtr).

Message #

MFT ProcessOutput (Start) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer

Event ID 1129: MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessOutput(MFT)
Opcode: Stop

Description

MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Message #

MFT ProcessOutput (End) - Object (%1) Sample (%2) SampleTime (%3) Result (%4)

Fields #

Name	Description
`WrapperPtr` Pointer
`SamplePtr` Pointer
`SampleTime` UInt64
`hr` UInt32

Event ID 1130: Have Output (End) - Object (WrapperPtr) Output Queue Length (OutputQueueLength).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperHaveOutput

Description

Have Output (End) - Object (WrapperPtr) Output Queue Length (OutputQueueLength).

Message #

Have Output (End) - Object (%1) Output Queue Length (%2)

Fields #

Name	Description
`WrapperPtr` Pointer
`OutputQueueLength` UInt32

Event ID 1131: ProcessOutput - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTimestamp) Output Queue Length (OutputQueueLength) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessOutput

Description

ProcessOutput - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTimestamp) Output Queue Length (OutputQueueLength) Result (hr).

Message #

ProcessOutput - Object (%1) Sample (%2) SampleTime (%3) Output Queue Length (%4) Result (%5)

Fields #

Name	Description
`WrapperPtr` Pointer
`SamplePtr` Pointer
`SampleTimestamp` UInt64
`OutputQueueLength` UInt32
`hr` UInt32

Event ID 1132: MFT Running (Start) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperRunning
Opcode: Start

Description

MFT Running (Start) - Object (WrapperPtr).

Message #

MFT Running (Start) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer
`WorkQueueID` UInt32

Event ID 1133: MFT Running (End) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperRunning
Opcode: Stop

Description

MFT Running (End) - Object (WrapperPtr).

Message #

MFT Running (End) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer
`WorkQueueID` UInt32

Event ID 1134: SetWorkQueue - Object (WrapperPtr) WorkQueue (WorkQueueID).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperSetWorkQueue

Description

SetWorkQueue - Object (WrapperPtr) WorkQueue (WorkQueueID).

Message #

SetWorkQueue - Object (%1) WorkQueue (%2)

Fields #

Name	Description
`WrapperPtr` Pointer
`WorkQueueID` UInt32

Event ID 1135: AsyncWrapper (Start) - Object (ObjectPtr) MFT(MFTPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapper
Opcode: Start

Description

AsyncWrapper (Start) - Object (ObjectPtr) MFT(MFTPtr).

Message #

AsyncWrapper (Start) - Object (%1) MFT(%2)

Fields #

Name	Description
`ObjectPtr` Pointer
`MFTPtr` Pointer

Event ID 1136: AsyncWrapper (End) - Object (ObjectPtr) MFT(MFTPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapper
Opcode: Stop

Description

AsyncWrapper (End) - Object (ObjectPtr) MFT(MFTPtr).

Message #

AsyncWrapper (End) - Object (%1) MFT(%2)

Fields #

Name	Description
`ObjectPtr` Pointer
`MFTPtr` Pointer

Event ID 1137: MFT deadline (Start) - Object (WrapperPtr) Deadline (WorkQueueID).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperDeadline
Opcode: Start

Description

MFT deadline (Start) - Object (WrapperPtr) Deadline (WorkQueueID).

Message #

MFT deadline (Start) - Object (%1) Deadline (%2)

Fields #

Name	Description
`WrapperPtr` Pointer
`WorkQueueID` UInt32
`DeadlineHNS` UInt64

Event ID 1138: MFT deadline (End) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperDeadline
Opcode: Stop

Description

MFT deadline (End) - Object (WrapperPtr).

Message #

MFT deadline (End) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer
`WorkQueueID` UInt32

Event ID 1139: MFT Loop Running (Start) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperLoopRunning
Opcode: Start

Description

MFT Loop Running (Start) - Object (WrapperPtr).

Message #

MFT Loop Running (Start) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer

Event ID 1140: MFT Loop Running (End) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperLoopRunning
Opcode: Stop

Description

MFT Loop Running (End) - Object (WrapperPtr).

Message #

MFT Loop Running (End) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer

Event ID 1141: AsyncWrapperCompactedOutput- Object (WrapperPtr) Timestamp(SampleTimestamp) Dur0(Duration0) Dur1(Duration1) NewDuration(DurationResult).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperCompactedoutput

Description

AsyncWrapperCompactedOutput- Object (WrapperPtr) Timestamp(SampleTimestamp) Dur0(Duration0) Dur1(Duration1) NewDuration(DurationResult).

Message #

AsyncWrapperCompactedOutput- Object (%1) Timestamp(%2) Dur0(%3) Dur1(%4) NewDuration(%5)

Fields #

Name	Description
`WrapperPtr` Pointer
`SampleTimestamp` UInt64
`Duration0` UInt64
`Duration1` UInt64
`DurationResult` UInt64

Event ID 1145: ProcessInput start - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) Duration (SampleTimestamp) Input Queue Length (Duration) Shatter (InputQueueLength).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessInput
Opcode: Start

Description

ProcessInput start - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) Duration (SampleTimestamp) Input Queue Length (Duration) Shatter (InputQueueLength).

Message #

ProcessInput start - Object (%1) Stream ID (%2) Sample (%3) Duration (%4) Input Queue Length (%5) Shatter (%6)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`SampleTimestamp` UInt64
`Duration` UInt64
`InputQueueLength` UInt32
`ShatterInputSamples` UInt32
`BufferCount` UInt32

Event ID 1146: ProcessInput stop - Object (WrapperPtr) Stream ID (StreamID) Input Queue Length (SamplePtr) Result (InputQueueLength).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MediaFoundationAsyncWrapperProcessInput
Opcode: Stop

Description

ProcessInput stop - Object (WrapperPtr) Stream ID (StreamID) Input Queue Length (SamplePtr) Result (InputQueueLength).

Message #

ProcessInput stop - Object (%1) Stream ID (%2) Input Queue Length (%3) Result (%4)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`InputQueueLength` UInt32
`hr` UInt32

Event ID 1147: Multisample Expand - Buffer Index (Buffer Index) Time (Timestamp) Duration (Duration).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MultisampleExpand

Description

Multisample Expand - Buffer Index (Buffer Index) Time (Timestamp) Duration (Duration).

Message #

Multisample Expand - Buffer Index (%1) Time (%2) Duration (%3)

Fields #

Name	Description
`BufferIndex` UInt32
`Timestamp` UInt64
`Duration` UInt64

Event ID 1148: Multisample Compact - Buffer count (Buffer Count) Time (Timestamp) OldDuration (OrigDuration) AddDuration (AddDuration) NewDuration (NewDuration).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationAsyncWrapper
Task: MultisampleCompact

Description

Multisample Compact - Buffer count (Buffer Count) Time (Timestamp) OldDuration (OrigDuration) AddDuration (AddDuration) NewDuration (NewDuration).

Message #

Multisample Compact - Buffer count (%1) Time (%2) OldDuration (%3) AddDuration (%4) NewDuration (%5)

Fields #

Name	Description
`BufferCount` UInt32
`Timestamp` UInt64
`OrigDuration` UInt64
`AddDuration` UInt64
`NewDuration` UInt64

Event ID 1150: Video Frame Constriction to bandwidthInPixels kilopixels.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationVideoFrameConstrict

Description

Video Frame Constriction to bandwidthInPixels kilopixels.

Message #

Video Frame Constriction to %1 kilopixels

Fields #

Name	Description
`bandwidthInPixels` UInt64

Event ID 1151: Failed to establish OPM hr (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationOPMFail

Description

Failed to establish OPM hr (hr).

Message #

Failed to establish OPM hr (%1)

Fields #

Name	Description
`hr` HexInt32

Event ID 1160: PMP Server Proxy Launched Process ID (ProcessID).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationContentProtection
Task: MediaFoundationPMPServerProxy_LaunchedProcess

Description

PMP Server Proxy Launched Process ID (ProcessID).

Message #

PMP Server Proxy Launched Process ID (%1)

Fields #

Name	Description
`ProcessID` UInt32

Event ID 1200: Low Latency was set on an MF component.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Opcode: Info

Description

Low Latency was set on an MF component. Type (ComponentType) Set Interface (SettingType) Result (Result).

Message #

Low Latency was set on an MF component. Type (%1) Set Interface (%2) Result (%3)

Fields #

Name	Description
`ComponentType` UInt32
`SettingType` UInt32
`Result` Int32

Event ID 1201: Low Latency was unset on an MF component.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Opcode: Info

Description

Low Latency was unset on an MF component. Type (ComponentType) Interface (SettingType) Result (Result).

Message #

Low Latency was unset on an MF component. Type (%1) Interface (%2) Result (%3)

Fields #

Name	Description
`ComponentType` UInt32
`SettingType` UInt32
`Result` Int32

Event ID 1202: MF Devproxy MFT ProcessMessage Event

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MFDevproxyMFTProcessMessageTask

Description

MF Devproxy MFT ProcessMessage Event.

Message #

MF Devproxy MFT ProcessMessage Event

Fields #

Name	Description
`Object` Pointer
`eMessage` UInt32
`ulParam` UInt32

Event ID 1202: MF Devproxy MFT ProcessMessage Event

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MFDevproxyMFTProcessMessageTask

Description

MF Devproxy MFT ProcessMessage Event.

Message #

MF Devproxy MFT ProcessMessage Event

Fields #

Name	Description
`Object` Pointer
`eMessage` UInt32
`ulParam` UInt32

Event ID 1203: D3DDeviceLost

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: D3DDeviceLost

Description

D3DDeviceLost.

Message #

D3DDeviceLost

Fields #

Name	Description
`hr` HexInt32

Event ID 1203: D3DDeviceLost

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: D3DDeviceLost

Description

D3DDeviceLost.

Message #

D3DDeviceLost

Fields #

Name	Description
`hr` HexInt32

Event ID 1204: MF Devproxy sample_TimeStamp Event

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceProxy
Task: MFDevproxysample_TimeStampTask

Description

MF Devproxy sample_TimeStamp Event.

Message #

MF Devproxy sample_TimeStamp Event

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`DriverTimeStamp` UInt64
`SystemTimeStamp` UInt64
`SampleCompletionNumber` UInt64
`FlagTimeStamp` AnsiString
`StreamName` AnsiString

Event ID 1204: MF Devproxy sample_TimeStamp Event

Provider: Microsoft-Windows-MF
Channel: MF_DeviceProxy_Analytic
Task: MFDevproxysample_TimeStampTask

Description

MF Devproxy sample_TimeStamp Event.

Message #

MF Devproxy sample_TimeStamp Event

Fields #

Name	Description
`DeviceStreamName` UnicodeString
`DeviceStreamId` UInt32
`MFTStreamId` UInt32
`samplePointer` Pointer
`DriverTimeStamp` UInt64
`SystemTimeStamp` UInt64
`SampleCompletionNumber` UInt64
`FlagTimeStamp` AnsiString
`StreamName` AnsiString

Event ID 1205: Sync MFT Running (Start) - Object (ObjectPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncMFTRunning
Opcode: Start

Description

Sync MFT Running (Start) - Object (ObjectPtr).

Message #

Sync MFT Running (Start) - Object (%1)

Fields #

Name	Description
`ObjectPtr` Pointer
`WorkQueueID` UInt32

Event ID 1206: Sync MFT Running (End) - Object (ObjectPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncMFTRunning
Opcode: Stop

Description

Sync MFT Running (End) - Object (ObjectPtr).

Message #

Sync MFT Running (End) - Object (%1)

Fields #

Name	Description
`ObjectPtr` Pointer
`WorkQueueID` UInt32

Event ID 1207: Sync MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) RequestsRemaining (RemainingInputRequests) SamplesRemaining(RemainingQueuedInputSamples).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncProcessInput(MFT)
Opcode: Start

Description

Sync MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) RequestsRemaining (RemainingInputRequests) SamplesRemaining(RemainingQueuedInputSamples).

Message #

Sync MFT ProcessInput (Start) - Object (%1) Stream ID (%2) Sample (%3) RequestsRemaining (%4) SamplesRemaining(%5)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`RemainingInputRequests` UInt32
`RemainingQueuedInputSamples` UInt32

Event ID 1208: Sync MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncProcessInput(MFT)
Opcode: Stop

Description

Sync MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Message #

Sync MFT ProcessInput (End) - Object (%1) Stream ID (%2) Sample (%3) SampleTime (%4) Input Queue Length (%5) Result (%6)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`SampleTimestamp` UInt64
`InputQueueLength` UInt32
`hr` UInt32

Event ID 1209: Sync MFT ProcessOutput (Start) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncProcessOutput(MFT)
Opcode: Start

Description

Sync MFT ProcessOutput (Start) - Object (WrapperPtr).

Message #

Sync MFT ProcessOutput (Start) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer

Event ID 1210: Sync MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationSyncProcessOutput(MFT)
Opcode: Stop

Description

Sync MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Message #

Sync MFT ProcessOutput (End) - Object (%1) Sample (%2) SampleTime (%3) Result (%4)

Fields #

Name	Description
`WrapperPtr` Pointer
`SamplePtr` Pointer
`SampleTime` UInt64
`hr` UInt32

Event ID 1211: Async MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) RequestsRemaining (RemainingInputRequests) SamplesRemaining(RemainingQueuedInputSamples).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationAsyncProcessInput(MFT)
Opcode: Start

Description

Async MFT ProcessInput (Start) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) RequestsRemaining (RemainingInputRequests) SamplesRemaining(RemainingQueuedInputSamples).

Message #

Async MFT ProcessInput (Start) - Object (%1) Stream ID (%2) Sample (%3) RequestsRemaining (%4) SamplesRemaining(%5)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`RemainingInputRequests` UInt32
`RemainingQueuedInputSamples` UInt32

Event ID 1212: Async MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationAsyncProcessInput(MFT)
Opcode: Stop

Description

Async MFT ProcessInput (End) - Object (WrapperPtr) Stream ID (StreamID) Sample (SamplePtr) SampleTime (SampleTimestamp) Input Queue Length (InputQueueLength) Result (hr).

Message #

Async MFT ProcessInput (End) - Object (%1) Stream ID (%2) Sample (%3) SampleTime (%4) Input Queue Length (%5) Result (%6)

Fields #

Name	Description
`WrapperPtr` Pointer
`StreamID` UInt32
`SamplePtr` Pointer
`SampleTimestamp` UInt64
`InputQueueLength` UInt32
`hr` UInt32

Event ID 1213: Async MFT ProcessOutput (Start) - Object (WrapperPtr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationAsyncProcessOutput(MFT)
Opcode: Start

Description

Async MFT ProcessOutput (Start) - Object (WrapperPtr).

Message #

Async MFT ProcessOutput (Start) - Object (%1)

Fields #

Name	Description
`WrapperPtr` Pointer

Event ID 1214: Async MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationAsyncProcessOutput(MFT)
Opcode: Stop

Description

Async MFT ProcessOutput (End) - Object (WrapperPtr) Sample (SamplePtr) SampleTime (SampleTime) Result (hr).

Message #

Async MFT ProcessOutput (End) - Object (%1) Sample (%2) SampleTime (%3) Result (%4)

Fields #

Name	Description
`WrapperPtr` Pointer
`SamplePtr` Pointer
`SampleTime` UInt64
`hr` UInt32

Event ID 1215: MFTInfo SetWorkQueue - Object (ObjectPtr) workq (WorkQueueID).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationPipeline
Task: MediaFoundationNodeInfoSetWorkQueue

Description

MFTInfo SetWorkQueue - Object (ObjectPtr) workq (WorkQueueID).

Message #

MFTInfo SetWorkQueue - Object (%1) workq (%2)

Fields #

Name	Description
`ObjectPtr` Pointer
`WorkQueueID` UInt32

Event ID 1300: MFDS ReceiveSampleCP - Object (Object) Sample(SamplePtr) TimeStamp(Timestamp).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSReceiveSampleCP

Description

MFDS ReceiveSampleCP - Object (Object) Sample(SamplePtr) TimeStamp(Timestamp).

Message #

MFDS ReceiveSampleCP - Object (%1) Sample(%2) TimeStamp(%3)

Fields #

Name	Description
`Object` Pointer
`SamplePtr` Pointer
`Timestamp` Int64

Event ID 1301: MFDS SendSampleEvent - Object (Object) StreamID(StreamID) Sample(Sample) TimeStamp(Timestamp).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSSendSampleEvent

Description

MFDS SendSampleEvent - Object (Object) StreamID(StreamID) Sample(Sample) TimeStamp(Timestamp).

Message #

MFDS SendSampleEvent - Object (%1) StreamID(%2) Sample(%3) TimeStamp(%4)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Sample` Pointer
`Timestamp` Int64

Event ID 1302: MFDS SamplePoolPending - Object (Object) Sample(Sample) PendingCount(PendingCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSSamplePoolPending

Description

MFDS SamplePoolPending - Object (Object) Sample(Sample) PendingCount(PendingCount).

Message #

MFDS SamplePoolPending - Object (%1) Sample(%2) PendingCount(%3)

Fields #

Name	Description
`Object` Pointer
`Sample` Pointer
`PendingCount` Int32

Event ID 1303: MFDS QueueSample - Object (Object) Sample(StreamID) SampleQueueLen(Sample).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSQueueSample

Description

MFDS QueueSample - Object (Object) Sample(StreamID) SampleQueueLen(Sample).

Message #

MFDS QueueSample - Object (%1) Sample(%2) SampleQueueLen(%3)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Sample` Pointer
`TimeStamp` Int64
`QueueLen` Int32

Event ID 1304: MFDS RequestSample - Object (Object) Token(StreamID) RequestQueueLen(Token).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSRequestSample

Description

MFDS RequestSample - Object (Object) Token(StreamID) RequestQueueLen(Token).

Message #

MFDS RequestSample - Object (%1) Token(%2) RequestQueueLen(%3)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Token` Pointer
`QueueLen` Int32

Event ID 1305: MFDS FillSampleRequest - Object (Object) Sample(StreamID) Token(Sample) SampleQueueLen(Token) RequestQueueLen(SampleQueueLen).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDSFillSampleRequest

Description

MFDS FillSampleRequest - Object (Object) Sample(StreamID) Token(Sample) SampleQueueLen(Token) RequestQueueLen(SampleQueueLen).

Message #

MFDS FillSampleRequest - Object (%1) Sample(%2) Token(%3) SampleQueueLen(%4) RequestQueueLen(%5)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Sample` Pointer
`Token` Pointer
`SampleQueueLen` Int32
`RequestQueueLen` Int32

Event ID 1306: MFDS_GetTime object=Object tsOrig=tsOrig sysOrig=sysOrig tsFixed=tsFixed sysFixed=sysFixed qpcNow=rtNow tsOut=tsOut fixed=tsOut_ms.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDS_GetTime

Description

MFDS_GetTime object=Object tsOrig=tsOrig sysOrig=sysOrig tsFixed=tsFixed sysFixed=sysFixed qpcNow=rtNow tsOut=tsOut fixed=tsOut_ms.

Message #

MFDS_GetTime object=%1 tsOrig=%2 sysOrig=%3 tsFixed=%4 sysFixed=%5 qpcNow=%6 tsOut=%7 fixed=%8

Fields #

Name	Description
`Object` Pointer
`tsOrig` Int64
`sysOrig` Int64
`tsFixed` Int64
`sysFixed` Int64
`rtNow` Int64
`tsOut` Int64
`tsOut_ms` Int64
`Diff_Now_LastSys_ms` Int64
`Fixed` Int32
`State` Int32

Event ID 1307: MFDS_StateStart object=Object state=State.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDS_State
Opcode: Start

Description

MFDS_StateStart object=Object state=State.

Message #

MFDS_StateStart  object=%1 state=%2

Fields #

Name	Description
`Object` Pointer
`State` Int32

Event ID 1308: MFDS_StateStop object=Object state=State.

Provider: Microsoft-Windows-MF
Channel: MediaFoundationDS
Task: MFDS_State
Opcode: Stop

Description

MFDS_StateStop object=Object state=State.

Message #

MFDS_StateStop  object=%1 state=%2

Fields #

Name	Description
`Object` Pointer
`State` Int32

Event ID 1310: SrcPrefetch FillBuffer Start - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcPrefetchFillBuffer
Opcode: Start

Description

SrcPrefetch FillBuffer Start - Object (Object).

Message #

SrcPrefetch FillBuffer Start - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1311: SrcPrefetch FillBuffer Stop - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcPrefetchFillBuffer
Opcode: Stop

Description

SrcPrefetch FillBuffer Stop - Object (Object).

Message #

SrcPrefetch FillBuffer Stop - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1312: SrcStreamEOSState - Object (Object) ID (StreamID) old (Old state) new (New state).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcStreamEOSState

Description

SrcStreamEOSState - Object (Object) ID (StreamID) old (Old state) new (New state).

Message #

SrcStreamEOSState - Object (%1) ID (%2) old (%3) new (%4)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Oldstate` Int32
`Newstate` Int32

Event ID 1313: SrcStreamNeedMoreSamples - Object (Object) UseBuffering (UseSampleBasedBuffering) rate (Rate) IsEOS(IsEOS) UnprocessedSamples (UnprocessedSamples) prerolled (Prerolled).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcStreamNeedMoreSamples

Description

SrcStreamNeedMoreSamples - Object (Object) UseBuffering (UseSampleBasedBuffering) rate (Rate) IsEOS(IsEOS) UnprocessedSamples (UnprocessedSamples) prerolled (Prerolled).

Message #

SrcStreamNeedMoreSamples - Object (%1) UseBuffering (%2) rate (%3) IsEOS(%4) UnprocessedSamples (%5) prerolled (%6)

Fields #

Name	Description
`Object` Pointer
`UseSampleBasedBuffering` Int32
`Rate` Float
`IsEOS` Int32
`UnprocessedSamples` Int32
`Prerolled` Int32

Event ID 1314: SrcPrefetch Timeout Start - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcPrefetchTimeout
Opcode: Start

Description

SrcPrefetch Timeout Start - Object (Object).

Message #

SrcPrefetch Timeout Start - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1315: SrcPrefetch Timeout Stop - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcPrefetchTimeout
Opcode: Stop

Description

SrcPrefetch Timeout Stop - Object (Object).

Message #

SrcPrefetch Timeout Stop - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1316: SrcPrefetch Timeout Cancel - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcPrefetchTimeout

Description

SrcPrefetch Timeout Cancel - Object (Object).

Message #

SrcPrefetch Timeout Cancel - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1317: SrcStreamRequestSample Start - Object (Object) token (Token).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcStreamRequestSampleTimeout
Opcode: Start

Description

SrcStreamRequestSample Start - Object (Object) token (Token).

Message #

SrcStreamRequestSample Start - Object (%1) token (%2)

Fields #

Name	Description
`Object` Pointer
`Token` Pointer

Event ID 1318: SrcStreamRequestSample Stop - Object (Object) token (Token).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationSrcPrefetch
Task: SrcStreamRequestSampleTimeout
Opcode: Stop

Description

SrcStreamRequestSample Stop - Object (Object) token (Token).

Message #

SrcStreamRequestSample Stop - Object (%1) token (%2)

Fields #

Name	Description
`Object` Pointer
`Token` Pointer

Event ID 1350: MP4_CreateQTMovie Start - Object (Object).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationMP4
Task: MPCreateQTMovie
Opcode: Start

Description

MP4_CreateQTMovie Start - Object (Object).

Message #

MP4_CreateQTMovie Start - Object (%1)

Fields #

Name	Description
`Object` Pointer

Event ID 1351: MP4_CreateQTMovie Stop - Object (Object) (hr hr).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationMP4
Task: MPCreateQTMovie
Opcode: Stop

Description

MP4_CreateQTMovie Stop - Object (Object) (hr hr).

Message #

MP4_CreateQTMovie Stop - Object (%1) (hr %2)

Fields #

Name	Description
`Object` Pointer
`hr` Int32

Event ID 1352: MP4_SampleQueue - Object (Object) StreamID (StreamID) SampleCount(SampleCount).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationMP4
Task: MPSampleQueue

Description

MP4_SampleQueue - Object (Object) StreamID (StreamID) SampleCount(SampleCount).

Message #

MP4_SampleQueue - Object (%1) StreamID (%2) SampleCount(%3)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`SampleCount` Int32

Event ID 1353: MP4_CompactAudioSample - Object (Object) StreamID (StreamID) timestamp(timestamps) prevDur(prevDuration) nextDur(newDuration) mergedDur(mergedDuration).

Provider: Microsoft-Windows-MF
Channel: MediaFoundationMP4
Task: MPCompactAudioSample

Description

MP4_CompactAudioSample - Object (Object) StreamID (StreamID) timestamp(timestamps) prevDur(prevDuration) nextDur(newDuration) mergedDur(mergedDuration).

Message #

MP4_CompactAudioSample - Object (%1) StreamID (%2) timestamp(%3) prevDur(%4) nextDur(%5) mergedDur(%6)

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`timestamps` Int64
`prevDuration` Int64
`newDuration` Int64
`mergedDuration` Int64

Event ID 1417: DeviceMFTM InitializeTransform

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTInitialization
Opcode: Start

Description

DeviceMFTM InitializeTransform.

Message #

DeviceMFTM InitializeTransform

Fields #

Name	Description
`SymLink` UnicodeString

Event ID 1418: DeviceMFTM InitializeTransform

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTInitialization
Opcode: Start

Description

DeviceMFTM InitializeTransform.

Message #

DeviceMFTM InitializeTransform

Fields #

Name	Description
`hr` HexInt32

Event ID 1419: DeviceMFTM SetOutputType Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTSetOutputTypeInitialization
Opcode: Start

Description

DeviceMFTM SetOutputType Start.

Message #

DeviceMFTM SetOutputType Start

Fields #

Name	Description
`PinId` UInt32
`MediaType` AnsiString
`PinState` UInt32

Event ID 1420: DeviceMFTM SetOutputType Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTSetOutputTypeInitialization
Opcode: Stop

Description

DeviceMFTM SetOutputType Stop.

Message #

DeviceMFTM SetOutputType Stop

Fields #

Name	Description
`hr` HexInt32

Event ID 1421: DeviceMFTM OnInputStreamState Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTInputStreamStateChanged
Opcode: Start

Description

DeviceMFTM OnInputStreamState Start.

Message #

DeviceMFTM OnInputStreamState Start

Fields #

Name	Description
`PinId` UInt32
`MediaType` AnsiString
`PinState` UInt32

Event ID 1422: DeviceMFTM OnInputStreamState Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTInputStreamStateChanged
Opcode: Stop

Description

DeviceMFTM OnInputStreamState Stop.

Message #

DeviceMFTM OnInputStreamState Stop

Fields #

Name	Description
`hr` HexInt32

Event ID 1423: DeviceMFTM ProcessOutput Event

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTProcessOutput

Description

DeviceMFTM ProcessOutput Event.

Message #

DeviceMFTM ProcessOutput Event

Fields #

Name	Description
`Object` Pointer
`StreamID` Int32
`Sample` Pointer
`Timestamp` Int64

Event ID 1424: DeviceMFTM Error Thrown

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: MediaFoundationDeviceMFTMErrorThrown

Description

DeviceMFTM Error Thrown.

Message #

DeviceMFTM Error Thrown

Fields #

Name	Description
`hr` HexInt32

Event ID 1425: DeviceMFTM DeviceTransform SetOutputType Start

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: DeviceMFTMDeviceTransformSetOutputType
Opcode: Start

Description

DeviceMFTM DeviceTransform SetOutputType Start.

Message #

DeviceMFTM DeviceTransform SetOutputType Start

Fields #

Name	Description
`PinId` UInt32
`MediaType` AnsiString
`PinState` UInt32

Event ID 1426: DeviceMFTM DeviceTransform SetOutputType Stop

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: DeviceMFTMDeviceTransformSetOutputType
Opcode: Stop

Description

DeviceMFTM DeviceTransform SetOutputType Stop.

Message #

DeviceMFTM DeviceTransform SetOutputType Stop

Fields #

Name	Description
`hr` HexInt32

Event ID 1427: DeviceMFTM DeviceTransform OutputSample

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: DeviceMFTMDeviceTransformOutputSample

Description

DeviceMFTM DeviceTransform OutputSample.

Message #

DeviceMFTM DeviceTransform OutputSample

Fields #

Name	Description
`DMFTPtr` Pointer
`StreamId` UInt32
`Timestamp` UInt64
`Duration` UInt64
`CaptureTimestamp` UInt64
`CaptureTimestampPresent` Boolean
`CaptureDelta` Int64

Event ID 1428: DeviceMFTM DeviceTransform SetWorkQueue

Provider: Microsoft-Windows-MF
Channel: MF_MediaFoundationDeviceMFT
Task: DeviceMFTMDeviceTransformSetWorkQueue

Description

DeviceMFTM DeviceTransform SetWorkQueue.

Message #

DeviceMFTM DeviceTransform SetWorkQueue

Fields #

Name	Description
`DMFTPtr` Pointer
`WorkQueueId` UInt32
`BasePrioirity` Int32

Event ID 1428

Provider: Microsoft-Windows-MF
Channel: Operational
Task: DeviceMFTMDeviceTransformSetWorkQueue

Description

DeviceMFTM DeviceTransform SetWorkQueue.

Fields #

Name	Description
`DMFTPtr` Pointer
`WorkQueueId` UInt32
`BasePrioirity` Int32

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID a7364e1a-894f-4b3d-a930-2ed9c8c4c811

Defined in mf.dll, which carries the event manifest.

Observed on:

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)