Microsoft-Windows-NetworkGCW

Event	Title	Channel	Sample	Rule
8001	ShowGCWStop	Operational	N	N

Event ID 8001: ShowGCWStop

Channel: Operational
Task: ShowGCW
Opcode: Stop

Provenance

ETW provider GUID be932b00-0f8e-4386-ab89-873f7d0274aa

Defined in connect.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB