Microsoft-Windows-NFC-ClassExtension

Event	Title	Channel	Sample	Rule
1	Write NCI packet payload (MessageType: {MessageType}; PacketBoundaryFlag: …	Analytical	N	N
2	Received NCI packet payload (MessageType: {MessageType}; PacketBoundaryFlag: …	Analytical	N	N
3	Write NCI packet (MessageType: {MessageType}; PacketBoundaryFlag: …	Analytical	N	N
4	Received NCI packet (MessageType: {MessageType}; PacketBoundaryFlag: …	Analytical	N	N
101	NFP client created (FileObject: {FileObject}; Role: {Role}).	Analytical	N	N
102	NFP client destroyed (FileObject: {FileObject}; Role: {Role}).	Analytical	N	N
103	NFP set payload (FileObject: {FileObject}; PayloadSize: {PayloadSize}).	Analytical	N	N
104	NFP get next subscribed message start (FileObject: {FileObject}).	Analytical	N	N
105	NFP get next subscribed message completed (FileObject: {FileObject}; Status: …	Analytical	N	N
106	NFP get next transmitted message start (FileObject: {FileObject}).	Analytical	N	N
107	NFP get next transmitted message completed (FileObject: {FileObject}; Status: …	Analytical	N	N
201	Power set radio state (RadioIsOn: {RadioIsOn}).	Analytical	N	N
301	RF interface initialization started.	Analytical	N	N
302	RF interface initialization completed (Status: {Status}).	Analytical	N	N
303	RF firmware version is: {Version}.	Analytical	N	N
304	RF firmware download started (File: {FirmwareFile}; ForceDownload: {Force}).	Analytical	N	N
305	RF firmware download completed (Status: {Status}).	Analytical	N	N
306	RF event: {RfArrivalDepartureEvent}.	Analytical	N	N
307	RF NDEF tag read start.	Analytical	N	N
308	RF NDEF tag read stop (Status: {Status}; Length: {Length}).	Analytical	N	N
309	RF NDEF tag write start (Length: {Length}).	Analytical	N	N
310	RF NDEF tag write stop (Status: {Status}).	Analytical	N	N
401	Device registry settings.	Analytical	N	N
402	Device persisted registry settings.	Analytical	N	N

Event ID 1: Write NCI packet payload (MessageType: {MessageType}; PacketBoundaryFlag: {PacketBoundaryFlag}; Size: {PacketSize}).

Channel: Analytical

Fields #

Name	Description
`MessageType`
`PacketBoundaryFlag`
`PacketSize`

Event ID 2: Received NCI packet payload (MessageType: {MessageType}; PacketBoundaryFlag: {PacketBoundaryFlag}; Size: {PacketSize}).

Channel: Analytical

Fields #

Name	Description
`MessageType`
`PacketBoundaryFlag`
`PacketSize`

Event ID 3: Write NCI packet (MessageType: {MessageType}; PacketBoundaryFlag: {PacketBoundaryFlag}; Size: {PacketSize}).

Channel: Analytical

Fields #

Name	Description
`MessageType`
`PacketBoundaryFlag`
`PacketSize`

Event ID 4: Received NCI packet (MessageType: {MessageType}; PacketBoundaryFlag: {PacketBoundaryFlag}; Size: {PacketSize}).

Channel: Analytical

Fields #

Name	Description
`MessageType`
`PacketBoundaryFlag`
`PacketSize`

Event ID 101: NFP client created (FileObject: {FileObject}; Role: {Role}).

Channel: Analytical

Fields #

Name	Description
`FileObject`
`Role`

Event ID 102: NFP client destroyed (FileObject: {FileObject}; Role: {Role}).

Channel: Analytical

Fields #

Name	Description
`FileObject`
`Role`

Event ID 103: NFP set payload (FileObject: {FileObject}; PayloadSize: {PayloadSize}).

Channel: Analytical

Fields #

Name	Description
`FileObject`
`PayloadSize`

Event ID 104: NFP get next subscribed message start (FileObject: {FileObject}).

Channel: Analytical

Fields #

Name	Description
`FileObject`

Event ID 105: NFP get next subscribed message completed (FileObject: {FileObject}; Status: {Status}; Information: {Information}).

Channel: Analytical

Fields #

Name	Description
`FileObject`
`Status`	NTSTATUS reference
`Information`

Event ID 106: NFP get next transmitted message start (FileObject: {FileObject}).

Channel: Analytical

Fields #

Name	Description
`FileObject`

Event ID 107: NFP get next transmitted message completed (FileObject: {FileObject}; Status: {Status}).

Channel: Analytical

Fields #

Name	Description
`FileObject`
`Status`	NTSTATUS reference

Event ID 201: Power set radio state (RadioIsOn: {RadioIsOn}).

Channel: Analytical

Fields #

Name	Description
`RadioIsOn`

Event ID 301: RF interface initialization started.

Channel: Analytical

Event ID 302: RF interface initialization completed (Status: {Status}).

Channel: Analytical

Fields #

Name	Description
`Status`	NTSTATUS reference

Event ID 303: RF firmware version is: {Version}.

Channel: Analytical

Fields #

Name	Description
`Version`

Event ID 304: RF firmware download started (File: {FirmwareFile}; ForceDownload: {Force}).

Channel: Analytical

Fields #

Name	Description
`FirmwareFile`
`Force`

Event ID 305: RF firmware download completed (Status: {Status}).

Channel: Analytical

Fields #

Name	Description
`Status`	NTSTATUS reference

Event ID 306: RF event: {RfArrivalDepartureEvent}.

Channel: Analytical

Fields #

Name	Description
`RfArrivalDepartureEvent`

Event ID 307: RF NDEF tag read start.

Channel: Analytical

Event ID 308: RF NDEF tag read stop (Status: {Status}; Length: {Length}).

Channel: Analytical

Fields #

Name	Description
`Status`	NTSTATUS reference
`Length`

Event ID 309: RF NDEF tag write start (Length: {Length}).

Channel: Analytical

Fields #

Name	Description
`Length`

Event ID 310: RF NDEF tag write stop (Status: {Status}).

Channel: Analytical

Fields #

Name	Description
`Status`	NTSTATUS reference

Event ID 401: Device registry settings.

Channel: Analytical

Event ID 402: Device persisted registry settings.

Channel: Analytical