detection.wiki

Microsoft-Windows-Security-UserConsentVerifier

EventTitleChannelSampleRule
100A user consent verification request using a biometric fingerprint succeeded.AuditNN
101A user consent verification request using a biometric fingerprint failed.AuditNN

Event ID 100: A user consent verification request using a biometric fingerprint succeeded.

#
Channel
Audit
Task
Verification
Opcode
Result

Message #

A user consent verification request using a biometric fingerprint succeeded.

Application: %1
Purpose for consent: %2

Fields #

NameDescription
AppName UnicodeString
AppMessage UnicodeString

Event ID 101: A user consent verification request using a biometric fingerprint failed.

#
Channel
Audit
Task
Verification
Opcode
Result

Message #

A user consent verification request using a biometric fingerprint failed.

Application: %1
Purpose for consent: %2
Reason for consent failure: %3

Fields #

NameDescription
AppName UnicodeString
AppMessage UnicodeString
VerificationResult UInt32

Provenance

ETW provider GUID 40783728-8921-45d0-b231-919037b4b4fd

Defined in Windows.Security.Credentials.UI.UserConsentVerifier.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB