Microsoft-Windows-Sensors-Core
83 events across 1 channel
Event ID 1001: [SensorsCx] Sensor Class extension failed to initalize file context policy for DeviceInit (WdfDeviceInit).
#Event ID 1002: [SensorsCx] Device (WdfDevice) does not implement all required sensor DDI callbacks.
#Event ID 1003: [SensorsCx] Device (WdfDevice) Supports state change notification=(IsStateChangeSupported).
#Event ID 1004: [SensorsCx] Device (WdfDevice) is power policy owner=(IsDriverPowerPolicyOwner).
#Event ID 1005: [SensorsCx] Sensor (SENSOROBJECT) exposed by Device (WdfDevice) supports SensorType=(SensorType) with PersistentUniqueID=(PersistentUniqueID).
#Event ID 1006: [SensorsCx] Custom Sensor (SENSOROBJECT) exposed by Device (WdfDevice) with SubType=(SENSOROBJECT) and PersistentUniqueID=(VendorDefinedSubType).
#Event ID 1007: [SensorsCx] Sensor (SENSOROBJECT) with PersistentUniqueID=(PersistentUniqueID) exposed by Device=(WdfDevice) missing vendor defined sub type.
#Event ID 1008: [SensorsCx] Published device interface of Class=(SensorType) with ReferenceString=(PersistentUniqueID) for Sensor (SENSOROBJECT) exposed by Device (WdfDevice).
#Event ID 1009: [SensorsCx] Sensor Category missing in Sensor (SENSOROBJECT).
#Event ID 1010: [SensorsCx] Found Enumeration Property({FmtId}-Pid) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice).
#Event ID 1011: [SensorsCx] Default Report Interval (IntervalMs) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice) is <= 1ms.
#Event ID 1012: [SensorsCx] Minimum Report Interval (IntervalMs) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice) is 0.
#Event ID 1013: [SensorsCx] MaxDataSize (MaxDataSize) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice) is <= sizeof(SENSOR_COLLECTION_LIST).
#Event ID 1014: [SensorsCx] PKEY_Sensor_MaximumDataFieldSize_Bytes value= in Sensor exposed by Device is incorrect.
#Description
[SensorsCx] PKEY_Sensor_MaximumDataFieldSize_Bytes value=(MaxDataSize) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice) is incorrect. Please use CollectionsListGetMarshalledSize() instead of SENSOR_COLLECTION_LIST_SIZE() to compute the value for that property.
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SENSOROBJECT Pointer | |
MaxDataSize UInt32 |
Event ID 1015: [SensorsCx] Batch Size (BatchSize) in Sensor (SENSOROBJECT) exposed by Device (WdfDevice) is more than the maximum amount.
#Event ID 1016: [SensorsCx] PKEY_SensorData_SupportedActivityStates not exposed by activity sensor
#Description
[SensorsCx] PKEY_SensorData_SupportedActivityStates not exposed by activity sensor.
Message #
Event ID 1017: [SensorsCx] PKEY_Sensor_Power_Milliwatts not exposed by activity sensor
#Description
[SensorsCx] PKEY_Sensor_Power_Milliwatts not exposed by activity sensor.
Message #
Event ID 1018: [SensorsCx] PKEY_SensorData_SupportedStepTypes not exposed by pedometer
#Description
[SensorsCx] PKEY_SensorData_SupportedStepTypes not exposed by pedometer.
Message #
Event ID 1019: [SensorsCx] Get Data Interval DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pIntervalMs=(pIntervalMs)].
#Event ID 1020: [SensorsCx] Set Data Interval DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) IntervalMs=(IntervalMs)].
#Event ID 1021: [SensorsCx] Get Data Thresholds DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pThresholds=(pThresholds) pSize=(pSize)].
#Event ID 1022: [SensorsCx] Set Data Thresholds DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pThresholds=(pThresholds)].
#Event ID 1023: [SensorsCx] Get Properties DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pProperties=(pProperties) pSize=(pSize)].
#Event ID 1024: [SensorsCx] Get Supported Datafields DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pDatafields=(pProperties) pSize=(pSize)].
#Event ID 1025: [SensorsCx] Get Datafield Properties DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pDatafield=(pDatafield) pProperties=(pProperties) pSize=(pSize)].
#Description
[SensorsCx] Get Datafield Properties DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pDatafield=(pDatafield) pProperties=(pProperties) pSize=(pSize)].
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SENSOROBJECT Pointer | |
pDatafield Pointer | |
pProperties Pointer | |
pSize Pointer | |
NtStatus UInt32 |
Event ID 1026: [SensorsCx] Start Sensor DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1027: [SensorsCx] Stop Sensor DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1028: [SensorsCx] Start Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1029: [SensorsCx] Stop Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1030: [SensorsCx] Start Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pHistoryCollection=(pHistoryCollection) Size=(Size)].
#Description
[SensorsCx] Start Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pHistoryCollection=(pHistoryCollection) Size=(Size)].
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SENSOROBJECT Pointer | |
pHistoryCollection Pointer | |
Size UInt32 | |
NtStatus UInt32 |
Event ID 1031: [SensorsCx] Start Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) pSize=(pBytesWritten)].
#Event ID 1032: [SensorsCx] Clear Sensor History DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1033: [SensorsCx] Start Set Report Latency DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT) ReportLatencyMs=(ReportLatencyMs)].
#Event ID 1034: [SensorsCx] Enable Wake DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1035: [SensorsCx] Disable Wake DDI call failed with NTSTATUS=(NtStatus) [Device=(WdfDevice) Sensor=(SENSOROBJECT)].
#Event ID 1036: [SensorsCx] Sensor Rundown: Device=(WdfDevice) Sensor=(SENSOROBJECT) Type=(Type) Category=(Category) SubType=(SubType) UniqueId=(PeristentUniqueId) Name=(Name) Model=(Model) Manufacturer=(Manufactu...
#Description
[SensorsCx] Sensor Rundown: Device=(WdfDevice) Sensor=(SENSOROBJECT) Type=(Type) Category=(Category) SubType=(SubType) UniqueId=(PeristentUniqueId) Name=(Name) Model=(Model) Manufacturer=(Manufacturer).
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SENSOROBJECT Pointer | |
Type GUID | |
Category GUID | |
SubType GUID | |
PeristentUniqueId GUID | |
Name UnicodeString | |
Model UnicodeString | |
Manufacturer UnicodeString |
Event ID 1037: [SensorsCx] Sensor opened: Type=(Type) UniqueId=(PeristentUniqueId) ProcessId=(PeristentUniqueId) Status=(ProcessId).
#Event ID 1038: [SensorsCx] Sensor opened: Type=(Type) UniqueId=(PeristentUniqueId) ProcessId=(PeristentUniqueId) Status=(ProcessId).
#Event ID 1039: [SensorsCx] Sensor started: Type=(Type) UniqueId=(PeristentUniqueId) ProcessId=(PeristentUniqueId) ReportIntervalMs=(ProcessId) ReportLatency=(ReportIntervalMs) IsStreaming=(ReportLatencyMs) Status...
#Description
[SensorsCx] Sensor started: Type=(Type) UniqueId=(PeristentUniqueId) ProcessId=(PeristentUniqueId) ReportIntervalMs=(ProcessId) ReportLatency=(ReportIntervalMs) IsStreaming=(ReportLatencyMs) Status=(IsStreaming).
Message #
Fields #
| Name | Description |
|---|---|
Type GUID | |
PeristentUniqueId GUID | |
ProcessId UInt32 | |
ReportIntervalMs UInt32 | |
ReportLatencyMs UInt32 | |
IsStreaming Boolean | |
NtStatus UInt32 |
Event ID 1040: [SensorsCx] Sensor stopped: Type=(Type) UniqueId=(PeristentUniqueId) ProcessId=(PeristentUniqueId) Status=(ProcessId).
#Event ID 1100: [SensorsCx] Sensor Subscriber Rundown: UniqueId=(PeristentUniqueId) ProcessId=(ProcessId) ReportIntervalMs=(ReportIntervalMs) ReportLatency=(ReportLatencyMs) IsStreaming=(IsStreaming).
#Description
[SensorsCx] Sensor Subscriber Rundown: UniqueId=(PeristentUniqueId) ProcessId=(ProcessId) ReportIntervalMs=(ReportIntervalMs) ReportLatency=(ReportLatencyMs) IsStreaming=(IsStreaming).
Message #
Fields #
| Name | Description |
|---|---|
PeristentUniqueId GUID | |
ProcessId UInt32 | |
ReportIntervalMs UInt32 | |
ReportLatencyMs UInt32 | |
IsStreaming Boolean |
Event ID 1101: [Sensors] Found Interface=(Interface).
#Event ID 1102: [Sensors] Picked Interface=(Interface) as the default interface.
#Event ID 1103: [Sensors] Interface=(Interface) marked as primary.
#Event ID 1104: [Sensors] Interface=(Interface) marked as integrated.
#Event ID 1105: [Sensors] Interface=(Interface) has power usage set to (PowerUsage).
#Event ID 1106: [Sensors] Interface=(Interface) marked as supporting history.
#Event ID 1107: [Sensors] Interface=(Interface) marked as Auto-brightness preferred.
#Event ID 1108: [Sensors] Interface=(Interface) marked as color capable.
#Event ID 1200: [SensorsHid] Found Sensor=(Usage) WdfDevice=(WdfDevice).
#Event ID 1201: [SensorsHid] Skipping unsupported Sensor=(Usage) WdfDevice=(WdfDevice).
#Event ID 1202: [SensorsHid] Incorrect Report ID found in capabilities and reports of Sensor=(SensorUsage) don't match.
#Description
[SensorsHid] Incorrect Report ID found in capabilities and reports of Sensor=(SensorUsage) don't match. Report ID found on capabilities is (ReportIdInCaps). Report ID found on report is (ReportIdInReport). WdfDevice=(WdfDevice).
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SensorUsage UInt16 | |
ReportIdInCaps UInt8 | |
ReportIdInReport UInt8 |
Event ID 1203: [SensorsHid] Sensor=(SensorUsage) with ReportId=(ReportId) supports history.
#Event ID 1204: [SensorsHid] Feature Usage=(Usage) reported by Sensor=(SensorUsage) with ReportId=(ReportId) must be a selector usage.
#Event ID 1205: [SensorsHid] Datafield {fmtid-pid} was added for input Usage=(Usage) reported by Sensor=(SensorUsage) with ReportId=(ReportId) must be a selector usage.
#Event ID 1206: [SensorsHid] Property {fmtid-pid} was added for input Usage=(Usage) reported by Sensor=(SensorUsage) with ReportId=(ReportId) must be a selector usage.
#Event ID 1207: [SensorsHid] Threshold {fmtid-pid} was added for input Usage=(Usage) reported by Sensor=(SensorUsage) with ReportId=(ReportId) must be a selector usage.
#Event ID 1208: [SensorsHid] Timestamp usage reported by Sensor= with ReportId= is ignored since it does not have right capabilities.
#Description
[SensorsHid] Timestamp usage reported by Sensor=(SensorUsage) with ReportId=(ReportId) is ignored since it does not have right capabilities. (Expected Report Size=BitSize) (Actual Report Size=ExpectedBitSize) (Expected Report Count=ReportCount) (Actual Report Count=ExpectedReportCount) (Expected Exponent=Exponent) (Actual Exponent=ExpectedExponent). WdfDevice=(WdfDevice)
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SensorUsage UInt16 | |
ReportId UInt8 | |
BitSize UInt16 | |
ExpectedBitSize UInt16 | |
ReportCount UInt16 | |
ExpectedReportCount UInt16 | |
Exponent UInt16 | |
ExpectedExponent UInt16 |
Event ID 1209: [SensorsHid] Report Interval is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1210: [SensorsHid] Report Interval is missing in Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1211: [SensorsHid] Reporting State is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1212: [SensorsHid] Reporting State is missing in Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1213: [SensorsHid] Power State is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1214: [SensorsHid] Power State is missing in Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1215: [SensorsHid] Report Latency is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1216: [SensorsHid] Report Latency is marked as not supported by Sensor=(SensorUsage) with ReportId=(ReportId) since timestamp is missing.
#Event ID 1217: [SensorsHid] Sensor State is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1218: [SensorsHid] Wake is supported by Sensor=(SensorUsage) with ReportId=(ReportId).
#Event ID 1219: [SensorsHid] IsWakeReportingStateSupported=(IsWakeReportingStateSupported) and IsWakePowerStateSupported=(IsWakePowerStateSupported).
#Description
[SensorsHid] IsWakeReportingStateSupported=(IsWakeReportingStateSupported) and IsWakePowerStateSupported=(IsWakePowerStateSupported). Wake is not supported by Sensor=(SensorUsage) with ReportId=(ReportId). WdfDevice=(WdfDevice).
Message #
Fields #
| Name | Description |
|---|---|
WdfDevice Pointer | |
SensorUsage UInt16 | |
ReportId UInt8 | |
IsWakeReportingStateSupported Boolean | |
IsWakePowerStateSupported Boolean |
Event ID 1220: [SensorsHid] Incorrect Report ID found in report (ReportIdInReport).
#Event ID 1221: [SensorsHid] Failed to get input report from Sensor=(SensorUsage) with ReportId=(ReportId) NTSTATUS=(NtStatus).
#Event ID 1222: [SensorsHid] Failed to get feature report from Sensor=(SensorUsage) with ReportId=(ReportId) NTSTATUS=(NtStatus).
#Event ID 1223: [SensorsHid] Failed to set feature report from Sensor=(SensorUsage) with ReportId=(ReportId) NTSTATUS=(NtStatus).
#Event ID 1224: [SensorsHid] Sensor=(SensorUsage) with ReportId=(ReportId) is color capable.
#Event ID 1300: [SensorsHid] Using Accelerometer=(Interface) to create Software SDO.
#Event ID 1301: [SensorsHid] Using Hardware Offloaded SDO=(Interface) to create hardware SDO.
#Event ID 1302: [SensorsHid] Removing SDO based on sensor=(Interface).
#Event ID 1401: [SensorService] New sensor selected for Instant On/Off with Interface=(Interface), FriendlyName=(FriendlyName).
#Event ID 1402: [SensorService] Sensor started for Instant On/Off with Interface=(Interface) AbsoluteDistanceThreshold=(AbsoluteDistanceThreshold).
#Event ID 1403: [SensorService] Sensor stopped for Instant On/Off with Interface=(Interface).
#Event ID 1404: [SensorService] Sensor reported new data for Instant On/Off with Interface=(Interface) IsValid=(IsPresent) IsPresent=(IsEngaged) DetectedDistance=(IsOnlookerPresent).
#Description
[SensorService] Sensor reported new data for Instant On/Off with Interface=(Interface) IsValid=(IsPresent) IsPresent=(IsEngaged) DetectedDistance=(IsOnlookerPresent).
Message #
Fields #
| Name | Description |
|---|---|
Interface UnicodeString | |
IsPresent Boolean | |
IsEngaged Boolean | |
IsOnlookerPresent Boolean | |
DetectedDistance UInt32 |
Event ID 1405: [SensorService] Instant On/Off has signaled for wake/lock with SignalType=(SignalType).
#Event ID 1406: [SensorService] Instant On/Off setting has been changed by user with Setting=(Setting) OldValue=(OldValue) NewValue=(NewValue).
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 751c292b-23e6-58cf-1fd4-38f8512c66c2
Defined in SensorsUtilsV2.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.3323, captured 2026-06-02