Microsoft-Windows-Serial-ClassExtension-V2

Event	Title	Channel	Sample	Rule
1	SerCx2 loaded (ControlDeviceName).	Analytic	N	N
2	SerCx2 failed to load (Status).	System	N	N
3	SerCx2 unloading.	Analytic	N	N
4	Starting rundown.	Analytic	N	N
5	Device rundown (Device).	Analytic	N	N
6	Rundown complete.	Analytic	N	N
7	Device created (Device).	Analytic	N	N
8	Device destroyed (Device).	Analytic	N	N
9	TransmitSM (TransferSmContext) Event: Event.	Analytic	N	N
10	TransmitSM (TransferSmContext) Transition: FromState[Event] -> ToState.	Analytic	N	N
11	Invalid Transition TransmitSM (TransferSmContext) Transition: FromState[Event] …	Analytic	N	N
12	ReceiveSM (TransferSmContext) Event: Event.	Analytic	N	N
13	ReceiveSM (TransferSmContext) Transition: FromState[Event] -> ToState.	Analytic	N	N
14	Invalid Transition ReceiveSM (TransferSmContext) Transition: FromState[Event] -> …	Analytic	N	N
15	Processing IOCTL.	Analytic	N	N
16	Completed IOCTL with Status.	Analytic	N	N
17	Transmit I/O request for Length bytes started.	Analytic	N	N
18	Transmit I/O request completed (Status).	Analytic	N	N
19	Transmit I/O chunk of Length bytes using TransferModeEvent.	Analytic	N	N
20	Receive I/O request for Length bytes started.	Analytic	N	N
21	Receive I/O request completed (Status).	Analytic	N	N
22	Receive I/O chunk of Length bytes using TransferModeEvent.	Analytic	N	N
23	Saved BytesSaved bytes before exiting D0.	Analytic	N	N
24	Transitioning to system power state TargetState.	Analytic	N	N
25	Transitioning to device power state TargetState.	Analytic	N	N
26	System power state transition TargetState complete (Status).	Analytic	N	N
27	Device power state transition TargetState complete (Status).	Analytic	N	N
28	Event Event.	Analytic	N	N
29	TransmitSM (TransferSmContext) Event: Event.	Analytic	N	N
30	TransmitSM (TransferSmContext) Transition: FromState[Event] -> ToState.	Analytic	N	N
31	ReceiveSM (TransferSmContext) Event: Event.	Analytic	N	N
32	ReceiveSM (TransferSmContext) Transition: FromState[Event] -> ToState.	Analytic	N	N

Event ID 1: SerCx2 loaded (ControlDeviceName).

Channel: Analytic
Opcode: Info

Message #

SerCx2 loaded (%1).

Fields #

Name	Description
`ControlDeviceName` UnicodeString

Event ID 2: SerCx2 failed to load (Status).

Channel: System
Opcode: Info

Message #

SerCx2 failed to load (%2).

Fields #

Name	Description
`ControlDeviceName` UnicodeString
`Status` HexInt32	NTSTATUS reference

Event ID 3: SerCx2 unloading.

Channel: Analytic
Opcode: Info

Event ID 4: Starting rundown.

Channel: Analytic
Task: Rundownevents.
Opcode: Start

Event ID 5: Device rundown (Device).

Channel: Analytic
Task: Rundownevents.

Message #

Device rundown (%1).

Fields #

Name	Description
`Device` Pointer
`TransmitTransferSmContext` Pointer
`ReceiveTransferSmContext` Pointer
`DeviceInstanceId` UnicodeString

Event ID 6: Rundown complete.

Channel: Analytic
Task: Rundownevents.
Opcode: Stop

Event ID 7: Device created (Device).

Channel: Analytic
Opcode: Info

Message #

Device created (%1).

Fields #

Name	Description
`Device` Pointer
`TransmitTransferSmContext` Pointer
`ReceiveTransferSmContext` Pointer
`DeviceInstanceId` UnicodeString

Event ID 8: Device destroyed (Device).

Channel: Analytic
Opcode: Info

Message #

Device destroyed (%1).

Fields #

Name	Description
`Device` Pointer

Event ID 9: TransmitSM (TransferSmContext) Event: Event.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

TransmitSM (%1) Event: %2

Fields #

Name	Description
`TransferSmContext` Pointer
`Event` HexInt32

Event ID 10: TransmitSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

TransmitSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Event ID 11: Invalid Transition TransmitSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.

Message #

Invalid Transition TransmitSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Event ID 12: ReceiveSM (TransferSmContext) Event: Event.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

ReceiveSM (%1) Event: %2

Fields #

Name	Description
`TransferSmContext` Pointer
`Event` HexInt32

Event ID 13: ReceiveSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

ReceiveSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Event ID 14: Invalid Transition ReceiveSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.

Message #

Invalid Transition ReceiveSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Event ID 15: Processing IOCTL.

Channel: Analytic
Task: IOCTLrequest.
Opcode: Start

Message #

Processing %2.

Fields #

Name	Description
`Device` Pointer
`IOCTL` HexInt32
`IOCTLInputBufferLength` HexInt32
`IOCTLInputBuffer` Binary

Event ID 16: Completed IOCTL with Status.

Channel: Analytic
Task: IOCTLrequest.
Opcode: Stop

Message #

Completed %2 with %3.

Fields #

Name	Description
`Device` Pointer
`IOCTL` HexInt32
`Status` HexInt32	NTSTATUS reference
`IOCTLOutputBufferLength` HexInt32
`IOCTLOutputBuffer` Binary

Event ID 17: Transmit I/O request for Length bytes started.

Channel: Analytic
Task: I/Orequest.
Opcode: Start

Message #

Transmit I/O request for %2 bytes started.

Fields #

Name	Description
`Device` Pointer
`Length` UInt64

Event ID 18: Transmit I/O request completed (Status).

Channel: Analytic
Task: I/Orequest.
Opcode: Stop

Message #

Transmit I/O request completed (%2).

Fields #

Name	Description
`Device` Pointer
`Status` HexInt32	NTSTATUS reference
`Information` UInt64

Event ID 19: Transmit I/O chunk of Length bytes using TransferModeEvent.

Channel: Analytic
Task: I/Orequest.
Opcode: I/Opayloadoperation.

Message #

Transmit I/O chunk of %3 bytes using %4.

Fields #

Name	Description
`Device` Pointer
`Offset` UInt64
`Length` UInt32
`TransferModeEvent` HexInt32
`Payload` Binary

Event ID 20: Receive I/O request for Length bytes started.

Channel: Analytic
Task: I/Orequest.
Opcode: Start

Message #

Receive I/O request for %2 bytes started.

Fields #

Name	Description
`Device` Pointer
`Length` UInt64

Event ID 21: Receive I/O request completed (Status).

Channel: Analytic
Task: I/Orequest.
Opcode: Stop

Message #

Receive I/O request completed (%2).

Fields #

Name	Description
`Device` Pointer
`Status` HexInt32	NTSTATUS reference
`Information` UInt64

Event ID 22: Receive I/O chunk of Length bytes using TransferModeEvent.

Channel: Analytic
Task: I/Orequest.
Opcode: I/Opayloadoperation.

Message #

Receive I/O chunk of %3 bytes using %4.

Fields #

Name	Description
`Device` Pointer
`Offset` UInt64
`Length` UInt32
`TransferModeEvent` HexInt32
`Payload` Binary

Event ID 23: Saved BytesSaved bytes before exiting D0.

Channel: Analytic
Task: I/Orequest.

Description

Saved BytesSaved bytes before exiting D0. Total TotalBytes bytes.

Message #

Saved %2 bytes before exiting D0. Total %3 bytes.

Fields #

Name	Description
`Device` Pointer
`BytesSaved` UInt32
`TotalBytes` UInt32

Event ID 24: Transitioning to system power state TargetState.

Channel: Analytic
Task: Powerstatetransitions.
Opcode: Start

Message #

Transitioning to system power state %2.

Fields #

Name	Description
`Device` Pointer
`TargetState` HexInt32

Event ID 25: Transitioning to device power state TargetState.

Channel: Analytic
Task: Powerstatetransitions.
Opcode: Start

Message #

Transitioning to device power state %2.

Fields #

Name	Description
`Device` Pointer
`TargetState` HexInt32

Event ID 26: System power state transition TargetState complete (Status).

Channel: Analytic
Task: Powerstatetransitions.
Opcode: Stop

Message #

System power state transition %2 complete (%3).

Fields #

Name	Description
`Device` Pointer
`TargetState` HexInt32
`Status` HexInt32	NTSTATUS reference

Event ID 27: Device power state transition TargetState complete (Status).

Channel: Analytic
Task: Powerstatetransitions.
Opcode: Stop

Message #

Device power state transition %2 complete (%3).

Fields #

Name	Description
`Device` Pointer
`TargetState` HexInt32
`Status` HexInt32	NTSTATUS reference

Event ID 28: Event Event.

Channel: Analytic
Task: I/Orequest.

Message #

Event %2.

Fields #

Name	Description
`Device` Pointer
`Event` HexInt32

Event ID 29: TransmitSM (TransferSmContext) Event: Event.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

TransmitSM (%1) Event: %2

Fields #

Name	Description
`TransferSmContext` Pointer
`Event` HexInt32

Event ID 30: TransmitSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

TransmitSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Event ID 31: ReceiveSM (TransferSmContext) Event: Event.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

ReceiveSM (%1) Event: %2

Fields #

Name	Description
`TransferSmContext` Pointer
`Event` HexInt32

Event ID 32: ReceiveSM (TransferSmContext) Transition: FromState[Event] -> ToState.

Channel: Analytic
Task: I/Orequest.
Opcode: I/OStateMachineoperation.

Message #

ReceiveSM (%1) Transition: %2[%3] -> %4

Fields #

Name	Description
`TransferSmContext` Pointer
`FromState` HexInt32
`Event` HexInt32
`ToState` HexInt32

Provenance

ETW provider GUID eee173ef-7ed2-45de-9877-01c70a852fbd

Defined in SerCx2.sys, the binary that emits these events.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1150, captured 2026-06-02 — Manifest XML pack, 2.0 MB