Microsoft-Windows-SetupUGC
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1001 | SetupUGC. | Analytic | N | N |
| 1002 | SetupUGC. | Analytic | N | N |
| 2001 | Running Processors for pass "Pass". | Analytic | N | N |
| 2002 | Finished running processors for pass with status ErrorCode. | Analytic | N | N |
| 3001 | Running Processor "Processor". | Analytic | N | N |
| 3002 | Finished running processor with status ErrorCode. | Analytic | N | N |
Event ID 1001: SetupUGC.
#Event ID 1002: SetupUGC.
#Event ID 2001: Running Processors for pass "Pass".
#Event ID 2002: Finished running processors for pass with status ErrorCode.
#Event ID 3001: Running Processor "Processor".
#Provenance
ETW provider GUID 75ebc33e-0870-49e5-bdce-9d7028279489
Defined in SetupUGC.exe, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.3624, captured 2026-06-02 — Manifest XML pack, 2.0 MB