Microsoft-Windows-StartNameRes
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | task_0Opcode_StartNameRes | Operational | N | N |
Provenance
ETW provider GUID 277c9237-51d8-5c1c-b089-f02c683e5ba7
Defined in afd.sys, the binary that emits these events.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4171, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB