detection.wiki

Microsoft-Windows-UI-Input-Inking

EventTitleChannelSampleRule
1Inking_IStrokeBuilder_BeginStrokeStartOperationalNN
2Inking_IStrokeBuilder_BeginStrokeStopOperationalNN
3Inking_IStrokeBuilder_AppendStrokeStartOperationalNN
4Inking_IStrokeBuilder_AppendStrokeStopOperationalNN
5Inking_IStrokeBuilder_EndStrokeStartOperationalNN
6Inking_IStrokeBuilder_EndStrokeStopOperationalNN
7Inking_IStrokeCollection_AddStrokeStartOperationalNN
8Inking_IStrokeCollection_AddStrokeStopOperationalNN
9Inking_IStrokeCollection_DeleteStrokeStartOperationalNN
10Inking_IStrokeCollection_DeleteStrokeStopOperationalNN
11Inking_IStrokeCollection_SelectWithPolyLineStartOperationalNN
12Inking_IStrokeCollection_SelectWithPolyLineStopOperationalNN
13Inking_IStrokeCollection_SelectWithLineStartOperationalNN
14Inking_IStrokeCollection_SelectWithLineStopOperationalNN
15Inking_IStrokeCollection_CopyStartOperationalNN
16Inking_IStrokeCollection_CopyStopOperationalNN
17Inking_IStrokeCollection_PasteStartOperationalNN
18Inking_IStrokeCollection_PasteStopOperationalNN
19Inking_IStrokeCollection_SerializeStartOperationalNN
20Inking_IStrokeCollection_SerializeStopOperationalNN
21Inking_IStrokeCollection_DeserializeStartOperationalNN
22Inking_IStrokeCollection_DeserializeStopOperationalNN
23Inking_IRecognizerCollection_SetDefaultRecognizerStartOperationalNN
24Inking_IRecognizerCollection_SetDefaultRecognizerStopOperationalNN
25Inking_IRecognizerCollection_RecognizeStartOperationalNN
26Inking_IRecognizerCollection_RecognizeStopOperationalNN
27Inking_IRecognizerCollection_GetRecognizerViewStartOperationalNN
28Inking_IRecognizerCollection_GetRecognizerViewStopOperationalNN
29Inking_IInkManager_OnPointerDownStartOperationalNN
30Inking_IInkManager_OnPointerDownStopOperationalNN
31Inking_IInkManager_OnPointerUpdateStartOperationalNN
32Inking_IInkManager_OnPointerUpdateStopOperationalNN
33Inking_IInkManager_OnPointerUpStartOperationalNN
34Inking_IInkManager_OnPointerUpStopOperationalNN
35Inking_IInkManager_RecognizeStartOperationalNN
36Inking_IInkManager_RecognizeStopOperationalNN
37Inking_IStroke_GetStrokeRenderingSegmentViewStartOperationalNN
38Inking_IStroke_GetStrokeRenderingSegmentViewStopOperationalNN
39Inking_IStrokeCollection_GetRecognitionResultViewStartOperationalNN
40Inking_IStrokeCollection_GetRecognitionResultViewStopOperationalNN
41Inking_IStrokeBuilder_CreateStrokeStartOperationalNN
42Inking_IStrokeBuilder_CreateStrokeStopOperationalNN

Event ID 1: Inking_IStrokeBuilder_BeginStrokeStart

#
Channel
Operational
Task
Inking_IStrokeBuilder_BeginStroke
Opcode
Start

Event ID 2: Inking_IStrokeBuilder_BeginStrokeStop

#
Channel
Operational
Task
Inking_IStrokeBuilder_BeginStroke
Opcode
Stop

Event ID 3: Inking_IStrokeBuilder_AppendStrokeStart

#
Channel
Operational
Task
Inking_IStrokeBuilder_AppendStroke
Opcode
Start

Event ID 4: Inking_IStrokeBuilder_AppendStrokeStop

#
Channel
Operational
Task
Inking_IStrokeBuilder_AppendStroke
Opcode
Stop

Event ID 5: Inking_IStrokeBuilder_EndStrokeStart

#
Channel
Operational
Task
Inking_IStrokeBuilder_EndStroke
Opcode
Start

Event ID 6: Inking_IStrokeBuilder_EndStrokeStop

#
Channel
Operational
Task
Inking_IStrokeBuilder_EndStroke
Opcode
Stop

Event ID 7: Inking_IStrokeCollection_AddStrokeStart

#
Channel
Operational
Task
Inking_IStrokeCollection_AddStroke
Opcode
Start

Event ID 8: Inking_IStrokeCollection_AddStrokeStop

#
Channel
Operational
Task
Inking_IStrokeCollection_AddStroke
Opcode
Stop

Event ID 9: Inking_IStrokeCollection_DeleteStrokeStart

#
Channel
Operational
Task
Inking_IStrokeCollection_DeleteStroke
Opcode
Start

Event ID 10: Inking_IStrokeCollection_DeleteStrokeStop

#
Channel
Operational
Task
Inking_IStrokeCollection_DeleteStroke
Opcode
Stop

Event ID 11: Inking_IStrokeCollection_SelectWithPolyLineStart

#
Channel
Operational
Task
Inking_IStrokeCollection_SelectWithPolyLine
Opcode
Start

Event ID 12: Inking_IStrokeCollection_SelectWithPolyLineStop

#
Channel
Operational
Task
Inking_IStrokeCollection_SelectWithPolyLine
Opcode
Stop

Event ID 13: Inking_IStrokeCollection_SelectWithLineStart

#
Channel
Operational
Task
Inking_IStrokeCollection_SelectWithLine
Opcode
Start

Event ID 14: Inking_IStrokeCollection_SelectWithLineStop

#
Channel
Operational
Task
Inking_IStrokeCollection_SelectWithLine
Opcode
Stop

Event ID 15: Inking_IStrokeCollection_CopyStart

#
Channel
Operational
Task
Inking_IStrokeCollection_Copy
Opcode
Start

Event ID 16: Inking_IStrokeCollection_CopyStop

#
Channel
Operational
Task
Inking_IStrokeCollection_Copy
Opcode
Stop

Event ID 17: Inking_IStrokeCollection_PasteStart

#
Channel
Operational
Task
Inking_IStrokeCollection_Paste
Opcode
Start

Event ID 18: Inking_IStrokeCollection_PasteStop

#
Channel
Operational
Task
Inking_IStrokeCollection_Paste
Opcode
Stop

Event ID 19: Inking_IStrokeCollection_SerializeStart

#
Channel
Operational
Task
Inking_IStrokeCollection_Serialize
Opcode
Start

Event ID 20: Inking_IStrokeCollection_SerializeStop

#
Channel
Operational
Task
Inking_IStrokeCollection_Serialize
Opcode
Stop

Event ID 21: Inking_IStrokeCollection_DeserializeStart

#
Channel
Operational
Task
Inking_IStrokeCollection_Deserialize
Opcode
Start

Event ID 22: Inking_IStrokeCollection_DeserializeStop

#
Channel
Operational
Task
Inking_IStrokeCollection_Deserialize
Opcode
Stop

Event ID 23: Inking_IRecognizerCollection_SetDefaultRecognizerStart

#
Channel
Operational
Task
Inking_IRecognizerCollection_SetDefaultRecognizer
Opcode
Start

Event ID 24: Inking_IRecognizerCollection_SetDefaultRecognizerStop

#
Channel
Operational
Task
Inking_IRecognizerCollection_SetDefaultRecognizer
Opcode
Stop

Event ID 25: Inking_IRecognizerCollection_RecognizeStart

#
Channel
Operational
Task
Inking_IRecognizerCollection_Recognize
Opcode
Start

Event ID 26: Inking_IRecognizerCollection_RecognizeStop

#
Channel
Operational
Task
Inking_IRecognizerCollection_Recognize
Opcode
Stop

Event ID 27: Inking_IRecognizerCollection_GetRecognizerViewStart

#
Channel
Operational
Task
Inking_IRecognizerCollection_GetRecognizerView
Opcode
Start

Event ID 28: Inking_IRecognizerCollection_GetRecognizerViewStop

#
Channel
Operational
Task
Inking_IRecognizerCollection_GetRecognizerView
Opcode
Stop

Event ID 29: Inking_IInkManager_OnPointerDownStart

#
Channel
Operational
Task
Inking_IInkManager_OnPointerDown
Opcode
Start

Event ID 30: Inking_IInkManager_OnPointerDownStop

#
Channel
Operational
Task
Inking_IInkManager_OnPointerDown
Opcode
Stop

Event ID 31: Inking_IInkManager_OnPointerUpdateStart

#
Channel
Operational
Task
Inking_IInkManager_OnPointerUpdate
Opcode
Start

Event ID 32: Inking_IInkManager_OnPointerUpdateStop

#
Channel
Operational
Task
Inking_IInkManager_OnPointerUpdate
Opcode
Stop

Event ID 33: Inking_IInkManager_OnPointerUpStart

#
Channel
Operational
Task
Inking_IInkManager_OnPointerUp
Opcode
Start

Event ID 34: Inking_IInkManager_OnPointerUpStop

#
Channel
Operational
Task
Inking_IInkManager_OnPointerUp
Opcode
Stop

Event ID 35: Inking_IInkManager_RecognizeStart

#
Channel
Operational
Task
Inking_IInkManager_Recognize
Opcode
Start

Event ID 36: Inking_IInkManager_RecognizeStop

#
Channel
Operational
Task
Inking_IInkManager_Recognize
Opcode
Stop

Event ID 37: Inking_IStroke_GetStrokeRenderingSegmentViewStart

#
Channel
Operational
Task
Inking_IStroke_GetStrokeRenderingSegmentView
Opcode
Start

Event ID 38: Inking_IStroke_GetStrokeRenderingSegmentViewStop

#
Channel
Operational
Task
Inking_IStroke_GetStrokeRenderingSegmentView
Opcode
Stop

Event ID 39: Inking_IStrokeCollection_GetRecognitionResultViewStart

#
Channel
Operational
Task
Inking_IStrokeCollection_GetRecognitionResultView
Opcode
Start

Event ID 40: Inking_IStrokeCollection_GetRecognitionResultViewStop

#
Channel
Operational
Task
Inking_IStrokeCollection_GetRecognitionResultView
Opcode
Stop

Event ID 41: Inking_IStrokeBuilder_CreateStrokeStart

#
Channel
Operational
Task
Inking_IStrokeBuilder_CreateStroke
Opcode
Start

Event ID 42: Inking_IStrokeBuilder_CreateStrokeStop

#
Channel
Operational
Task
Inking_IStrokeBuilder_CreateStroke
Opcode
Stop

Provenance

ETW provider GUID bf1db390-3e67-4d4d-a287-8958044a3db4

Defined in Windows.UI.Input.Inking.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB