Microsoft-Windows-WiFiDisplay
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | EnumerateCeremonies | Analytic | N | N |
| 2 | EnumerateCeremonies2 | Analytic | N | N |
| 3 | Pair | Analytic | N | N |
| 4 | Pair4 | Analytic | N | N |
| 5 | OpenSession | Analytic | N | N |
| 6 | OpenSession6 | Analytic | N | N |
| 7 | DHCP | Analytic | N | N |
| 8 | DHCP8 | Analytic | N | N |
| 9 | PairFail | Analytic | N | N |
| 10 | Discover | Analytic | N | N |
Event ID 1: EnumerateCeremonies
#Fields #
| Name | Description |
|---|---|
AssociationKey UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 2: EnumerateCeremonies2
#Fields #
| Name | Description |
|---|---|
AssociationKey UInt32 | |
ErrorCode UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 3: Pair
#Fields #
| Name | Description |
|---|---|
AssociationKey UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 4: Pair4
#Fields #
| Name | Description |
|---|---|
AssociationKey UInt32 | |
ErrorCode UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 5: OpenSession
#Fields #
| Name | Description |
|---|---|
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 6: OpenSession6
#Fields #
| Name | Description |
|---|---|
ErrorCode UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 7: DHCP
#Fields #
| Name | Description |
|---|---|
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Event ID 8: DHCP8
#Fields #
| Name | Description |
|---|---|
ErrorCode UInt32 | |
LocalDeviceInformation UnicodeString | |
RemoteDeviceInformation UnicodeString |
Provenance
ETW provider GUID 712880e9-7813-41a3-8e4c-e4e0c4f6580a
Defined in wifidisplay.dll, which carries the event manifest.
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB