Microsoft-Windows-WPD-API

Event	Title	Channel	Sample	Rule
100	API request to Driver	Analytic	N	N
101	Driver response to API	Analytic	N	N

Event ID 100: API request to Driver

Channel: Analytic
Opcode: Info

Fields #

Name	Description
`WpdAPICommandCategoryGUID` GUID
`WpdAPICommandID` UInt32
`WpdSerializedData_Length` UInt32
`WpdSerializedData_Buffer` Binary

Event ID 101: Driver response to API

Channel: Analytic
Opcode: Info

Fields #

Name	Description
`WpdAPICommandCategoryGUID` GUID
`WpdAPICommandID` UInt32
`WPDAPIOPerationHR` UInt32
`WpdSerializedData_Length` UInt32
`WpdSerializedData_Buffer` Binary

Provenance

ETW provider GUID 31569dcf-9c6f-4b8e-843a-b7c1cc7ffcba

Defined in wpd_ci.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB