Microsoft-Windows-WWAN-NDISUIO-EVENTS
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1001 | WWAN NDISUIO Event: Loading of WWAN Component | Diagnostic | N | N |
| 1002 | WWAN NDISUIO Event: Unloading of WWAN Component | Diagnostic | N | N |
| 1003 | WWAN NDISUIO Event: Error | Diagnostic | N | N |
| 1004 | WWAN NDISUIO Event: OID request sent to the driver | Diagnostic | N | N |
| 1005 | WWAN NDISUIO Event: OID request completed by the driver | Diagnostic | N | N |
| 1006 | WWAN NDISUIO Event: Unsolicited notification indicated by the driver | Diagnostic | N | N |
Event ID 1001: WWAN NDISUIO Event: Loading of WWAN Component
#Event ID 1002: WWAN NDISUIO Event: Unloading of WWAN Component
#Event ID 1003: WWAN NDISUIO Event: Error
#Fields #
| Name | Description |
|---|---|
InterfaceGuid GUID | |
ErrorCode UInt32 | |
Location UInt32 | |
Context UInt32 |
Event ID 1004: WWAN NDISUIO Event: OID request sent to the driver
#Fields #
| Name | Description |
|---|---|
InterfaceGuid GUID | |
OIDorStatus UInt32 | |
RequestID UInt32 | |
Location UInt32 | |
Context UInt32 |
Provenance
ETW provider GUID b3eee223-d0a9-40cd-adfc-50f1888138ab
Defined in ndisuio.sys, the binary that emits these events.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB