detection.wiki

Microsoft-Windows-XWizards

EventTitleChannelSampleRule
81Caption-Text.ApplicationNN
82Caption-Text.ApplicationNN
83Caption-Text.ApplicationNN

Event ID 81: Caption-Text.

#
Channel
Application

Message #

%1-%2

Fields #

NameDescription
Caption UnicodeString
Text UnicodeString

Event ID 82: Caption-Text.

#
Channel
Application

Message #

%1-%2

Fields #

NameDescription
Caption UnicodeString
Text UnicodeString

Event ID 83: Caption-Text.

#
Channel
Application

Message #

%1-%2

Fields #

NameDescription
Caption UnicodeString
Text UnicodeString

Provenance

ETW provider GUID 777ba8fe-2498-4875-933a-3067de883070

Defined in xwizards.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB