VSS tracing provider

Event	Title	Channel	Sample	Rule
1	VssTracingEventClass_VssTracingEventTypeClass	ETW Trace	N	N

Event ID 1: VssTracingEventClass_VssTracingEventTypeClass

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`SourceFileName` mof:String
`SourceFileAlias` mof:String
`LineNumber` mof:UInt32
`Indent` mof:UInt32
`ModuleIndex` mof:UInt32
`FunctionName` mof:String
`MessageDescription` mof:String
`Text` mof:String

Provenance

ETW provider GUID {9138500E-3648-4EDB-AA4C-859E9F7B7C38}

WS2025-26100.0, schema read from the WMI MOF class, captured 2026-02-26
Taken from Windows installation media (build 26100.1), not a patched system, so the exact update level is unknown.
WS2022-20348.4893, schema read from the WMI MOF class, captured 2026-06-02
MOF class: VssTracingProvider
Win11-26200.6584, schema read from the WMI MOF class, captured 2026-06-02
MOF class: VssTracingProvider