WINSATAPI_ETW_PROVIDER
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 0 | TestV1 TestV2 TestV3 TestV4. | Unknown | N | N |
| 1 | WinSAT Application Start: StartTimeOfDay. | Unknown | N | N |
| 2 | WinSAT Application Command Line CommandLine. | Unknown | N | N |
| 3 | WinSAT Application Stop: ExitCode. | Unknown | N | N |
| 4 | ERROR. | Unknown | N | N |
| 5 | COM ERROR: Source Interface. | Unknown | N | N |
| 6 | ERROR. | Unknown | N | N |
| 7 | ERROR: FailingHresult ErrorMsg. | Unknown | N | N |
| 8 | Message. | Unknown | N | N |
| 9 | PhaseID:Description. | Unknown | N | N |
| 10 | PhaseID. | Unknown | N | N |
Event ID 0: TestV1 TestV2 TestV3 TestV4.
#Event ID 1: WinSAT Application Start: StartTimeOfDay.
#Event ID 2: WinSAT Application Command Line CommandLine.
#Event ID 4: ERROR.
#Event ID 5: COM ERROR: Source Interface.
#Event ID 6: ERROR.
#Event ID 7: ERROR: FailingHresult ErrorMsg.
#Event ID 9: PhaseID:Description.
#Provenance
ETW provider GUID 617853d6-728b-4b59-8a78-c3a9a5eade92
Defined in WinSATAPI.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB