Microsoft-Windows-Kernel-WSService-StartServiceTrigger

Seen on:

  • Windows 2012

  • Windows 8.1

  • Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)

  • Windows 2016

  • Windows 2019

  • Windows 11 (21H2)

Name: Microsoft-Windows-Kernel-WSService-StartServiceTrigger
Identifier: {3635d4b6-77e3-4375-8124-d545b7149337}
Event message file(s): %SystemRoot%\system32\Microsoft-Windows-System-Events.dll

 

Seen on:

  • Windows 8.0

Name: Microsoft-Windows-Kernel-WSService-StartServiceTrigger
Identifier: {3635d4b6-77e3-4375-8124-d545b7149337}
Event message file(s): %SystemRoot%\system32\advapi32.dll