Microsoft-Windows-Ntfs-SQM

Seen on:

• Windows 2012

• Windows 8.0

• Windows 8.1

• Windows 10 (1511)

Name:	Microsoft-Windows-Ntfs-SQM
Identifier:	{e9b319e4-0030-40a7-91cb-04d6a8ef7e09}
Log type(s):	System
Log source(s):	Microsoft-Windows-Ntfs-SQM
Event message file(s):	%SystemRoot%\system32\drivers\ntfs.sys