Windows Event Log knowledge base (winevt-kb)
  • Event Log providers
    • .NET Runtime
    • .NET Runtime Optimization Service
    • 3ware
    • ACPI
    • ADP80XX
    • AFD
    • ASP.NET 2.0.50727.0
    • ASP.NET 4.0.30319.0
    • AeLookupSvc
    • Alerter
    • AmdK8
    • AmdPPM
    • AppleSSD
    • Application
    • Application Error
    • Application Hang
    • Application Management
    • Application Management Group Policy
    • Application Popup
    • Application-Addon-Event-Provider
    • AsyncMac
    • Atmarpc
    • AutoEnrollment
    • Autochk
    • BITS
    • BTHPORT
    • BTHUSB
    • BasicDisplay
    • BasicRender
    • Bowser
    • Browser
    • BthEnum
    • BthLEEnum
    • BthMini
    • COM
    • COM+
    • CardSpace 3.0.0.0
    • CardSpace 4.0.0.0
    • Cdm
    • CertEnterprisePolicy
    • Chkdsk
    • Ci
    • Clussvc
    • DCOM
    • DFS Replication
    • DFSR
    • DS
    • DSReplicationProvider
    • DeliveryOptimization
    • Desktop Window Manager
    • DfsDriver
    • DfsSvc
    • Dhcp
    • DhcpQec
    • DiskQuota
    • Display
    • Distributed Link Tracking Client
    • Distributed Link Tracking Server
    • Dnsapi
    • Dnscache
    • Dot3Svc
    • DrWatson
    • Dvd Maker
    • Dwminit
    • E1000
    • E1G60
    • ESENT
    • Edge
    • Error Instrument
    • EventCreate
    • EventLog
    • EventSystem
    • File Deployment
    • Fips
    • FltMgr
    • Folder Redirection
    • FxPPM
    • Group Policy
    • Group Policy Applications
    • Group Policy Client
    • Group Policy Data Sources
    • Group Policy Device Settings
    • Group Policy Drive Maps
    • Group Policy Environment
    • Group Policy Files
    • Group Policy Folder Options
    • Group Policy Folders
    • Group Policy Ini Files
    • Group Policy Internet Settings
    • Group Policy Local Users and Groups
    • Group Policy Mail Profiles
    • Group Policy Management
    • Group Policy Network Options
    • Group Policy Network Shares
    • Group Policy Power Options
    • Group Policy Printers
    • Group Policy Regional Options
    • Group Policy Registry
    • Group Policy Scheduled Tasks
    • Group Policy Services
    • Group Policy Shortcuts
    • Group Policy Standard Edition
    • Group Policy Start Menu Settings
    • GroupPolicy
    • Handwriting Recognition
    • HelpSvc
    • HidBth
    • HpCISSs
    • HpSAMD
    • Http
    • IGMPv2
    • IISADMIN
    • IPBOOTP
    • IPMGM
    • IPMIDRV
    • IPNATHLP
    • IPRIP2
    • IPRouterManager
    • IPSEC
    • IPSECPolicyStorage
    • IPSec
    • IPXCP
    • IPXRIP
    • IPXRouterManager
    • IPXSAP
    • Intel-iaLPSS-GPIO
    • Intel-iaLPSS-I2C
    • Intel-iaLPSS2-GPIO2
    • Intel-iaLPSS2-I2C
    • Interactive Services detection
    • ItSas35i
    • Java VM
    • KDC
    • Kerberos
    • LDM
    • LDMS
    • LSA
    • LSI_FC
    • LSI_SAS
    • LSI_SAS2
    • LSI_SAS2i
    • LSI_SAS3
    • LSI_SAS3i
    • LSI_SCSI
    • LSI_SSS
    • LSM
    • Lfsvc
    • LicenseService
    • LmHosts
    • LoadPerf
    • LocationNotifications
    • LsaSrv
    • MCUpdate
    • MRxDAV
    • MSDTC
    • MSDTC Client
    • MSDTC Gateway
    • MSDTC WS-AT Protocol
    • MSFTPSVC
    • MSSHA
    • MSSQLSERVER/MSDE
    • MSiSCSI
    • MTConfig
    • MegaSR
    • Microsoft Edge Etw
    • Microsoft Fax
    • Microsoft H.323 Telephony Service Provider
    • Microsoft-Antimalware-AMFilter
    • Microsoft-Antimalware-Engine
    • Microsoft-Antimalware-Protection
    • Microsoft-Antimalware-RTP
    • Microsoft-Antimalware-Scan-Interface
    • Microsoft-Antimalware-Service
    • Microsoft-Antimalware-ShieldProvider
    • Microsoft-Antimalware-UI
    • Microsoft-Antimalware-UacScan
    • Microsoft-AppV-Client
    • Microsoft-AppV-Client-StreamingUX
    • Microsoft-AppV-ServiceLog
    • Microsoft-AppV-SharedPerformance
    • Microsoft-Client-Licensing-Platform
    • Microsoft-ETW-ESE
    • Microsoft-Gaming-Services
    • Microsoft-IE
    • Microsoft-IE-JSDumpHeap
    • Microsoft-IE-ReadingView
    • Microsoft-IEDVTOOL
    • Microsoft-IEFRAME
    • Microsoft-JScript
    • Microsoft-OneCore-OnlineSetup
    • Microsoft-Pef-WFP-MessageProvider
    • Microsoft-PerfTrack-IEFRAME
    • Microsoft-PerfTrack-MSHTML
    • Microsoft-Quic
    • Microsoft-System-Diagnostics-DiagnosticInvoker
    • Microsoft-User Experience Virtualization-Admin
    • Microsoft-User Experience Virtualization-Agent Driver
    • Microsoft-User Experience Virtualization-App Agent
    • Microsoft-User Experience Virtualization-IPC
    • Microsoft-User Experience Virtualization-SQM Uploader
    • Microsoft-WS-Licensing
    • Microsoft-Windows Networking VPN Plugin Platform
    • Microsoft-Windows-AAD
    • Microsoft-Windows-ACL-UI
    • Microsoft-Windows-ADSI
    • Microsoft-Windows-AIT
    • Microsoft-Windows-API-Tracing
    • Microsoft-Windows-ASN1
    • Microsoft-Windows-ATAPort
    • Microsoft-Windows-ActionQueue
    • Microsoft-Windows-All-User-Install-Agent
    • Microsoft-Windows-AllJoyn
    • Microsoft-Windows-AltTab
    • Microsoft-Windows-Anytime-Upgrade
    • Microsoft-Windows-Anytime-Upgrade-Events
    • Microsoft-Windows-AppHost
    • Microsoft-Windows-AppID
    • Microsoft-Windows-AppIDServiceTrigger
    • Microsoft-Windows-AppLocker
    • Microsoft-Windows-AppModel-Exec
    • Microsoft-Windows-AppModel-MessagingDataModel
    • Microsoft-Windows-AppModel-Runtime
    • Microsoft-Windows-AppModel-State
    • Microsoft-Windows-AppReadiness
    • Microsoft-Windows-AppSruProv
    • Microsoft-Windows-AppXDeployment
    • Microsoft-Windows-AppXDeployment-Server
    • Microsoft-Windows-ApplicabilityEngine
    • Microsoft-Windows-Application Server-Applications
    • Microsoft-Windows-Application-Experience
    • Microsoft-Windows-ApplicationExperience-Cache
    • Microsoft-Windows-ApplicationExperience-LookupServiceTrigger
    • Microsoft-Windows-ApplicationExperience-SwitchBack
    • Microsoft-Windows-ApplicationExperienceInfrastructure
    • Microsoft-Windows-ApplicationResourceManagementSystem
    • Microsoft-Windows-AppxPackagingOM
    • Microsoft-Windows-AssignedAccess
    • Microsoft-Windows-AssignedAccessBroker
    • Microsoft-Windows-AsynchronousCausality
    • Microsoft-Windows-Audio
    • Microsoft-Windows-Audit
    • Microsoft-Windows-Audit-CVE
    • Microsoft-Windows-AuthenticationProvider
    • Microsoft-Windows-AxInstallService
    • Microsoft-Windows-BTH-BTHPORT
    • Microsoft-Windows-BTH-BTHUSB
    • Microsoft-Windows-BackgroundTransfer-ContentPrefetcher
    • Microsoft-Windows-Backup
    • Microsoft-Windows-Base-Filtering-Engine-Connections
    • Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
    • Microsoft-Windows-Battery
    • Microsoft-Windows-BdeTriggerProvider
    • Microsoft-Windows-BestPractices
    • Microsoft-Windows-BfeTriggerProvider
    • Microsoft-Windows-Biometrics
    • Microsoft-Windows-BitLocker-API
    • Microsoft-Windows-BitLocker-DrivePreparationTool
    • Microsoft-Windows-BitLocker-Driver
    • Microsoft-Windows-BitLocker-Driver-Performance
    • Microsoft-Windows-Bits-Client
    • Microsoft-Windows-Bluetooth-BthLEPrepairing
    • Microsoft-Windows-Bluetooth-Bthmini
    • Microsoft-Windows-Bluetooth-HidBthLE
    • Microsoft-Windows-Bluetooth-MTPEnum
    • Microsoft-Windows-Bluetooth-Policy
    • Microsoft-Windows-BootUX
    • Microsoft-Windows-BranchCache
    • Microsoft-Windows-BranchCacheClientEventProvider
    • Microsoft-Windows-BranchCacheEventProvider
    • Microsoft-Windows-BranchCacheMonitoring
    • Microsoft-Windows-BranchCacheSMB
    • Microsoft-Windows-BrokerInfrastructure
    • Microsoft-Windows-Build-RegDll
    • Microsoft-Windows-CAPI2
    • Microsoft-Windows-CDROM
    • Microsoft-Windows-CEIP
    • Microsoft-Windows-COM
    • Microsoft-Windows-COM-Perf
    • Microsoft-Windows-COM-RundownInstrumentation
    • Microsoft-Windows-COMRuntime
    • Microsoft-Windows-Calculator
    • Microsoft-Windows-CertPolEng
    • Microsoft-Windows-CertificateServices-Deployment
    • Microsoft-Windows-CertificateServicesClient
    • Microsoft-Windows-CertificateServicesClient-AutoEnrollment
    • Microsoft-Windows-CertificateServicesClient-CertEnroll
    • Microsoft-Windows-CertificateServicesClient-CredentialRoaming
    • Microsoft-Windows-CertificateServicesClient-Lifecycle-System
    • Microsoft-Windows-CertificateServicesClient-Lifecycle-User
    • Microsoft-Windows-CertificationAuthorityClient-CertCli
    • Microsoft-Windows-Cleanmgr
    • Microsoft-Windows-ClearTypeTextTuner
    • Microsoft-Windows-CloudStorageWizard
    • Microsoft-Windows-CloudStore
    • Microsoft-Windows-CmiSetup
    • Microsoft-Windows-CodeIntegrity
    • Microsoft-Windows-ComDlg32
    • Microsoft-Windows-Compat-Appraiser
    • Microsoft-Windows-Complus
    • Microsoft-Windows-Connected-Search
    • Microsoft-Windows-Containers-BindFlt
    • Microsoft-Windows-Containers-BindFlt-Mapping
    • Microsoft-Windows-Containers-Wcifs
    • Microsoft-Windows-Containers-Wcifs-Mapping
    • Microsoft-Windows-Containers-Wcnfs
    • Microsoft-Windows-CoreSystem-InitMachineConfig
    • Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline
    • Microsoft-Windows-CoreSystem-SmsRouter
    • Microsoft-Windows-CoreWindow
    • Microsoft-Windows-CorruptedFileRecovery-Client
    • Microsoft-Windows-CorruptedFileRecovery-Server
    • Microsoft-Windows-Crashdump
    • Microsoft-Windows-CredProvHost
    • Microsoft-Windows-CredUI
    • Microsoft-Windows-CredentialProviders
    • Microsoft-Windows-Crypto-BCrypt
    • Microsoft-Windows-Crypto-CNG
    • Microsoft-Windows-Crypto-DPAPI
    • Microsoft-Windows-Crypto-DSSEnh
    • Microsoft-Windows-Crypto-NCrypt
    • Microsoft-Windows-Crypto-RNG
    • Microsoft-Windows-Crypto-RSAEnh
    • Microsoft-Windows-D3D10Level9
    • Microsoft-Windows-D3D9
    • Microsoft-Windows-DAL-Provider
    • Microsoft-Windows-DCLocator
    • Microsoft-Windows-DDisplay
    • Microsoft-Windows-DHCPv6-Client
    • Microsoft-Windows-DLNA-Namespace
    • Microsoft-Windows-DNS-Client
    • Microsoft-Windows-DNS-Client-DiagTrack
    • Microsoft-Windows-DSC
    • Microsoft-Windows-DUI
    • Microsoft-Windows-DUSER
    • Microsoft-Windows-DVD
    • Microsoft-Windows-DXGI
    • Microsoft-Windows-DXP
    • Microsoft-Windows-Data-Pdf
    • Microsoft-Windows-DataCollectionService
    • Microsoft-Windows-DataIntegrityScan
    • Microsoft-Windows-DateTimeControlPanel
    • Microsoft-Windows-Deduplication
    • Microsoft-Windows-Deduplication-Change
    • Microsoft-Windows-Defrag
    • Microsoft-Windows-Defrag-Core
    • Microsoft-Windows-DeliveryOptimization
    • Microsoft-Windows-Deplorch
    • Microsoft-Windows-DesktopActivityModerator
    • Microsoft-Windows-DesktopWindowManager-Diag
    • Microsoft-Windows-DevMgmt-UefiCsp
    • Microsoft-Windows-DeviceAssociationService
    • Microsoft-Windows-DeviceConfidence
    • Microsoft-Windows-DeviceGuard
    • Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
    • Microsoft-Windows-DeviceManagement-Pushrouter
    • Microsoft-Windows-DeviceSetupManager
    • Microsoft-Windows-DeviceSync
    • Microsoft-Windows-DeviceUpdateAgent
    • Microsoft-Windows-DeviceUx
    • Microsoft-Windows-Devices-Background
    • Microsoft-Windows-Devices-Location
    • Microsoft-Windows-DfsSvc
    • Microsoft-Windows-Dhcp-Client
    • Microsoft-Windows-Dhcp-Nap-Enforcement-Client
    • Microsoft-Windows-DiagCpl
    • Microsoft-Windows-Diagnosis-AdvancedTaskManager
    • Microsoft-Windows-Diagnosis-DPS
    • Microsoft-Windows-Diagnosis-MSDE
    • Microsoft-Windows-Diagnosis-MSDT
    • Microsoft-Windows-Diagnosis-PCW
    • Microsoft-Windows-Diagnosis-PLA
    • Microsoft-Windows-Diagnosis-PerfHost
    • Microsoft-Windows-Diagnosis-Scheduled
    • Microsoft-Windows-Diagnosis-Scripted
    • Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider
    • Microsoft-Windows-Diagnosis-TaskManager
    • Microsoft-Windows-Diagnosis-WDC
    • Microsoft-Windows-Diagnosis-WDI
    • Microsoft-Windows-Diagnostics-LoggingChannel
    • Microsoft-Windows-Diagnostics-Networking
    • Microsoft-Windows-Diagnostics-PerfTrack
    • Microsoft-Windows-Diagnostics-PerfTrack-Counters
    • Microsoft-Windows-Diagnostics-Performance
    • Microsoft-Windows-Diagtrack
    • Microsoft-Windows-Direct3D10
    • Microsoft-Windows-Direct3D10_1
    • Microsoft-Windows-Direct3D11
    • Microsoft-Windows-Direct3D12
    • Microsoft-Windows-Direct3DShaderCache
    • Microsoft-Windows-DirectAccess-MediaManager
    • Microsoft-Windows-DirectComposition
    • Microsoft-Windows-DirectManipulation
    • Microsoft-Windows-DirectShow-Core
    • Microsoft-Windows-DirectShow-KernelSupport
    • Microsoft-Windows-DirectSound
    • Microsoft-Windows-DirectWrite
    • Microsoft-Windows-DirectWrite-FontCache
    • Microsoft-Windows-Directory-Services-SAM
    • Microsoft-Windows-Directory-Services-SAM-Utility
    • Microsoft-Windows-DirectoryServices-Deployment
    • Microsoft-Windows-Disk
    • Microsoft-Windows-DiskDiagnostic
    • Microsoft-Windows-DiskDiagnosticDataCollector
    • Microsoft-Windows-DiskDiagnosticResolver
    • Microsoft-Windows-Dism-Api
    • Microsoft-Windows-Dism-Cli
    • Microsoft-Windows-Display
    • Microsoft-Windows-DisplayColorCalibration
    • Microsoft-Windows-DisplaySwitch
    • Microsoft-Windows-DistributedCOM
    • Microsoft-Windows-Documents
    • Microsoft-Windows-DomainJoinManagerTriggerProvider
    • Microsoft-Windows-Dot3MM
    • Microsoft-Windows-DotNETRuntime
    • Microsoft-Windows-DotNETRuntimeRundown
    • Microsoft-Windows-DriverFrameworks-KernelMode
    • Microsoft-Windows-DriverFrameworks-KernelMode-Performance
    • Microsoft-Windows-DriverFrameworks-UserMode
    • Microsoft-Windows-DriverFrameworks-UserMode-Performance
    • Microsoft-Windows-Dwm-Api
    • Microsoft-Windows-Dwm-Core
    • Microsoft-Windows-Dwm-Dwm
    • Microsoft-Windows-Dwm-Redir
    • Microsoft-Windows-Dwm-Udwm
    • Microsoft-Windows-DxgKrnl
    • Microsoft-Windows-DxpTaskRingtone
    • Microsoft-Windows-DxpTaskSyncProvider
    • Microsoft-Windows-EDP-AppLearning
    • Microsoft-Windows-EDP-Audit-Regular
    • Microsoft-Windows-EDP-Audit-TCB
    • Microsoft-Windows-EFS
    • Microsoft-Windows-EFSADU
    • Microsoft-Windows-EFSTriggerProvider
    • Microsoft-Windows-ELS-Hyphenation
    • Microsoft-Windows-EQoS
    • Microsoft-Windows-ESE
    • Microsoft-Windows-EapHost
    • Microsoft-Windows-EapMethods-RasChap
    • Microsoft-Windows-EapMethods-RasTls
    • Microsoft-Windows-EapMethods-Sim
    • Microsoft-Windows-EapMethods-Ttls
    • Microsoft-Windows-EaseOfAccess
    • Microsoft-Windows-EmbeddedAppLauncher
    • Microsoft-Windows-EndpointTriggerProvider
    • Microsoft-Windows-Energy-Estimation-Engine
    • Microsoft-Windows-EnergyEfficiencyWizard
    • Microsoft-Windows-EnhancedStorage-ClassDriver
    • Microsoft-Windows-EnhancedStorage-EhStorCertDrv
    • Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
    • Microsoft-Windows-EnrollmentPolicyWebService
    • Microsoft-Windows-EnrollmentWebService
    • Microsoft-Windows-Eqos-SQM-Provider
    • Microsoft-Windows-ErrorReportingConsole
    • Microsoft-Windows-EtwCollector
    • Microsoft-Windows-EventCollector
    • Microsoft-Windows-EventLog-WMIProvider
    • Microsoft-Windows-EventSystem
    • Microsoft-Windows-Eventlog
    • Microsoft-Windows-Eventlog-ForwardPlugin
    • Microsoft-Windows-FCRegSvc
    • Microsoft-Windows-FMS
    • Microsoft-Windows-FailoverClustering-Client
    • Microsoft-Windows-Fat-SQM
    • Microsoft-Windows-Fault-Tolerant-Heap
    • Microsoft-Windows-FeatureConfiguration
    • Microsoft-Windows-FederationServices-Deployment
    • Microsoft-Windows-Feedback-Service-TriggerProvider
    • Microsoft-Windows-FileHistory-Catalog
    • Microsoft-Windows-FileHistory-ConfigManager
    • Microsoft-Windows-FileHistory-Core
    • Microsoft-Windows-FileHistory-Engine
    • Microsoft-Windows-FileHistory-EventListener
    • Microsoft-Windows-FileHistory-Service
    • Microsoft-Windows-FileHistory-UI
    • Microsoft-Windows-FileInfoMinifilter
    • Microsoft-Windows-FileManagerApp
    • Microsoft-Windows-FileManagerDataModel
    • Microsoft-Windows-FileServices-ServerManager-EventProvider
    • Microsoft-Windows-FileShareShadowCopyProvider
    • Microsoft-Windows-FilterManager
    • Microsoft-Windows-Firewall
    • Microsoft-Windows-Firewall-CPL
    • Microsoft-Windows-FirstUX-PerfInstrumentation
    • Microsoft-Windows-Folder Redirection
    • Microsoft-Windows-Forwarding
    • Microsoft-Windows-FunctionDiscovery
    • Microsoft-Windows-FunctionDiscoveryHost
    • Microsoft-Windows-GPIO-ClassExtension
    • Microsoft-Windows-GPIOButtons
    • Microsoft-Windows-GenericRoaming
    • Microsoft-Windows-GettingStarted
    • Microsoft-Windows-Globalization
    • Microsoft-Windows-Globalization-FontGroups
    • Microsoft-Windows-Graphics-Capture-Server
    • Microsoft-Windows-Graphics-Printing
    • Microsoft-Windows-Graphics-Printing3D
    • Microsoft-Windows-GroupPolicy
    • Microsoft-Windows-GroupPolicyTriggerProvider
    • Microsoft-Windows-HAL
    • Microsoft-Windows-HealthCenter
    • Microsoft-Windows-HealthCenterCPL
    • Microsoft-Windows-Heap-Snapshot
    • Microsoft-Windows-HelloForBusiness
    • Microsoft-Windows-Help
    • Microsoft-Windows-HomeGroup-ControlPanel
    • Microsoft-Windows-HomeGroup-ListenerService
    • Microsoft-Windows-HomeGroup-ProviderService
    • Microsoft-Windows-HotStart
    • Microsoft-Windows-HotspotAuth
    • Microsoft-Windows-Http-SQM-Provider
    • Microsoft-Windows-HttpEvent
    • Microsoft-Windows-HttpLog
    • Microsoft-Windows-HttpService
    • Microsoft-Windows-Hyper-V-ComputeLib
    • Microsoft-Windows-Hyper-V-Guest-Drivers-Dynamic-Memory
    • Microsoft-Windows-Hyper-V-Guest-Drivers-IcSvc
    • Microsoft-Windows-Hyper-V-Guest-Drivers-Storage-Filter
    • Microsoft-Windows-Hyper-V-Guest-Drivers-Vmbus
    • Microsoft-Windows-Hyper-V-Hypervisor
    • Microsoft-Windows-Hyper-V-KMCL-Child
    • Microsoft-Windows-Hyper-V-Netvsc
    • Microsoft-Windows-Hyper-V-VID
    • Microsoft-Windows-IE-F12-Provider
    • Microsoft-Windows-IE-SmartScreen
    • Microsoft-Windows-IME-Broker
    • Microsoft-Windows-IME-CandidateUI
    • Microsoft-Windows-IME-CustomerFeedbackManager
    • Microsoft-Windows-IME-CustomerFeedbackManagerUI
    • Microsoft-Windows-IME-JPAPI
    • Microsoft-Windows-IME-JPLMP
    • Microsoft-Windows-IME-JPPRED
    • Microsoft-Windows-IME-JPSetting
    • Microsoft-Windows-IME-JPTIP
    • Microsoft-Windows-IME-KRAPI
    • Microsoft-Windows-IME-KRTIP
    • Microsoft-Windows-IME-OEDCompiler
    • Microsoft-Windows-IME-Roaming
    • Microsoft-Windows-IME-SCCORE
    • Microsoft-Windows-IME-SCDICCOMPILER
    • Microsoft-Windows-IME-SCTIP
    • Microsoft-Windows-IME-TCCORE
    • Microsoft-Windows-IME-TCTIP
    • Microsoft-Windows-IME-TIP
    • Microsoft-Windows-IPBusEnum
    • Microsoft-Windows-IPMIProvider
    • Microsoft-Windows-IPNAT
    • Microsoft-Windows-IPSEC-SRV
    • Microsoft-Windows-IPxlatCfg
    • Microsoft-Windows-IdCtrls
    • Microsoft-Windows-IdleTriggerProvider
    • Microsoft-Windows-Immersive-Shell
    • Microsoft-Windows-Immersive-Shell-API
    • Microsoft-Windows-IndirectDisplays-ClassExtension-Events
    • Microsoft-Windows-Input-HIDCLASS
    • Microsoft-Windows-InputSwitch
    • Microsoft-Windows-Install-Agent
    • Microsoft-Windows-InstallUX
    • Microsoft-Windows-International
    • Microsoft-Windows-International-RegionalOptionsControlPanel
    • Microsoft-Windows-Iphlpsvc
    • Microsoft-Windows-Iphlpsvc-Trace
    • Microsoft-Windows-IsolatedUserMode
    • Microsoft-Windows-KPSSVC-WPP
    • Microsoft-Windows-KdsSvc
    • Microsoft-Windows-Kerberos-KdcProxy
    • Microsoft-Windows-Kernel-Acpi
    • Microsoft-Windows-Kernel-AppCompat
    • Microsoft-Windows-Kernel-Audit-API-Calls
    • Microsoft-Windows-Kernel-Boot
    • Microsoft-Windows-Kernel-BootDiagnostics
    • Microsoft-Windows-Kernel-CPU-Starvation
    • Microsoft-Windows-Kernel-Cache
    • Microsoft-Windows-Kernel-Disk
    • Microsoft-Windows-Kernel-Dump
    • Microsoft-Windows-Kernel-EventTracing
    • Microsoft-Windows-Kernel-File
    • Microsoft-Windows-Kernel-General
    • Microsoft-Windows-Kernel-IO
    • Microsoft-Windows-Kernel-Interrupt-Steering
    • Microsoft-Windows-Kernel-IoTrace
    • Microsoft-Windows-Kernel-Licensing-StartServiceTrigger
    • Microsoft-Windows-Kernel-LicensingSqm
    • Microsoft-Windows-Kernel-LiveDump
    • Microsoft-Windows-Kernel-Memory
    • Microsoft-Windows-Kernel-Network
    • Microsoft-Windows-Kernel-Pep
    • Microsoft-Windows-Kernel-PnP
    • Microsoft-Windows-Kernel-PnP-Rundown
    • Microsoft-Windows-Kernel-PnPConfig
    • Microsoft-Windows-Kernel-Power
    • Microsoft-Windows-Kernel-PowerTrigger
    • Microsoft-Windows-Kernel-Prefetch
    • Microsoft-Windows-Kernel-Prm
    • Microsoft-Windows-Kernel-Process
    • Microsoft-Windows-Kernel-Processor-Power
    • Microsoft-Windows-Kernel-Registry
    • Microsoft-Windows-Kernel-ShimEngine
    • Microsoft-Windows-Kernel-StoreMgr
    • Microsoft-Windows-Kernel-Tm
    • Microsoft-Windows-Kernel-Tm-Trigger
    • Microsoft-Windows-Kernel-WDI
    • Microsoft-Windows-Kernel-WHEA
    • Microsoft-Windows-Kernel-WSService-StartServiceTrigger
    • Microsoft-Windows-Kernel-XDV
    • Microsoft-Windows-KernelStreaming
    • Microsoft-Windows-KeyboardFilter
    • Microsoft-Windows-KnownFolders
    • Microsoft-Windows-L2NACP
    • Microsoft-Windows-LDAP-Client
    • Microsoft-Windows-LUA
    • Microsoft-Windows-LanGPA
    • Microsoft-Windows-LanguagePackSetup
    • Microsoft-Windows-LanguageProfile
    • Microsoft-Windows-LimitsManagement
    • Microsoft-Windows-LinkLayerDiscoveryProtocol
    • Microsoft-Windows-LiveId
    • Microsoft-Windows-LoadPerf
    • Microsoft-Windows-LocationService
    • Microsoft-Windows-MCCS-AccountAccessor
    • Microsoft-Windows-MCCS-AccountsHost
    • Microsoft-Windows-MCCS-AccountsRT
    • Microsoft-Windows-MCCS-ActiveSyncCsp
    • Microsoft-Windows-MCCS-ActiveSyncProvider
    • Microsoft-Windows-MCCS-DavSyncProvider
    • Microsoft-Windows-MCCS-EngineShared
    • Microsoft-Windows-MCCS-InternetMail
    • Microsoft-Windows-MCCS-InternetMailCsp
    • Microsoft-Windows-MCCS-NetworkHelper
    • Microsoft-Windows-MCCS-SyncController
    • Microsoft-Windows-MCCS-SyncUtil
    • Microsoft-Windows-MCT
    • Microsoft-Windows-MF
    • Microsoft-Windows-MF-FrameServer
    • Microsoft-Windows-MFH264Enc
    • Microsoft-Windows-MFH265Enc
    • Microsoft-Windows-MMCSS
    • Microsoft-Windows-MP4SDECD
    • Microsoft-Windows-MPEG2_DLNA-Encoder
    • Microsoft-Windows-MPRMSG
    • Microsoft-Windows-MPS-CLNT
    • Microsoft-Windows-MPS-DRV
    • Microsoft-Windows-MPS-SRV
    • Microsoft-Windows-MSDTC
    • Microsoft-Windows-MSDTC 2
    • Microsoft-Windows-MSDTC Client
    • Microsoft-Windows-MSDTC Client 2
    • Microsoft-Windows-MSFTEDIT
    • Microsoft-Windows-MSMPEG2ADEC
    • Microsoft-Windows-MSMPEG2VDEC
    • Microsoft-Windows-MSPaint
    • Microsoft-Windows-MUI
    • Microsoft-Windows-Magnification
    • Microsoft-Windows-Management-SecureAssessment
    • Microsoft-Windows-Management-UI
    • Microsoft-Windows-ManagementTools-RegistryProvider
    • Microsoft-Windows-ManagementTools-TaskManagerProvider
    • Microsoft-Windows-MapControls
    • Microsoft-Windows-Media Center Extender
    • Microsoft-Windows-Media-Protection-PlayReady-Performance
    • Microsoft-Windows-Media-Streaming
    • Microsoft-Windows-MediaEngine
    • Microsoft-Windows-MediaFoundation-MFCaptureEngine
    • Microsoft-Windows-MediaFoundation-MFReadWrite
    • Microsoft-Windows-MediaFoundation-MSVProc
    • Microsoft-Windows-MediaFoundation-MSVideoDSP
    • Microsoft-Windows-MediaFoundation-Performance
    • Microsoft-Windows-MediaFoundation-Performance-Core
    • Microsoft-Windows-MediaFoundation-Platform
    • Microsoft-Windows-MediaFoundation-PlayAPI
    • Microsoft-Windows-MeetingSpace
    • Microsoft-Windows-Memory-Diagnostic-Task-Handler
    • Microsoft-Windows-MemoryDiagnostics-Results
    • Microsoft-Windows-MemoryDiagnostics-Schedule
    • Microsoft-Windows-MiStreamProvider
    • Microsoft-Windows-Migration-Core
    • Microsoft-Windows-Minstore
    • Microsoft-Windows-Mobile-Broadband-Experience-Api
    • Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal
    • Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task
    • Microsoft-Windows-Mobile-Broadband-Experience-SmsApi
    • Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter
    • Microsoft-Windows-MobilityCenter
    • Microsoft-Windows-ModernDeployment-Diagnostics-Provider
    • Microsoft-Windows-MosHost
    • Microsoft-Windows-MountMgr
    • Microsoft-Windows-Mprddm
    • Microsoft-Windows-MsLbfoEventProvider
    • Microsoft-Windows-MsLbfoSysEvtProvider
    • Microsoft-Windows-MsiServer
    • Microsoft-Windows-NAPIPSecEnf
    • Microsoft-Windows-NCSI
    • Microsoft-Windows-NDF-HelperClassDiscovery
    • Microsoft-Windows-NDIS
    • Microsoft-Windows-NDIS-PacketCapture
    • Microsoft-Windows-NFC-ClassExtension
    • Microsoft-Windows-NTLM
    • Microsoft-Windows-NWiFi
    • Microsoft-Windows-Narrator
    • Microsoft-Windows-Narrator-Inproc
    • Microsoft-Windows-Ncasvc
    • Microsoft-Windows-NcdAutoSetup
    • Microsoft-Windows-NdisImPlatformEventProvider
    • Microsoft-Windows-NdisImPlatformSysEvtProvider
    • Microsoft-Windows-Ndu
    • Microsoft-Windows-Netshell
    • Microsoft-Windows-Network-Connection-Broker
    • Microsoft-Windows-Network-DataUsage
    • Microsoft-Windows-Network-ExecutionContext
    • Microsoft-Windows-Network-Setup
    • Microsoft-Windows-Network-and-Sharing-Center
    • Microsoft-Windows-NetworkAccessProtection
    • Microsoft-Windows-NetworkBridge
    • Microsoft-Windows-NetworkGCW
    • Microsoft-Windows-NetworkManagerTriggerProvider
    • Microsoft-Windows-NetworkProfile
    • Microsoft-Windows-NetworkProfileTriggerProvider
    • Microsoft-Windows-NetworkProvider
    • Microsoft-Windows-NetworkProvisioning
    • Microsoft-Windows-NetworkSecurity
    • Microsoft-Windows-NetworkStatus
    • Microsoft-Windows-Networking-Correlation
    • Microsoft-Windows-Networking-RealTimeCommunication
    • Microsoft-Windows-NlaSvc
    • Microsoft-Windows-Ntfs
    • Microsoft-Windows-Ntfs-SQM
    • Microsoft-Windows-Ntfs-UBPM
    • Microsoft-Windows-NtfsLog_2fa848f80350371e48dfc224687745af
    • Microsoft-Windows-NvdimmN
    • Microsoft-Windows-NvmeDisk
    • Microsoft-Windows-OLE-Perf
    • Microsoft-Windows-OLEACC
    • Microsoft-Windows-OOBE-FirstLogonAnim
    • Microsoft-Windows-OOBE-Machine
    • Microsoft-Windows-OOBE-Machine-Core
    • Microsoft-Windows-OOBE-Machine-DUI
    • Microsoft-Windows-OOBE-Machine-Plugins
    • Microsoft-Windows-OOBE-Machine-Plugins-Wireless
    • Microsoft-Windows-OcSetup
    • Microsoft-Windows-OfflineFiles
    • Microsoft-Windows-OneBackup
    • Microsoft-Windows-OneX
    • Microsoft-Windows-OobeLdr
    • Microsoft-Windows-OtpCredentialProviderEvt
    • Microsoft-Windows-OverlayFilter
    • Microsoft-Windows-P2PIMSvc
    • Microsoft-Windows-PCI
    • Microsoft-Windows-PDC
    • Microsoft-Windows-PDFReader
    • Microsoft-Windows-PDH
    • Microsoft-Windows-PNRPSvc
    • Microsoft-Windows-PackageStateRoaming
    • Microsoft-Windows-ParentalControls
    • Microsoft-Windows-Partition
    • Microsoft-Windows-PeerToPeerDrtEventProvider
    • Microsoft-Windows-PeopleNearMe
    • Microsoft-Windows-PerceptionRuntime
    • Microsoft-Windows-PerceptionSensorDataService
    • Microsoft-Windows-PerfCtrs
    • Microsoft-Windows-PerfDisk
    • Microsoft-Windows-PerfNet
    • Microsoft-Windows-PerfOS
    • Microsoft-Windows-PerfProc
    • Microsoft-Windows-Perflib
    • Microsoft-Windows-Performance-Recorder-Control
    • Microsoft-Windows-PersistentMemory-INvdimm
    • Microsoft-Windows-PersistentMemory-Nvdimm
    • Microsoft-Windows-PersistentMemory-NvdimmN
    • Microsoft-Windows-PersistentMemory-PmemDisk
    • Microsoft-Windows-PersistentMemory-ScmBus
    • Microsoft-Windows-PersistentMemory-VirtualNvdimm
    • Microsoft-Windows-Photo-Image-Codec
    • Microsoft-Windows-PhotoAcq
    • Microsoft-Windows-PktMon
    • Microsoft-Windows-PlayToManager
    • Microsoft-Windows-PmemDisk
    • Microsoft-Windows-PnPMgrTriggerProvider
    • Microsoft-Windows-PortableDeviceStatusProvider
    • Microsoft-Windows-PortableDeviceSyncProvider
    • Microsoft-Windows-PortableWorkspaces-Creator-Tool
    • Microsoft-Windows-Power-CAD
    • Microsoft-Windows-Power-Meter-Polling
    • Microsoft-Windows-Power-Troubleshooter
    • Microsoft-Windows-PowerCfg
    • Microsoft-Windows-PowerCpl
    • Microsoft-Windows-PowerShell
    • Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager
    • Microsoft-Windows-PriResources-Deployment
    • Microsoft-Windows-PrimaryNetworkIcon
    • Microsoft-Windows-PrintBRM
    • Microsoft-Windows-PrintDialogs
    • Microsoft-Windows-PrintDialogs3D
    • Microsoft-Windows-PrintService
    • Microsoft-Windows-PrintService-USBMon
    • Microsoft-Windows-PrintSpooler
    • Microsoft-Windows-Privacy-Auditing
    • Microsoft-Windows-Privacy-Auditing-Activity-History-Privacy-Settings
    • Microsoft-Windows-Privacy-Auditing-CPSS
    • Microsoft-Windows-Privacy-Auditing-DiagnosticData
    • Microsoft-Windows-Privacy-Auditing-ImproveInkingAndTyping
    • Microsoft-Windows-Privacy-Auditing-OneSettingsClient
    • Microsoft-Windows-Privacy-Auditing-PersonalInkingAndTyping
    • Microsoft-Windows-Privacy-Auditing-TailoredExperiences
    • Microsoft-Windows-ProcessExitMonitor
    • Microsoft-Windows-ProcessStateManager
    • Microsoft-Windows-Processor-Aggregator
    • Microsoft-Windows-Program-Compatibility-Assistant
    • Microsoft-Windows-Provisioning-Diagnostics-Provider
    • Microsoft-Windows-Proximity-Common
    • Microsoft-Windows-Push-To-Install-Service
    • Microsoft-Windows-PushNotifications-Developer
    • Microsoft-Windows-PushNotifications-InProc
    • Microsoft-Windows-PushNotifications-Platform
    • Microsoft-Windows-QoS-Pacer
    • Microsoft-Windows-QoS-qWAVE
    • Microsoft-Windows-RPC
    • Microsoft-Windows-RPC-Events
    • Microsoft-Windows-RPC-FirewallManager
    • Microsoft-Windows-RPC-Proxy-LBS
    • Microsoft-Windows-RPCSS
    • Microsoft-Windows-RRAS
    • Microsoft-Windows-RTWorkQueue-Extended
    • Microsoft-Windows-RTWorkQueue-Threading
    • Microsoft-Windows-RadioManager
    • Microsoft-Windows-Ras-AgileVpn
    • Microsoft-Windows-Ras-NdisWanPacketCapture
    • Microsoft-Windows-RasClusterResource
    • Microsoft-Windows-RasServer
    • Microsoft-Windows-RasSstp
    • Microsoft-Windows-Rdms-UI
    • Microsoft-Windows-ReFS
    • Microsoft-Windows-ReFS-v1
    • Microsoft-Windows-ReadyBoost
    • Microsoft-Windows-ReadyBoostDriver
    • Microsoft-Windows-Recovery
    • Microsoft-Windows-Registry-SQM-Provider
    • Microsoft-Windows-Reliability-Analysis-Agent
    • Microsoft-Windows-Reliability-Analysis-Engine
    • Microsoft-Windows-RemoteApp and Desktop Connections
    • Microsoft-Windows-RemoteAssistance
    • Microsoft-Windows-RemoteDesktopServices-RdpCoreTS
    • Microsoft-Windows-RemoteDesktopServices-RemoteDesktopSessionManager
    • Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc
    • Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport
    • Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport
    • Microsoft-Windows-RemoteDesktopServices-SessionServices
    • Microsoft-Windows-Remotefs-Rdbss
    • Microsoft-Windows-Remotefs-UTProvider
    • Microsoft-Windows-ResetEng
    • Microsoft-Windows-ResetEng-Trace
    • Microsoft-Windows-Resource-Exhaustion-Detector
    • Microsoft-Windows-Resource-Exhaustion-Resolver
    • Microsoft-Windows-Resource-Leak-Diagnostic
    • Microsoft-Windows-ResourceManager
    • Microsoft-Windows-ResourcePublication
    • Microsoft-Windows-RestartManager
    • Microsoft-Windows-RetailDemo
    • Microsoft-Windows-Runtime-Graphics
    • Microsoft-Windows-Runtime-Media
    • Microsoft-Windows-Runtime-Networking
    • Microsoft-Windows-Runtime-Networking-BackgroundTransfer
    • Microsoft-Windows-Runtime-Web-Http
    • Microsoft-Windows-Runtime-WebAPI
    • Microsoft-Windows-SCPNP
    • Microsoft-Windows-SEC
    • Microsoft-Windows-SEC-Mitigation
    • Microsoft-Windows-SENSE
    • Microsoft-Windows-SMBClient
    • Microsoft-Windows-SMBDirect
    • Microsoft-Windows-SMBServer
    • Microsoft-Windows-SMBWitnessClient
    • Microsoft-Windows-SPB-ClassExtension
    • Microsoft-Windows-SPB-HIDI2C
    • Microsoft-Windows-SQM-Events
    • Microsoft-Windows-Schannel-Events
    • Microsoft-Windows-ScmBus
    • Microsoft-Windows-ScmDisk0101
    • Microsoft-Windows-Sdbus
    • Microsoft-Windows-Sdstor
    • Microsoft-Windows-Search
    • Microsoft-Windows-Search-Core
    • Microsoft-Windows-Search-ProfileNotify
    • Microsoft-Windows-Search-ProtocolHandlers
    • Microsoft-Windows-Security-Adminless
    • Microsoft-Windows-Security-Audit-Configuration-Client
    • Microsoft-Windows-Security-Auditing
    • Microsoft-Windows-Security-Configuration-Wizard
    • Microsoft-Windows-Security-EnterpriseData-FileRevocationManager
    • Microsoft-Windows-Security-ExchangeActiveSyncProvisioning
    • Microsoft-Windows-Security-IdentityListener
    • Microsoft-Windows-Security-IdentityStore
    • Microsoft-Windows-Security-Kerberos
    • Microsoft-Windows-Security-LessPrivilegedAppContainer
    • Microsoft-Windows-Security-Licensing-SLC
    • Microsoft-Windows-Security-Mitigations
    • Microsoft-Windows-Security-Netlogon
    • Microsoft-Windows-Security-SPP
    • Microsoft-Windows-Security-SPP-UX
    • Microsoft-Windows-Security-SPP-UX-GC
    • Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging
    • Microsoft-Windows-Security-SPP-UX-Notifications
    • Microsoft-Windows-Security-UserConsentVerifier
    • Microsoft-Windows-Security-Vault
    • Microsoft-Windows-SecurityMitigationsBroker
    • Microsoft-Windows-SendTo
    • Microsoft-Windows-Sens
    • Microsoft-Windows-SenseIR
    • Microsoft-Windows-Sensors
    • Microsoft-Windows-Sensors-Core
    • Microsoft-Windows-Sensors-Core-Performance
    • Microsoft-Windows-Serial-ClassExtension
    • Microsoft-Windows-Serial-ClassExtension-V2
    • Microsoft-Windows-ServerEssentials-Deployment
    • Microsoft-Windows-ServerManager
    • Microsoft-Windows-ServerManager-ConfigureSMRemoting
    • Microsoft-Windows-ServerManager-DeploymentProvider
    • Microsoft-Windows-ServerManager-ManagementProvider
    • Microsoft-Windows-ServerManager-MultiMachine
    • Microsoft-Windows-ServiceReportingApi
    • Microsoft-Windows-ServiceTriggerPerfEventProvider
    • Microsoft-Windows-Services
    • Microsoft-Windows-Services-Svchost
    • Microsoft-Windows-Servicing
    • Microsoft-Windows-SettingSync
    • Microsoft-Windows-SettingSync-Azure
    • Microsoft-Windows-SettingSync-Desktop
    • Microsoft-Windows-SettingSync-OneDrive
    • Microsoft-Windows-Setup
    • Microsoft-Windows-SetupCl
    • Microsoft-Windows-SetupPlatform
    • Microsoft-Windows-SetupQueue
    • Microsoft-Windows-SetupUGC
    • Microsoft-Windows-ShareMedia-ControlPanel
    • Microsoft-Windows-SharedAccess_NAT
    • Microsoft-Windows-Shell-AppWizCpl
    • Microsoft-Windows-Shell-AuthUI
    • Microsoft-Windows-Shell-ConnectedAccountState
    • Microsoft-Windows-Shell-Core
    • Microsoft-Windows-Shell-DefaultPrograms
    • Microsoft-Windows-Shell-LockScreenContent
    • Microsoft-Windows-Shell-OpenWith
    • Microsoft-Windows-Shell-Search-UriHandler
    • Microsoft-Windows-Shell-Shwebsvc
    • Microsoft-Windows-Shell-ZipFolder
    • Microsoft-Windows-ShellCommon-StartLayoutPopulation
    • Microsoft-Windows-Shsvcs
    • Microsoft-Windows-Sidebar
    • Microsoft-Windows-SkyDrive-SyncEngine
    • Microsoft-Windows-SleepStudy
    • Microsoft-Windows-SmartCard-Audit
    • Microsoft-Windows-SmartCard-DeviceEnum
    • Microsoft-Windows-SmartCard-TPM-VCard-Module
    • Microsoft-Windows-SmartScreen
    • Microsoft-Windows-Smartcard-Server
    • Microsoft-Windows-Smartcard-Trigger
    • Microsoft-Windows-SmbServer
    • Microsoft-Windows-SmbWmiProvider
    • Microsoft-Windows-SoftwareInventoryLogging-Provider
    • Microsoft-Windows-SoftwareRestrictionPolicies
    • Microsoft-Windows-Speech-TTS
    • Microsoft-Windows-Speech-UserExperience
    • Microsoft-Windows-Spell-Checking
    • Microsoft-Windows-SpellChecker
    • Microsoft-Windows-Spellchecking-Host
    • Microsoft-Windows-SpoolerFilterPipelineSVC
    • Microsoft-Windows-SpoolerSpoolSV
    • Microsoft-Windows-SpoolerSpoolss
    • Microsoft-Windows-SpoolerTCPMon
    • Microsoft-Windows-SpoolerWin32SPL
    • Microsoft-Windows-SruMon
    • Microsoft-Windows-SrumTelemetry
    • Microsoft-Windows-StackDB
    • Microsoft-Windows-StartLmhosts
    • Microsoft-Windows-StartNameRes
    • Microsoft-Windows-StartupRepair
    • Microsoft-Windows-StateRepository
    • Microsoft-Windows-StickyNotes
    • Microsoft-Windows-StorDiag
    • Microsoft-Windows-StorPort
    • Microsoft-Windows-StorSqm
    • Microsoft-Windows-Storage-Tiering
    • Microsoft-Windows-Storage-Tiering-IoHeat
    • Microsoft-Windows-StorageManagement
    • Microsoft-Windows-StorageManagement-PartUtil
    • Microsoft-Windows-StorageManagement-WSP-FS
    • Microsoft-Windows-StorageManagement-WSP-Health
    • Microsoft-Windows-StorageManagement-WSP-Host
    • Microsoft-Windows-StorageManagement-WSP-Spaces
    • Microsoft-Windows-StorageSettings
    • Microsoft-Windows-StorageSpaces-Api
    • Microsoft-Windows-StorageSpaces-Driver
    • Microsoft-Windows-StorageSpaces-ManagementAgent
    • Microsoft-Windows-StorageSpaces-Parser
    • Microsoft-Windows-StorageSpaces-SpaceManager
    • Microsoft-Windows-Store
    • Microsoft-Windows-Store-Client-UI
    • Microsoft-Windows-Storsvc
    • Microsoft-Windows-Subsys-Csr
    • Microsoft-Windows-Subsys-SMSS
    • Microsoft-Windows-Superfetch
    • Microsoft-Windows-Sysprep
    • Microsoft-Windows-System-Profile-HardwareId
    • Microsoft-Windows-System-Restore
    • Microsoft-Windows-SystemEventsBroker
    • Microsoft-Windows-SystemHealthAgent
    • Microsoft-Windows-SystemSettings
    • Microsoft-Windows-SystemSettingsHandlers
    • Microsoft-Windows-SystemSettingsThreshold
    • Microsoft-Windows-SystemSettingsV2
    • Microsoft-Windows-TBS
    • Microsoft-Windows-TCPIP
    • Microsoft-Windows-TPM-WMI
    • Microsoft-Windows-TSF-UIManager
    • Microsoft-Windows-TSF-msctf
    • Microsoft-Windows-TSF-msutb
    • Microsoft-Windows-TZSync
    • Microsoft-Windows-TZUtil
    • Microsoft-Windows-TabletPC-CoreInkRecognition
    • Microsoft-Windows-TabletPC-InputPanel
    • Microsoft-Windows-TabletPC-InputPersonalization
    • Microsoft-Windows-TabletPC-MathInput
    • Microsoft-Windows-TabletPC-MathRecognizer
    • Microsoft-Windows-TabletPC-Platform-Input-Core
    • Microsoft-Windows-TabletPC-Platform-Input-Ninput
    • Microsoft-Windows-TabletPC-Platform-Input-Wisp
    • Microsoft-Windows-TabletPC-Platform-Manipulations
    • Microsoft-Windows-TaskScheduler
    • Microsoft-Windows-TaskbarCPL
    • Microsoft-Windows-Tcpip-SQM-Provider
    • Microsoft-Windows-Telephony-PhoneOm
    • Microsoft-Windows-Telephony-PhoneProviders
    • Microsoft-Windows-Telephony-PhoneService
    • Microsoft-Windows-Telephony-PhoneUtil
    • Microsoft-Windows-Telephony-TelephonyInteractiveUser
    • Microsoft-Windows-Telephony-VoipRT
    • Microsoft-Windows-TenantRestrictions
    • Microsoft-Windows-TerminalServices-ClientActiveXCore
    • Microsoft-Windows-TerminalServices-ClientUSBDevices
    • Microsoft-Windows-TerminalServices-LocalSessionManager
    • Microsoft-Windows-TerminalServices-MediaRedirection
    • Microsoft-Windows-TerminalServices-MediaRedirection-DShow
    • Microsoft-Windows-TerminalServices-PnPDevices
    • Microsoft-Windows-TerminalServices-Printers
    • Microsoft-Windows-TerminalServices-RdpSoundDriver
    • Microsoft-Windows-TerminalServices-RemoteConnectionManager
    • Microsoft-Windows-TerminalServices-ServerUSBDevices
    • Microsoft-Windows-TerminalServices-SessionBroker-Client
    • Microsoft-Windows-Tethering-Manager
    • Microsoft-Windows-Tethering-Station
    • Microsoft-Windows-TextPredictionEngine
    • Microsoft-Windows-ThemeCPL
    • Microsoft-Windows-ThemeUI
    • Microsoft-Windows-Thermal-Polling
    • Microsoft-Windows-Threat-Intelligence
    • Microsoft-Windows-Time-Service
    • Microsoft-Windows-Time-Service-PTP-Provider
    • Microsoft-Windows-TimeBroker
    • Microsoft-Windows-TriggerEmulatorProvider
    • Microsoft-Windows-Troubleshooting-Recommended
    • Microsoft-Windows-TunnelDriver
    • Microsoft-Windows-TunnelDriver-SQM-Provider
    • Microsoft-Windows-UAC
    • Microsoft-Windows-UAC-FileVirtualization
    • Microsoft-Windows-UI-Input-Inking
    • Microsoft-Windows-UI-Search
    • Microsoft-Windows-UI-Shell
    • Microsoft-Windows-UIAnimation
    • Microsoft-Windows-UIAutomationCore
    • Microsoft-Windows-UIRibbon
    • Microsoft-Windows-URLMon
    • Microsoft-Windows-USB-CCID
    • Microsoft-Windows-USB-MAUSBHOST
    • Microsoft-Windows-USB-UCX
    • Microsoft-Windows-USB-USB4DeviceRouter-EventLogs
    • Microsoft-Windows-USB-USBHUB
    • Microsoft-Windows-USB-USBHUB3
    • Microsoft-Windows-USB-USBPORT
    • Microsoft-Windows-USB-USBXHCI
    • Microsoft-Windows-UniversalTelemetryClient
    • Microsoft-Windows-Usbstor
    • Microsoft-Windows-User Device Registration
    • Microsoft-Windows-User Profiles General
    • Microsoft-Windows-User Profiles Service
    • Microsoft-Windows-User-ControlPanel
    • Microsoft-Windows-User-Diagnostic
    • Microsoft-Windows-User-Loader
    • Microsoft-Windows-User-PnP
    • Microsoft-Windows-UserAccessLogging
    • Microsoft-Windows-UserAccountControl
    • Microsoft-Windows-UserDataAccess-CEMAPI
    • Microsoft-Windows-UserDataAccess-CallHistoryClient
    • Microsoft-Windows-UserDataAccess-PimIndexMaintenance
    • Microsoft-Windows-UserDataAccess-Poom
    • Microsoft-Windows-UserDataAccess-UnifiedStore
    • Microsoft-Windows-UserDataAccess-UserDataApis
    • Microsoft-Windows-UserDataAccess-UserDataService
    • Microsoft-Windows-UserDataAccess-UserDataUtils
    • Microsoft-Windows-UserModePowerService
    • Microsoft-Windows-UserPnp
    • Microsoft-Windows-UxInit
    • Microsoft-Windows-UxTheme
    • Microsoft-Windows-VAN
    • Microsoft-Windows-VDRVROOT
    • Microsoft-Windows-VHDMP
    • Microsoft-Windows-VIRTDISK
    • Microsoft-Windows-VPN-Client
    • Microsoft-Windows-VWiFi
    • Microsoft-Windows-VerifyHardwareSecurity
    • Microsoft-Windows-Video-For-Windows
    • Microsoft-Windows-Volume
    • Microsoft-Windows-VolumeControl
    • Microsoft-Windows-VolumeSnapshot-Driver
    • Microsoft-Windows-WABSyncProvider
    • Microsoft-Windows-WCN-Config-Registrar
    • Microsoft-Windows-WCN-Config-Registrar-Secure
    • Microsoft-Windows-WCNWiz
    • Microsoft-Windows-WDAG-PolicyEvaluator-CSP
    • Microsoft-Windows-WDAG-PolicyEvaluator-GP
    • Microsoft-Windows-WDAG-Service
    • Microsoft-Windows-WEPHOSTSVC
    • Microsoft-Windows-WER-Diag
    • Microsoft-Windows-WER-PayloadHealth
    • Microsoft-Windows-WER-SystemErrorReporting
    • Microsoft-Windows-WFP
    • Microsoft-Windows-WHEA-Logger
    • Microsoft-Windows-WLAN-AutoConfig
    • Microsoft-Windows-WLAN-BMRHandler
    • Microsoft-Windows-WLAN-Driver
    • Microsoft-Windows-WLAN-MediaManager
    • Microsoft-Windows-WLGPA
    • Microsoft-Windows-WMI
    • Microsoft-Windows-WMI-Activity
    • Microsoft-Windows-WMP
    • Microsoft-Windows-WMP-Setup_WM
    • Microsoft-Windows-WMPDMCCore
    • Microsoft-Windows-WMPDMCUI
    • Microsoft-Windows-WMPNSS-PublicAPI
    • Microsoft-Windows-WMPNSS-Service
    • Microsoft-Windows-WMPNSSUI
    • Microsoft-Windows-WMVENCOD
    • Microsoft-Windows-WPD-API
    • Microsoft-Windows-WPD-CompositeClassDriver
    • Microsoft-Windows-WPD-MTPBT
    • Microsoft-Windows-WPD-MTPClassDriver
    • Microsoft-Windows-WPD-MTPIP
    • Microsoft-Windows-WPD-MTPUS
    • Microsoft-Windows-WPDClassInstaller
    • Microsoft-Windows-WSC-SRV
    • Microsoft-Windows-WSMAN-SEL_LogRecord
    • Microsoft-Windows-WUSA
    • Microsoft-Windows-WWAN-CFE
    • Microsoft-Windows-WWAN-MM-EVENTS
    • Microsoft-Windows-WWAN-MediaManager
    • Microsoft-Windows-WWAN-NDISUIO-EVENTS
    • Microsoft-Windows-WWAN-SVC-EVENTS
    • Microsoft-Windows-WWAN-UI-EVENTS
    • Microsoft-Windows-Wallet
    • Microsoft-Windows-Wcmsvc
    • Microsoft-Windows-WebAuth
    • Microsoft-Windows-WebAuthN
    • Microsoft-Windows-WebIO
    • Microsoft-Windows-WebServices
    • Microsoft-Windows-WebcamExperience
    • Microsoft-Windows-WebdavClient-LookupServiceTrigger
    • Microsoft-Windows-Websocket-Protocol-Component
    • Microsoft-Windows-WerKernel
    • Microsoft-Windows-WiFiDisplay
    • Microsoft-Windows-WiFiHotspotService
    • Microsoft-Windows-WiFiNetworkManager
    • Microsoft-Windows-Win32k
    • Microsoft-Windows-WinHttp
    • Microsoft-Windows-WinHttp-Pca
    • Microsoft-Windows-WinINet
    • Microsoft-Windows-WinINet-Capture
    • Microsoft-Windows-WinINet-Config
    • Microsoft-Windows-WinINet-Pca
    • Microsoft-Windows-WinJson
    • Microsoft-Windows-WinMDE
    • Microsoft-Windows-WinML
    • Microsoft-Windows-WinNat
    • Microsoft-Windows-WinQuic
    • Microsoft-Windows-WinRM
    • Microsoft-Windows-WinRT-Error
    • Microsoft-Windows-Windeploy
    • Microsoft-Windows-Windows Defender
    • Microsoft-Windows-Windows Firewall With Advanced Security
    • Microsoft-Windows-WindowsBackup
    • Microsoft-Windows-WindowsColorSystem
    • Microsoft-Windows-WindowsSystemAssessmentTool
    • Microsoft-Windows-WindowsToGo-StartupOptions
    • Microsoft-Windows-WindowsUIImmersive
    • Microsoft-Windows-WindowsUpdateClient
    • Microsoft-Windows-Wininit
    • Microsoft-Windows-Winlogon
    • Microsoft-Windows-Winsock-AFD
    • Microsoft-Windows-Winsock-NameResolution
    • Microsoft-Windows-Winsock-SQM
    • Microsoft-Windows-Winsock-Sockets
    • Microsoft-Windows-Winsock-WS2HELP
    • Microsoft-Windows-Winsrv
    • Microsoft-Windows-Wired-AutoConfig
    • Microsoft-Windows-WlanConn
    • Microsoft-Windows-WlanDlg
    • Microsoft-Windows-WlanPref
    • Microsoft-Windows-Wmbclass-Opn
    • Microsoft-Windows-Wordpad
    • Microsoft-Windows-WorkFolders
    • Microsoft-Windows-Workplace Join
    • Microsoft-Windows-WwanClient_ba7d1e0209ba3c1618d0ff4e1b3cc41f
    • Microsoft-Windows-WwanProtDim_a4883e4812543bef236935bfe6c0b03c
    • Microsoft-Windows-XAML
    • Microsoft-Windows-XAML-Diagnostics
    • Microsoft-Windows-XAudio2
    • Microsoft-Windows-XWizards
    • Microsoft-Windows-ZTraceMaps
    • Microsoft-Windows-exFAT-SQM
    • Microsoft-Windows-hidcfu
    • Microsoft-Windows-mobsync
    • Microsoft-Windows-msmpeg2venc
    • Microsoft-Windows-ntshrui
    • Microsoft-Windows-osk
    • Microsoft-Windows-propsys
    • Microsoft-Windows-stobject
    • Microsoft-Windows-wmbclass
    • Microsoft-Windows-wmvdecod
    • Microsoft-WindowsPhone-ConfigManager2
    • Microsoft-WindowsPhone-CoreMessaging
    • Microsoft-WindowsPhone-CoreUIComponents
    • Microsoft-WindowsPhone-LocationServiceProvider
    • Microsoft-WindowsPhone-Net-Cellcore-CellManager
    • Microsoft-WindowsPhone-Net-Cellcore-CellularAPI
    • Microsoft-WindowsPhone-Ufx
    • Microsoft-WindowsPhone-UfxSynopsys
    • Microsoft.Transactions.Bridge 3.0.0.0
    • Microsoft.Transactions.Bridge 4.0.0.0
    • Microsoft.Windows.ResourceManager
    • Modem
    • Mraid35x
    • MrxSmb
    • MsBridge
    • MsiInstaller
    • Multimedia-HEVCDECODER
    • Mup
    • NTMS
    • NdisImPlatform
    • NdisWan
    • NdisWanLegacy
    • NetBIOS
    • NetBT
    • NetDDE
    • NetDDE Object
    • NetJoin
    • Netlogon
    • Network Optional Components
    • NisDrvWFP Provider
    • Nla
    • NtServicePack
    • Ntfs
    • OSPF
    • OSPFMib
    • Oakley
    • Offline Files
    • Offline Files Service
    • OpenSSH
    • PNPMEM
    • PSched
    • Parport
    • Parvdm
    • PassportManager
    • PerfDisk
    • PerfNet
    • PerfOS
    • PerfProc
    • Perfctrs
    • Perflib
    • Perfmon
    • PlugPlayManager
    • PolicyAgent
    • Power
    • PowerShell
    • PptpMiniport
    • Print
    • PrintFilterPipelineSvc
    • Processor
    • RFCOMM
    • RPC
    • RSVP
    • RTL8023x64
    • RasAuto
    • RasCfg
    • RasClient
    • RasMan
    • Rasman
    • Rdbss
    • ReFS
    • Recording
    • Remote Assistance
    • RemoteAccess
    • Removable Storage Service
    • SAFrdms
    • SAM
    • SC Manager
    • SCW
    • SCW Analysis
    • SCardSvr
    • SM Space Provider
    • SMSvcHost 3.0.0.0
    • SMSvcHost 4.0.0.0
    • SNMPTRAP
    • SPP
    • SSDPSRV
    • Save Dump
    • SceCli
    • SceSrv
    • Schannel
    • Schedule
    • SclgNtfy
    • Security
    • Security Account Manager
    • SecurityCenter
    • Serial
    • Server
    • Service Control Manager
    • ServiceModel 3.0.0.0
    • ServiceModel 4.0.0.0
    • ServiceModel Audit 3.0.0.0
    • ServiceModel Audit 4.0.0.0
    • Setup
    • SiSRaid2
    • SiSRaid4
    • SideBySide
    • Simbad
    • SmartSAMD
    • Smb
    • Software Installation
    • Software Restriction Policies
    • Software Restriction Policy
    • SpeechRuntime
    • Spooler
    • SpoolerCtrs
    • SrmSvc
    • Srv
    • Standard TCP/IP Port
    • Starter
    • StillImage
    • Sym_hi
    • Sym_u3
    • Symc8xx
    • SysmonLog
    • System
    • System Error
    • System Restore
    • System.IO.Log 3.0.0.0
    • System.IO.Log 4.0.0.0
    • System.IdentityModel 3.0.0.0
    • System.IdentityModel 4.0.0.0
    • System.Runtime.Serialization 3.0.0.0
    • System.Runtime.Serialization 4.0.0.0
    • System.ServiceModel 3.0.0.0
    • System.ServiceModel 4.0.0.0
    • TCP/IP
    • TCPMon
    • TPM
    • Tcpip
    • Tcpip6
    • TermDD
    • TermServDevices
    • TermServJet
    • TermServLicensing
    • TermServSessDir
    • TermService
    • Tlntsvr
    • TrustMonitor
    • UASPStor
    • UEFI
    • UPS
    • USER32
    • UlSata
    • UmRdpService
    • Universal Print
    • UploadM
    • User32
    • Userenv
    • Userinit
    • VBRuntime
    • VDS Basic Provider
    • VDS Basic Provider 1.0
    • VDS Dynamic Provider
    • VDS Dynamic Provider 1.0
    • VDS Dynamic Provider 2.0
    • VDS Virtual Disk Provider
    • VSS
    • VSSAudit
    • VSSetup
    • VSTXRAID
    • VgaSave
    • ViaC7
    • Virtual Disk Service
    • VolSnap
    • Volsnap
    • Volume Shadow Copy Service Task
    • W32Time
    • W3SVC
    • W3SVC-WP
    • WINSATAPI_ETW_PROVIDER
    • WLBS
    • WLMS
    • WMI.NET Provider Extension
    • WMIAdapter
    • WMIxWDM
    • WPC
    • WSH
    • WZCSVC
    • WacomPen
    • Wd
    • WebClient
    • WerSvc
    • Win32k
    • WinHttpAutoProxySvc
    • WinMgmt
    • WinNat
    • Windows 3.1 Migration
    • Windows Backup
    • Windows Disk Diagnostic
    • Windows Error Reporting
    • Windows File Protection
    • Windows Product Activation
    • Windows Script Host
    • Windows Update Agent
    • Windows-ApplicationModel-Store-SDK
    • Winlogon
    • WmdmPmSN
    • Wmi
    • Workstation
    • Wow64 Emulation Layer
    • abiosdsk
    • abp480n5
    • acpi
    • acpiec
    • adp94xx
    • adpahci
    • adpu160m
    • adpu320
    • afcnt
    • agp440
    • aha154x
    • aic116x
    • aic78u2
    • aic78xx
    • aliide
    • amdide
    • amdsata
    • amdsbs
    • amdxata
    • ami0nt
    • amsint
    • apphelp
    • arc
    • arcsas
    • asc
    • asc3350p
    • asc3550
    • atapi
    • atdisk
    • b06bdrv
    • b57nd60a
    • beep
    • bfadfcoei
    • bfadi
    • buslogic
    • bxfcoe
    • bxois
    • cbidf2k
    • cd20xrnt
    • cdaudio
    • cdfs
    • cdrom
    • changer
    • cht4iscsi
    • cht4vbd
    • cirrus
    • cmdide
    • cpqarray
    • cpqarry2
    • cpqcissm
    • cpqfcalm
    • cpqfws2e
    • crypt32
    • cryptsvc
    • dac2w2k
    • dac960nt
    • deckzpsx
    • dellcerc
    • disk
    • diskperf
    • dmboot
    • dmio
    • dmvsc
    • dpti2o
    • e1i65x64
    • e1i68x64
    • e1iexpress
    • ebdrv
    • ebdrv0
    • edgeupdate
    • edgeupdatem
    • efs
    • ehExtHost
    • ehRecvr
    • ehSched
    • ehshell
    • elxfcoe
    • elxstor
    • eventlog
    • exFAT
    • fastfat
    • fd16_700
    • fdc
    • fireport
    • flashpnt
    • flpydisk
    • fs_rec
    • ftdisk
    • gagp30kx
    • hidi2c
    • hidspi
    • hpmon
    • hpn
    • hpt3xx
    • hvservice
    • i2omgmt
    • i2omp
    • i8042prt
    • iScsiPrt
    • iaLPSSi_GPIO
    • iaLPSSi_I2C
    • iaStorAV
    • iaStorAVC
    • iaStorV
    • ibbus
    • iirsp
    • ini910u
    • intelide
    • intelppm
    • invdimm
    • ioatdma
    • ipsecevents
    • ipsraidn
    • irevents
    • isapnp
    • iteatapi
    • iteraid
    • kbdclass
    • kbdhid
    • kdnic
    • lbrtfdc
    • lltdio
    • lp6nds35
    • mcstore
    • megasas
    • megasas2i
    • megasas35i
    • megasr
    • mlx4_bus
    • mnmsrvc
    • mouclass
    • mouhid
    • mpi3drvi
    • mpio
    • mraid35x
    • mrxsmb
    • msadlib
    • msfs
    • mshidumdf
    • mvumis
    • napagent
    • napipsecenf
    • ncrc710
    • ndis
    • ndiswanlegacy
    • netvsc
    • netvscvfpp
    • nfrd960
    • npfs
    • ntbackup
    • ntfs
    • null
    • nv_agp
    • nvdimm
    • nvdimmn
    • nvmedisk
    • nvraid
    • nvstor
    • parallel
    • parport
    • partmgr
    • parvdm
    • pci
    • pciide
    • pcmcia
    • perc2
    • percsas2i
    • percsas3i
    • pmem
    • qebdrv
    • qefcoe
    • qeois
    • ql1080
    • ql10wnt
    • ql12160
    • ql1240
    • ql1280
    • ql2100
    • ql2200
    • ql2300
    • ql2300i
    • ql40xx
    • ql40xx2i
    • qlfcoei
    • rdbss
    • redbook
    • rhproxy
    • rspndr
    • rtl8139
    • safrslv
    • sbp2port
    • scmbus
    • scmdisk0101
    • scsiport
    • sercx
    • sercx2
    • serial
    • sermouse
    • sfloppy
    • sglfb
    • sndblst
    • spaceport
    • sparrow
    • spbcx
    • sr
    • srservice
    • stexstor
    • storahci
    • storflt
    • stornvme
    • storport
    • storvsc
    • storvsp
    • sym_hi
    • sym_u3
    • symc810
    • symc8xx
    • symmpi
    • tdi
    • toside
    • tunnel
    • uagp35
    • udfs
    • uliagpkx
    • uliahci
    • ulsata2
    • ultra
    • ultra66
    • usbaudio2
    • usbehci
    • usbperf
    • usbser
    • vga
    • vhdmp
    • vhdparser
    • viaide
    • vmbus
    • vmbusr
    • vmicguestinterface
    • vmicheartbeat
    • vmickvpexchange
    • vmicrdv
    • vmicshutdown
    • vmictimesync
    • vmicvss
    • vnvdimm
    • volmgr
    • vpci
    • vpcivsp
    • vsmraid
    • wdf01000
    • wecsvc
  • API documentation
Windows Event Log knowledge base (winevt-kb)
  • Event Log providers
  • Microsoft-Windows-UI-Search
  • View page source

Microsoft-Windows-UI-Search

Seen on:

  • Windows 2012

  • Windows 8.1

  • Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)

  • Windows 2016

  • Windows 2019

  • Windows 11 (21H2)

Name: Microsoft-Windows-UI-Search
Identifier: {d8965fcf-7397-4e0e-b750-21a4580bd880}
Event message file(s): %SystemRoot%\system32\Windows.UI.Search.dll

 

Previous Next

© Copyright The Windows Event Log knowledge base (winevt-kb) authors.

Built with Sphinx using a theme provided by Read the Docs.