Microsoft-Windows-Win32k

Seen on:

  • Windows 2008

  • Windows 7

Name: Microsoft-Windows-Win32k
Identifier: {e7ef96be-969f-414f-97d7-3ddb7b558ccc}
Event message file(s): %SystemRoot%\system32\win32k.sys

 

Seen on:

  • Windows 2012

  • Windows 8.0

  • Windows 8.1

Name: Microsoft-Windows-Win32k
Identifier: {8c416c79-d49b-4f01-a467-e56d3aa8234c}
Event message file(s): %SystemRoot%\system32\win32k.sys

 

Seen on:

  • Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)

  • Windows 2016

  • Windows 2019

  • Windows 11 (21H2)

Name: Microsoft-Windows-Win32k
Identifier: {8c416c79-d49b-4f01-a467-e56d3aa8234c}
Event message file(s): %SystemRoot%\system32\win32kbase.sys