Microsoft-Windows-Containers-Wcifs

Seen on:

  • Windows 10 (1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)

  • Windows 11 (21H2)

Log source(s): Microsoft-Windows-Containers-Wcifs
Identifier: {aec5c129-7c10-407d-be97-91a042c61aaa}
Event message file(s): %systemroot%\system32\drivers\wcifs.sys