Event Tracing MOF Classes
The classes are defined in the \root\wmi namespace. The EventVersion qualifier for the kernel events associates the class with a specific operating system. For example, version zero is associated with Windows 2000, version one with Windows XP and Windows Server 2003, and version two with Windows Vista.
The following MOF classes define the ETW event classes.
The following MOF classes define the kernel events classes.
- ALPC
- ALPC_Receive_Message
- ALPC_Send_Message
- ALPC_Unwait
- ALPC_Wait_For_New_Message
- ALPC_Wait_For_Reply
- CSwitch
- DPC
- DiskIo
- DiskIo_TypeGroup1
- DiskIo_TypeGroup2
- DiskIo_TypeGroup3
- DriverCompleteRequest
- DriverCompleteRequestReturn
- DriverCompletionRoutine
- DriverMajorFunctionCall
- DriverMajorFunctionReturn
- FileIo
- FileIo_Create
- FileIo_DirEnum
- FileIo_Info
- FileIo_Name
- FileIo_OpEnd
- FileIo_ReadWrite
- FileIo_SimpleOp
- FileIo_V0
- FileIo_V0_Name
- FileIo_V1
- FileIo_V1_Name
- HWConfig
- HWConfig_CPU
- HWConfig_LogDisk
- HWConfig_NIC
- HWConfig_PhyDisk
- Image
- Image_Load
- Image_V0
- Image_V0_Load
- Image_V1
- Image_V1_Load
- ISR
- PageFault_V2
- PageFault_HardFault
- PageFault_ImageLoadBacked
- PageFault_TypeGroup1
- PerfInfo
- Process
- Process_TypeGroup1
- Process_V0
- Process_V0_TypeGroup1
- Process_V1
- Process_V1_TypeGroup1
- Process_V2
- Process_V2_TypeGroup1
- Process_V2_TypeGroup2
- ReadyThread
- Registry
- Registry_TypeGroup1
- Registry_V0
- Registry_V0_TypeGroup1
- Registry_V1
- Registry_V1_TypeGroup1
- SampledProfile
- SplitIo
- SplitIo_Info
- SysCallEnter
- SysCallExit
- SystemConfig
- SystemConfig_CPU
- SystemConfig_IDEChannel
- SystemConfig_IRQ
- SystemConfig_LogDisk
- SystemConfig_Network
- SystemConfig_NIC
- SystemConfig_PhyDisk
- SystemConfig_PnP
- SystemConfig_Power
- SystemConfig_Services
- SystemConfig_Video
- SystemConfig_V0_CPU
- SystemConfig_V0_LogDisk
- SystemConfig_V0_NIC
- SystemConfig_V0_PhyDisk
- SystemConfig_V0_Power
- SystemConfig_V0_Services
- SystemConfig_V0_Video
- TcpIp
- TcpIp_Fail
- TcpIp_SendIPV4
- TcpIp_SendIPV6
- TcpIp_TypeGroup1
- TcpIp_TypeGroup2
- TcpIp_TypeGroup3
- TcpIp_TypeGroup4
- TcpIp_V0
- TcpIp_V0_TypeGroup1
- TcpIp_V1
- TcpIp_V1_TypeGroup1
- Thread
- Thread_TypeGroup1
- Thread_V0
- Thread_V0_TypeGroup1
- Thread_V1
- Thread_V1_TypeGroup1
- Thread_V1_TypeGroup2
- Thread_V2
- Thread_V2_TypeGroup1
- UdpIp
- UdpIp_Fail
- UdpIp_TypeGroup1
- UdpIp_TypeGroup2
- UdpIp_V0
- UdpIp_V0_TypeGroup1
- UdpIp_V1
- UdpIp_V1_TypeGroup1
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for