deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updates for February

Browse Source 
Still need to address "No content is currently available" issues
This commit is contained in:
Daniel H. Brown 2023-02-06 15:06:44 -08:00
parent 353abb5c8e
commit 27a749cef5
1 changed files with 72 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
windows/privacy/required-windows-11-diagnostic-events-and-fields.md
View File

@ -1917,6 +1917,10 @@ The following fields are available:
- **wilActivity** Contains the thread ID used to match the begin and end events, and for the end event also a HResult indicating sucess or failure.
### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciAlreadyEnabled
No content is currently available.
### Microsoft.Windows.Security.CodeIntegrity.HVCISysprep.HvciScanGetResultFailed
@ -2159,6 +2163,7 @@ The following fields are available:
- **uts** A bit field, with 2 bits being assigned to each user ID listed in xid. This field is omitted if all users are retail accounts.
- **xid** A list of base10-encoded XBOX User IDs.
## Common data fields
### Ms.Device.DeviceInventoryChange
@ -2173,6 +2178,7 @@ The following fields are available:
- **objectType** Indicates the object type that the event applies to.
- **syncId** A string used to group StartSync, EndSync, Add, and Remove operations that belong together. This field is unique by Sync period and is used to disambiguate in situations where multiple agents perform overlapping inventories for the same object.
## Component-based servicing events
### CbsServicingProvider.CbsCapabilityEnumeration
@ -3031,6 +3037,18 @@ The following fields are available:
- **Version** The version number of the program.
### Microsoft.Windows.Inventory.Core.InventoryApplicationDriverAdd
This event represents what drivers an application installs. The data collected with this event is used to keep Windows performing properly.
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
The following fields are available:
- **InventoryVersion** The version of the inventory component
- **ProgramIds** The unique program identifier the driver is associated with
### Microsoft.Windows.Inventory.Core.InventoryApplicationDriverStartSync
The InventoryApplicationDriverStartSync event indicates that a new set of InventoryApplicationDriverStartAdd events will be sent. The data collected with this event is used to keep Windows performing properly.
@ -3419,12 +3437,6 @@ This event sends details collected for a specific application on the source devi
### Microsoft.Windows.Inventory.General.AppHealthStaticStartSync
This event indicates the beginning of a series of AppHealthStaticAdd events. The data collected with this event is used to keep Windows performing properly.
### Microsoft.Windows.Inventory.General.InventoryMiscellaneousMemorySlotArrayInfoAdd
This event provides basic information about active memory slots on the device.
@ -3757,6 +3769,17 @@ The following fields are available:
## Migration events
### Microsoft.Windows.MigrationCore.MigObjectCountDLSys
This event is used to indicate object count for system paths during different phases of Windows feature update.
The following fields are available:
- **migDiagSession->CString** Indicates the phase of the update.
- **objectCount** Number of files being tracked for the corresponding phase of the update.
- **sfInfo.Name** No content is currently available.
### Microsoft.Windows.MigrationCore.MigObjectCountDLUsr
This event returns data to track the count of the migration objects across various phases during feature update. The data collected with this event is used to help keep Windows secure and to track data loss scenarios.
@ -6142,6 +6165,26 @@ The following fields are available:
- **updateId** Unique identifier for each update.
### Microsoft.Windows.Update.NotificationUx.RebootScheduled
This event sends basic information for scheduling a device restart to install security updates. It's used to help keep Windows secure and up-to-date by indicating when a reboot is scheduled by the system or a user for a security, quality, or feature update.
The following fields are available:
- **activeHoursApplicable** Indicates whether an Active Hours policy is present on the device.
- **IsEnhancedEngagedReboot** Indicates whether this is an Enhanced Engaged reboot.
- **rebootArgument** Argument for the reboot task. It also represents specific reboot related action.
- **rebootOutsideOfActiveHours** Indicates whether a restart is scheduled outside of active hours.
- **rebootScheduledByUser** Indicates whether the restart was scheduled by user (if not, it was scheduled automatically).
- **rebootState** The current state of the restart.
- **rebootUsingSmartScheduler** Indicates whether the reboot is scheduled by smart scheduler.
- **revisionNumber** Revision number of the update that is getting installed with this restart.
- **scheduledRebootTime** Time of the scheduled restart.
- **scheduledRebootTimeInUTC** Time of the scheduled restart in Coordinated Universal Time.
- **updateId** ID of the update that is getting installed with this restart.
- **wuDeviceid** Unique device ID used by Windows Update.
### Microsoft.Windows.Update.Orchestrator.Client.BizCriticalStoreAppInstallResult
This event returns the result after installing a business critical store application. The data collected with this event is used to help keep Windows secure and up to date.
@ -6230,7 +6273,6 @@ The following fields are available:
- **uptimeMinutes** Duration USO for up for in the current boot session.
- **wilActivity** Wil Activity related information.
### Microsoft.Windows.Update.WUClientExt.UUSLoadModuleFailed
This is the UUSLoadModule failed event and is used to track the failure of loading an undocked component. The data collected with this event is used to help keep Windows up to date and secure.
@ -6344,6 +6386,27 @@ The following fields are available:
- **WuId** Unique ID for the Windows Update client.
### Mitigation360Telemetry.MitigationCustom.CryptcatsvcRebuild
This event sends data specific to the CryptcatsvcRebuild mitigation used for OS Updates. The data collected with this event is used to help keep Windows up to date.
The following fields are available:
- **ClientId** In the Windows Update scenario, this will be the Windows Update client ID that is passed to Setup. In Media setup, default value is Media360, but can be overwritten by the caller to a unique value.
- **FlightId** The unique identifier for each flight.
- **InstanceId** Unique GUID that identifies each instances of setuphost.exe.
- **MitigationNeeded** Information on whether the mitigation was needed.
- **MitigationScenario** The update scenario in which the mitigation was executed.
- **RelatedCV** Correlation vector value generated from the latest USO scan.
- **Result** HResult of this operation.
- **ScenarioId** ID indicating the mitigation scenario.
- **ScenarioSupported** Indicates whether the scenario was supported.
- **ServiceDisabled** Information on whether the service was disabled.
- **SessionId** Unique value for each update attempt.
- **UpdateId** Unique ID for each Update.
- **WuId** Unique ID for the Windows Update client.
### Mitigation360Telemetry.MitigationCustom.FixAppXReparsePoints
This event sends data specific to the FixAppXReparsePoints mitigation used for OS updates. The data collected with this event is used to help keep Windows secure and up to date.
@ -6372,7 +6435,7 @@ This event sends data specific to the FixupWimmountSysPath mitigation used for O
The following fields are available:
- **ClientId** In the Windows Update scenario, this will be the Windows Update client ID that is passed to Setup. In Media setup, default value is Media360, but can be overwritten by the caller to a unique value.
- **ClientId** In the Windows Update scenario, this will be the WU client ID that is passed to Setup. In Media setup, default value is Media360, but can be overwritten by the caller to a unique value.
- **FlightId** Unique identifier for each flight.
- **ImagePathDefault** Default path to wimmount.sys driver defined in the system registry.
- **ImagePathFixedup** Boolean indicating whether the wimmount.sys driver path was fixed by this mitigation.
@ -6510,8 +6573,6 @@ The following fields are available:
This event is sent when the Update Reserve Manager removes a pending hard reserve adjustment. The data collected with this event is used to help keep Windows secure and up to date.
### Microsoft.Windows.UpdateReserveManager.TurnOffReserves
This event is sent when the Update Reserve Manager turns off reserve functionality for certain operations. The data collected with this event is used to help keep Windows secure and up to date.