From ec145ae366c5bc4233420657eb7cc3dff9346aa9 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 1 Feb 2024 13:44:17 -0800 Subject: [PATCH 1/7] Updates for February 2024 --- ...ndows-diagnostic-events-and-fields-1809.md | 149 +++++++++++++++++- 1 file changed, 146 insertions(+), 3 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 56be393273..e6375131c9 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -1740,7 +1740,7 @@ The following fields are available: ### Microsoft.Windows.Appraiser.General.SystemProcessorNxStartSync -This event indicates that a new set of SystemProcessorNxAdd events will be sent. The data collected with this event is used to help keep Windows up to date. +This event indicates that a new set of SystemProcessorNxAdd events will be sent. The data collected with this event is used to help keep Windows up to date. This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). @@ -1766,6 +1766,7 @@ The following fields are available: The SystemProcessorPopCntStartSync event indicates that a new set of SystemProcessorPopCntAdd events will be sent. This event is used to understand if the system supports the PopCnt CPU requirement for newer versions of Windows. + This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange). The following fields are available: @@ -4761,7 +4762,6 @@ The following fields are available: - **InventoryVersion** The version of the inventory file generating the events. - ### Microsoft.Windows.Inventory.Core.InventoryDeviceInterfaceAdd This event retrieves information about what sensor interfaces are available on the device. The data collected with this event is used to keep Windows performing properly. @@ -5805,6 +5805,94 @@ The following fields are available: ## Other events +### GarrisonAppInstaller.Deeplink + +No content is currently available. + +The following fields are available: + +- **context** No content is currently available. +- **productId** No content is currently available. + + +### GarrisonAppInstaller.ExceptionThrown + +No content is currently available. + +The following fields are available: + +- **exceptionType** No content is currently available. +- **HResult** No content is currently available. +- **innerExceptionHResult** No content is currently available. +- **message** No content is currently available. +- **source** No content is currently available. +- **stackTrace** No content is currently available. + + +### GarrisonAppInstaller.InstallComplete + +No content is currently available. + +The following fields are available: + +- **garrisonInstallTime** No content is currently available. +- **grtsInstallTime** No content is currently available. +- **installedAfterOsUpdate** No content is currently available. +- **timeInMilliseconds** No content is currently available. + + +### GarrisonAppInstaller.InstallerClosed + +No content is currently available. + +The following fields are available: + +- **activePage** No content is currently available. + + +### GarrisonAppInstaller.InstallEvent + +No content is currently available. + +The following fields are available: + +- **eventName** No content is currently available. +- **hresult** No content is currently available. +- **productId** No content is currently available. +- **retries** No content is currently available. +- **serviceDependencies** No content is currently available. + + +### GarrisonAppInstaller.InstallTime + +No content is currently available. + +The following fields are available: + +- **installTime** No content is currently available. +- **productId** No content is currently available. + + +### GarrisonAppInstaller.PageAction + +No content is currently available. + +The following fields are available: + +- **destination** No content is currently available. +- **navigationDirection** No content is currently available. +- **source** No content is currently available. + + +### GarrisonAppInstaller.UserAction + +No content is currently available. + +The following fields are available: + +- **userAction** No content is currently available. + + ### Microsoft.Windows.Defender.Engine.Maps.Heartbeat Heartbeat is sent once a day to indicate Defender is running and functional. Event includes necessary information to understand health of Defender on the device. @@ -5841,6 +5929,58 @@ The following fields are available: - **SecureBootUEFIEncoding** Information about the PK, KEKs, DB and DBX files on the device. +### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateStarted + +No content is currently available. + +The following fields are available: + +- **AvailableUpdates** No content is currently available. +- **SecureBootUpdateCaller** No content is currently available. + + +### Microsoft.Windows.Shell.StateCapture.TrayStateCapture + +No content is currently available. + +The following fields are available: + +- **autoHideDesktop** No content is currently available. +- **autoHideTablet** No content is currently available. +- **cortanaButtonState** No content is currently available. +- **decoupledCortanaButtonState** No content is currently available. +- **firstPartyToolbarsInUse** No content is currently available. +- **lockedMoveTaskbar** No content is currently available. +- **lockedSizeTaskbar** No content is currently available. +- **monitorCount** No content is currently available. +- **multiDisplayButtonPlacement** No content is currently available. +- **multiDisplayTaskbar** No content is currently available. +- **overflowAllowed** No content is currently available. +- **overflowItemCount** No content is currently available. +- **peekToPreviewDesktop** No content is currently available. +- **showAppsInTablet** No content is currently available. +- **showClock** No content is currently available. +- **showInkWorkspace** No content is currently available. +- **showInputIndicator** No content is currently available. +- **showLocation** No content is currently available. +- **showMicrophone** No content is currently available. +- **showNetwork** No content is currently available. +- **showNotificationCenter** No content is currently available. +- **showPower** No content is currently available. +- **showVolume** No content is currently available. +- **smallIcons** No content is currently available. +- **taskbarBadging** No content is currently available. +- **taskViewButtonState** No content is currently available. +- **thirdPartyToolbarsInUse** No content is currently available. +- **toolbarsCount** No content is currently available. +- **toolbarsShowing** No content is currently available. +- **toolbarsThirdPartyDefined** No content is currently available. +- **touchKeyboardDesktop** No content is currently available. +- **touchKeyboardTablet** No content is currently available. +- **triggerType** No content is currently available. +- **usePowershell** No content is currently available. + + ## Privacy consent logging events ### Microsoft.Windows.Shell.PrivacyConsentLogging.PrivacyConsentCompleted @@ -10182,4 +10322,7 @@ The following fields are available: - **LicenseType** The type of licensed used to authorize the app (0 - Unknown, 1 - User, 2 - Subscription, 3 - Offline, 4 - Disc). - **LicenseXuid** If the license type is 1 (User), this field contains the XUID (Xbox User ID) of the registered owner of the license. - **ProductGuid** The Xbox product GUID (Globally-Unique ID) of the application. -- **UserId** The XUID (Xbox User ID) of the current user. \ No newline at end of file +- **UserId** The XUID (Xbox User ID) of the current user. + + + From f715b9776ed14eb578d6fe1edb93214f76856962 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 1 Feb 2024 14:04:34 -0800 Subject: [PATCH 2/7] metadata updates --- ...asic-level-windows-diagnostic-events-and-fields-1809.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index e6375131c9..2f032571e3 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -1,14 +1,15 @@ --- description: Learn more about the Windows 10, version 1809 diagnostic data gathered at the basic level. title: Windows 10, version 1809 basic diagnostic events and fields (Windows 10) -ms.prod: windows-client -ms.technology: itpro-privacy +ms.service: windows-client +ms.subservice: itpro-privacy localizationpriority: high author: DHB-MSFT ms.author: danbrown manager: laurawi -ms.date: 09/26/2023 +ms.date: 02/27/2024 ms.topic: reference +ms.collection: privacy-windows --- From 16a861a8695e27be60b36afd36831c4966e88c68 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 1 Feb 2024 15:57:30 -0800 Subject: [PATCH 3/7] metadata update --- .../basic-level-windows-diagnostic-events-and-fields-1809.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 2f032571e3..bdd52e6630 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -3,7 +3,7 @@ description: Learn more about the Windows 10, version 1809 diagnostic data gathe title: Windows 10, version 1809 basic diagnostic events and fields (Windows 10) ms.service: windows-client ms.subservice: itpro-privacy -localizationpriority: high +ms.localizationpriority: high author: DHB-MSFT ms.author: danbrown manager: laurawi From 0ab5f4fd188af21aff0b9c9672886481022ed068 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 1 Feb 2024 17:47:21 -0800 Subject: [PATCH 4/7] Remove GarrisonAppInstaller.* events --- ...ndows-diagnostic-events-and-fields-1809.md | 88 ------------------- 1 file changed, 88 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index bdd52e6630..1a02ae1b96 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -5806,94 +5806,6 @@ The following fields are available: ## Other events -### GarrisonAppInstaller.Deeplink - -No content is currently available. - -The following fields are available: - -- **context** No content is currently available. -- **productId** No content is currently available. - - -### GarrisonAppInstaller.ExceptionThrown - -No content is currently available. - -The following fields are available: - -- **exceptionType** No content is currently available. -- **HResult** No content is currently available. -- **innerExceptionHResult** No content is currently available. -- **message** No content is currently available. -- **source** No content is currently available. -- **stackTrace** No content is currently available. - - -### GarrisonAppInstaller.InstallComplete - -No content is currently available. - -The following fields are available: - -- **garrisonInstallTime** No content is currently available. -- **grtsInstallTime** No content is currently available. -- **installedAfterOsUpdate** No content is currently available. -- **timeInMilliseconds** No content is currently available. - - -### GarrisonAppInstaller.InstallerClosed - -No content is currently available. - -The following fields are available: - -- **activePage** No content is currently available. - - -### GarrisonAppInstaller.InstallEvent - -No content is currently available. - -The following fields are available: - -- **eventName** No content is currently available. -- **hresult** No content is currently available. -- **productId** No content is currently available. -- **retries** No content is currently available. -- **serviceDependencies** No content is currently available. - - -### GarrisonAppInstaller.InstallTime - -No content is currently available. - -The following fields are available: - -- **installTime** No content is currently available. -- **productId** No content is currently available. - - -### GarrisonAppInstaller.PageAction - -No content is currently available. - -The following fields are available: - -- **destination** No content is currently available. -- **navigationDirection** No content is currently available. -- **source** No content is currently available. - - -### GarrisonAppInstaller.UserAction - -No content is currently available. - -The following fields are available: - -- **userAction** No content is currently available. - - ### Microsoft.Windows.Defender.Engine.Maps.Heartbeat Heartbeat is sent once a day to indicate Defender is running and functional. Event includes necessary information to understand health of Defender on the device. From ffc080a980143b9aded516f56084a8142e046049 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 1 Feb 2024 18:01:32 -0800 Subject: [PATCH 5/7] Add missing content --- ...ndows-diagnostic-events-and-fields-1809.md | 78 +++++++++---------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 1a02ae1b96..d21715def4 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -5844,54 +5844,54 @@ The following fields are available: ### Microsoft.Windows.Security.SBServicing.ApplySecureBootUpdateStarted -No content is currently available. +Event that indicates secure boot update has started. The following fields are available: -- **AvailableUpdates** No content is currently available. -- **SecureBootUpdateCaller** No content is currently available. - +- **AvailableUpdates** Number of available secure boot updates. +- **SecureBootUpdateCaller** Enum value indicating if this is a servicing or an upgrade. +- ### Microsoft.Windows.Shell.StateCapture.TrayStateCapture -No content is currently available. +Captures numerous global settings and state involving how user has configured their Taskbar. The following fields are available: -- **autoHideDesktop** No content is currently available. -- **autoHideTablet** No content is currently available. -- **cortanaButtonState** No content is currently available. -- **decoupledCortanaButtonState** No content is currently available. -- **firstPartyToolbarsInUse** No content is currently available. -- **lockedMoveTaskbar** No content is currently available. -- **lockedSizeTaskbar** No content is currently available. -- **monitorCount** No content is currently available. -- **multiDisplayButtonPlacement** No content is currently available. -- **multiDisplayTaskbar** No content is currently available. -- **overflowAllowed** No content is currently available. -- **overflowItemCount** No content is currently available. -- **peekToPreviewDesktop** No content is currently available. -- **showAppsInTablet** No content is currently available. -- **showClock** No content is currently available. -- **showInkWorkspace** No content is currently available. -- **showInputIndicator** No content is currently available. -- **showLocation** No content is currently available. -- **showMicrophone** No content is currently available. -- **showNetwork** No content is currently available. -- **showNotificationCenter** No content is currently available. -- **showPower** No content is currently available. -- **showVolume** No content is currently available. -- **smallIcons** No content is currently available. -- **taskbarBadging** No content is currently available. -- **taskViewButtonState** No content is currently available. -- **thirdPartyToolbarsInUse** No content is currently available. -- **toolbarsCount** No content is currently available. -- **toolbarsShowing** No content is currently available. -- **toolbarsThirdPartyDefined** No content is currently available. -- **touchKeyboardDesktop** No content is currently available. -- **touchKeyboardTablet** No content is currently available. -- **triggerType** No content is currently available. -- **usePowershell** No content is currently available. +- **autoHideDesktop** Auto Hide Desktop +- **autoHideTablet** Auto Hide Tablet +- **cortanaButtonState** Cortana button state +- **decoupledCortanaButtonState** Decoupled Cortana button state +- **firstPartyToolbarsInUse** First Party toolbars in Use +- **lockedMoveTaskbar** Locked Move Taskbar +- **lockedSizeTaskbar** Locked Size Taskbar +- **monitorCount** Monitor count +- **multiDisplayButtonPlacement** Multi display button placement +- **multiDisplayTaskbar** Multi display taskbar +- **overflowAllowed** Overflow allowed +- **overflowItemCount** Overflow item content +- **peekToPreviewDesktop** Peek to Preview Desktop +- **showAppsInTablet** Shows apps in tablet +- **showClock** Show Clock +- **showInkWorkspace** Show Ink workspace +- **showInputIndicator** Show Input indicator +- **showLocation** Show Location +- **showMicrophone** Show Microphone +- **showNetwork** Show Network +- **showNotificationCenter** +- **showPower** Show Power +- **showVolume** Show Volume +- **smallIcons** Small icons +- **taskbarBadging** Taskbar badging +- **taskViewButtonState** Task View button state +- **thirdPartyToolbarsInUse** Third part toolbars in use +- **toolbarsCount** Toolbars count +- **toolbarsShowing** Toolbars showing +- **toolbarsThirdPartyDefined** Toolbars third party defined +- **touchKeyboardDesktop** Touch keyboard desktop +- **touchKeyboardTablet** Touch keyboard tablet +- **triggerType** Trigger type +- **usePowershell** Use PowerShell ## Privacy consent logging events From 6fc85dd81a582e2dbfa679d7cad28c7af05e3018 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Fri, 2 Feb 2024 16:37:33 -0800 Subject: [PATCH 6/7] Add missing field description --- .../basic-level-windows-diagnostic-events-and-fields-1809.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index d21715def4..12afff90ee 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -5878,7 +5878,7 @@ The following fields are available: - **showLocation** Show Location - **showMicrophone** Show Microphone - **showNetwork** Show Network -- **showNotificationCenter** +- **showNotificationCenter** Show Notification Center - **showPower** Show Power - **showVolume** Show Volume - **smallIcons** Small icons From 5001d871671ffe6f9d82daed24cbe23497b2ee2d Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Fri, 2 Feb 2024 16:47:12 -0800 Subject: [PATCH 7/7] Remove extra bullet --- .../basic-level-windows-diagnostic-events-and-fields-1809.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 12afff90ee..e5e6967831 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -5850,7 +5850,7 @@ The following fields are available: - **AvailableUpdates** Number of available secure boot updates. - **SecureBootUpdateCaller** Enum value indicating if this is a servicing or an upgrade. -- + ### Microsoft.Windows.Shell.StateCapture.TrayStateCapture