update 3/27/20

This commit is contained in:
Brian Lich 2020-03-27 09:51:39 -07:00
parent 8fa9bed9ff
commit dd40988a74
6 changed files with 8789 additions and 10023 deletions

View File

@ -13,7 +13,7 @@ manager: dansimp
ms.collection: M365-security-compliance
ms.topic: article
audience: ITPro
ms.date: 03/23/2020
ms.date: 03/27/2020
ms.reviewer:
---
@ -81,7 +81,7 @@ The following fields are available:
### Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd
Represents the basic metadata about specific application files installed on the system.
This event sends compatibility information about a file to help keep Windows up-to-date.
The following fields are available:
@ -2513,7 +2513,7 @@ This event indicates that a new set of InventoryDeviceUsbHubClassAdd events will
### Microsoft.Windows.Inventory.Core.InventoryDriverBinaryAdd
This event provides the basic metadata about driver binaries running on the system.
This event sends basic metadata about driver binaries running on the system to help keep Windows up to date.
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
@ -4035,7 +4035,7 @@ This event sends basic metadata about the update installation process generated
### SetupPlatformTel.SetupPlatformTelEvent
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios.
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios, to help keep Windows up to date.
The following fields are available:
@ -6028,7 +6028,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.FlightInapplicable
This event indicates that the update is no longer applicable to this device.
This event sends data on whether the update was applicable to the device, to help keep Windows up to date.
The following fields are available:
@ -6109,7 +6109,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.PostInstall
This event is sent after a Windows update install completes.
This event sends data about lite stack devices (mobile, IOT, anything non-PC) immediately before data migration is launched to help keep Windows up to date.
The following fields are available:

View File

@ -13,7 +13,7 @@ manager: dansimp
ms.collection: M365-security-compliance
ms.topic: article
audience: ITPro
ms.date: 03/23/2020
ms.date: 03/27/2020
ms.reviewer:
---
@ -1866,7 +1866,7 @@ The following fields are available:
### CbsServicingProvider.CbsCapabilityEnumeration
This event reports on the results of scanning for optional Windows content on Windows Update.
This event reports on the results of scanning for optional Windows content on Windows Update to keep Windows up to date.
The following fields are available:
@ -2566,7 +2566,7 @@ The following fields are available:
### Microsoft.Windows.Inventory.Core.InventoryDriverBinaryAdd
This event provides the basic metadata about driver binaries running on the system.
This event sends basic metadata about driver binaries running on the system to help keep Windows up to date.
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
@ -4020,7 +4020,7 @@ This event sends basic metadata about the update installation process generated
### SetupPlatformTel.SetupPlatformTelEvent
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios.
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios, to help keep Windows up to date.
The following fields are available:
@ -6303,7 +6303,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.FlightInapplicable
This event indicates that the update is no longer applicable to this device.
This event sends data on whether the update was applicable to the device, to help keep Windows up to date.
The following fields are available:
@ -6397,7 +6397,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.PostInstall
This event is sent after a Windows update install completes.
This event sends data about lite stack devices (mobile, IOT, anything non-PC) immediately before data migration is launched to help keep Windows up to date.
The following fields are available:

View File

@ -13,7 +13,7 @@ manager: dansimp
ms.collection: M365-security-compliance
ms.topic: article
audience: ITPro
ms.date: 03/23/2020
ms.date: 03/27/2020
ms.reviewer:
---
@ -2044,7 +2044,7 @@ The following fields are available:
### CbsServicingProvider.CbsCapabilityEnumeration
This event reports on the results of scanning for optional Windows content on Windows Update.
This event reports on the results of scanning for optional Windows content on Windows Update to keep Windows up to date.
The following fields are available:
@ -3528,7 +3528,7 @@ The following fields are available:
### Microsoft.Windows.Inventory.Core.InventoryDriverBinaryAdd
This event provides the basic metadata about driver binaries running on the system.
This event sends basic metadata about driver binaries running on the system to help keep Windows up to date.
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
@ -5271,7 +5271,7 @@ This event sends basic metadata about the update installation process generated
### SetupPlatformTel.SetupPlatformTelEvent
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios.
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios, to help keep Windows up to date.
The following fields are available:
@ -7798,7 +7798,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.FlightInapplicable
This event indicates that the update is no longer applicable to this device.
This event sends data on whether the update was applicable to the device, to help keep Windows up to date.
The following fields are available:
@ -7892,7 +7892,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.PostInstall
This event is sent after a Windows update install completes.
This event sends data about lite stack devices (mobile, IOT, anything non-PC) immediately before data migration is launched to help keep Windows up to date.
The following fields are available:

View File

@ -13,7 +13,7 @@ manager: dansimp
ms.collection: M365-security-compliance
ms.topic: article
audience: ITPro
ms.date: 03/23/2020
ms.date: 03/27/2020
ms.reviewer:
---
@ -2580,7 +2580,7 @@ The following fields are available:
### CbsServicingProvider.CbsCapabilityEnumeration
This event reports on the results of scanning for optional Windows content on Windows Update.
This event reports on the results of scanning for optional Windows content on Windows Update to keep Windows up to date.
The following fields are available:
@ -4304,7 +4304,7 @@ The following fields are available:
### Microsoft.Windows.Inventory.Core.InventoryDriverBinaryAdd
This event provides the basic metadata about driver binaries running on the system.
This event sends basic metadata about driver binaries running on the system to help keep Windows up to date.
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
@ -6018,7 +6018,7 @@ This event sends basic metadata about the update installation process generated
### SetupPlatformTel.SetupPlatformTelEvent
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios.
This service retrieves events generated by SetupPlatform, the engine that drives the various deployment scenarios, to help keep Windows up to date.
The following fields are available:
@ -8447,7 +8447,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.FlightInapplicable
This event indicates that the update is no longer applicable to this device.
This event sends data on whether the update was applicable to the device, to help keep Windows up to date.
The following fields are available:
@ -8533,7 +8533,7 @@ The following fields are available:
### Microsoft.Windows.Update.Orchestrator.PostInstall
This event is sent after a Windows update install completes.
This event sends data about lite stack devices (mobile, IOT, anything non-PC) immediately before data migration is launched to help keep Windows up to date.
The following fields are available:

View File

@ -13,11 +13,11 @@ manager: dansimp
ms.collection: M365-security-compliance
ms.topic: article
audience: ITPro
ms.date: 03/23/2020
ms.date: 03/27/2020
---
# Windows 10, version Vibranium required Windows diagnostic events and fields
# Windows 10, version 2005 required Windows diagnostic events and fields
> [!IMPORTANT]
@ -1165,19 +1165,6 @@ The following fields are available:
- **WuClientId** The GUID of the Windows Update client invoking DMF
### Microsoft.Windows.Update.Orchestrator.RefreshSettings
This event sends basic data about the version of upgrade settings applied to the system to help keep Windows up to date.
The following fields are available:
- **endpoint** No content is currently available.
- **scenario** No content is currently available.
- **settings** No content is currently available.
- **wilActivity** No content is currently available. See [wilActivity](#wilactivity).
- **WOSCUniqueId** No content is currently available.
## XBOX events
### Microsoft.Gaming.Install.ResurrectedInstall