Elastic Windows Event Explorer
Channel - System
Publishers
Application Popup
Intel-iaLPSS-GPIO
Intel-iaLPSS-I2C
LsaSrv
Microsoft-Pef-WFP-MessageProvider
Microsoft-Windows-Audit-CVE
Microsoft-Windows-Bits-Client
Microsoft-Windows-Bluetooth-BthLEPrepairing
Microsoft-Windows-CoreSystem-InitMachineConfig
Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline
Microsoft-Windows-CorruptedFileRecovery-Client
Microsoft-Windows-CorruptedFileRecovery-Server
Microsoft-Windows-DHCP-Server
Microsoft-Windows-DHCPv6-Client
Microsoft-Windows-DNS-Client
Microsoft-Windows-Devices-Background
Microsoft-Windows-DfsSvc
Microsoft-Windows-Dhcp-Client
Microsoft-Windows-Diagnostics-Networking
Microsoft-Windows-Directory-Services-SAM
Microsoft-Windows-DiskDiagnostic
Microsoft-Windows-DistributedCOM
Microsoft-Windows-DriverFrameworks-UserMode
Microsoft-Windows-EnhancedStorage-EhStorTcgDrv
Microsoft-Windows-EventCollector
Microsoft-Windows-Eventlog
Microsoft-Windows-FMS
Microsoft-Windows-FailoverClustering-Client
Microsoft-Windows-Fat-SQM
Microsoft-Windows-Fault-Tolerant-Heap
Microsoft-Windows-FilterManager
Microsoft-Windows-Firewall
Microsoft-Windows-FunctionDiscoveryHost
Microsoft-Windows-GPIO-ClassExtension
Microsoft-Windows-GroupPolicy
Microsoft-Windows-HAL
Microsoft-Windows-HttpEvent
Microsoft-Windows-Hyper-V-Hypervisor
Microsoft-Windows-Hyper-V-Netvsc
Microsoft-Windows-Iphlpsvc
Microsoft-Windows-IsolatedUserMode
Microsoft-Windows-Kernel-Boot
Microsoft-Windows-Kernel-General
Microsoft-Windows-Kernel-IO
Microsoft-Windows-Kernel-Interrupt-Steering
Microsoft-Windows-Kernel-PnP
Microsoft-Windows-Kernel-Power
Microsoft-Windows-Kernel-Processor-Power
Microsoft-Windows-Kernel-Tm
Microsoft-Windows-Kernel-WHEA
Microsoft-Windows-Kernel-XDV
Microsoft-Windows-LanguagePackSetup
Microsoft-Windows-MPRMSG
Microsoft-Windows-Memory-Diagnostic-Task-Handler
Microsoft-Windows-MemoryDiagnostics-Results
Microsoft-Windows-MemoryDiagnostics-Schedule
Microsoft-Windows-MountMgr
Microsoft-Windows-MsLbfoSysEvtProvider
Microsoft-Windows-NDIS
Microsoft-Windows-NdisImPlatformSysEvtProvider
Microsoft-Windows-NetworkBridge
Microsoft-Windows-Ntfs
Microsoft-Windows-Ntfs-UBPM
Microsoft-Windows-OfflineFiles
Microsoft-Windows-OverlayFilter
Microsoft-Windows-PersistentMemory-Nvdimm
Microsoft-Windows-PersistentMemory-PmemDisk
Microsoft-Windows-Power-Meter-Polling
Microsoft-Windows-Power-Troubleshooter
Microsoft-Windows-RasServer
Microsoft-Windows-RasSstp
Microsoft-Windows-ReFS
Microsoft-Windows-ReFS-v1
Microsoft-Windows-ResetEng
Microsoft-Windows-Resource-Exhaustion-Detector
Microsoft-Windows-ResourcePublication
Microsoft-Windows-SCPNP
Microsoft-Windows-SPB-ClassExtension
Microsoft-Windows-Serial-ClassExtension
Microsoft-Windows-Serial-ClassExtension-V2
Microsoft-Windows-ServerManager-ConfigureSMRemoting
Microsoft-Windows-Setup
Microsoft-Windows-SetupPlatform
Microsoft-Windows-SharedAccess_NAT
Microsoft-Windows-Smartcard-Server
Microsoft-Windows-Spell-Checking
Microsoft-Windows-SpellChecker
Microsoft-Windows-StartupRepair
Microsoft-Windows-Subsys-SMSS
Microsoft-Windows-TPM-WMI
Microsoft-Windows-TaskScheduler
Microsoft-Windows-TerminalServices-LocalSessionManager
Microsoft-Windows-TerminalServices-RemoteConnectionManager
Microsoft-Windows-TerminalServices-SessionBroker-Client
Microsoft-Windows-Time-Service
Microsoft-Windows-USB-MAUSBHOST
Microsoft-Windows-USB-USBHUB3
Microsoft-Windows-USB-USBXHCI
Microsoft-Windows-UserModePowerService
Microsoft-Windows-UserPnp
Microsoft-Windows-WER-SystemErrorReporting
Microsoft-Windows-WHEA-Logger
Microsoft-Windows-WMPNSS-Service
Microsoft-Windows-Wallet
Microsoft-Windows-WindowsToGo-StartupOptions
Microsoft-Windows-WindowsUpdateClient
Microsoft-Windows-Wininit
Microsoft-Windows-Winlogon
Microsoft-Windows-exFAT-SQM
NetJoin
Ntfs
Schannel
Service Control Manager
TPM
User32
Volsnap