Elastic Windows Event Explorer

Publisher - Microsoft-Windows-DotNETRuntime

Event ID 154 v1

Message:

AssemblyID=%{AssemblyID};
AppDomainID=%{AppDomainID};
AssemblyFlags=%{BindingID};
FullyQualifiedAssemblyName=%{AssemblyFlags};
ClrInstanceID=%{FullyQualifiedAssemblyName}

Event Data:

#	Name	In Type	Out Type
1	AssemblyID	win:UInt64	win:HexInt64
2	AppDomainID	win:UInt64	win:HexInt64
3	BindingID	win:UInt64	win:HexInt64
4	AssemblyFlags	win:UInt32	xs:unsignedInt
5	FullyQualifiedAssemblyName	win:UnicodeString	xs:string
6	ClrInstanceID	win:UInt16	xs:unsignedShort

Observed Windows Versions:

Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 1

Fingerprint: 3P5V6XCSDQBHG