Elastic Windows Event Explorer


Publisher - Microsoft-Windows-NDIS-PacketCapture

Event ID 1015

Message:

Detached from miniport interface %{MiniportIfIndex} above layer interface %{LowerIfIndex} with media type %{MediaType} (context=%{ReferenceContext})

Event Data:

# Name In Type
Out Type
1 MiniportIfIndex win:UInt32 xs:unsignedInt
2 LowerIfIndex win:UInt32 xs:unsignedInt
3 MediaType win:UInt32 xs:unsignedInt
4 ReferenceContext win:UInt32 xs:unsignedInt

Observed Windows Versions:

Version: 0

Fingerprint: EWYI6JSCAVAWW