Elastic Windows Event Explorer


Publisher - Microsoft-Windows-PDC

Event ID 47

Message:

Suspend/resume message %{Message}: Transaction id: %{TransactionId}, PowerEvent: %{PowerEvent}

Event Data:

# Name In Type
Out Type
1 Message win:Pointer win:HexInt64
2 TransactionId win:UInt32 win:HexInt32
3 PowerEvent win:UInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: SOJDRWOJCJQEG