Elastic Windows Event Explorer


Publisher - Microsoft-Windows-PktMon

Event ID 40

Message:

Property: Component %{ComponentId}, %{Type} = %{Value}

Event Data:

# Name In Type
Out Type
1 ComponentId win:UInt16 xs:unsignedShort
2 Type win:UInt16 xs:unsignedShort
3 Value win:GUID xs:GUID

Observed Windows Versions:

Version: 0

Fingerprint: 7CGJICT7W6W7Q