Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Remotefs-Rdbss

Event ID 30020

Message:

Logical view migration completion: RxContext %{RxContext} from (logical path %{LogicalPathFrom} physical path %{PhysicalPathFrom}) to (logical path %{LogicalPathTo} physical path %{PhysicalPathTo})

Event Data:

# Name In Type
Out Type
1 RxContext win:Pointer win:HexInt64
2 LogicalPathFromLength win:UInt16 xs:unsignedShort
3 LogicalPathFrom win:UnicodeString xs:string
4 PhysicalPathFromLength win:UInt16 xs:unsignedShort
5 PhysicalPathFrom win:UnicodeString xs:string
6 LogicalPathToLength win:UInt16 xs:unsignedShort
7 LogicalPathTo win:UnicodeString xs:string
8 PhysicalPathToLength win:UInt16 xs:unsignedShort
9 PhysicalPathTo win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: LHEWITYSCY7KU