Elastic Windows Event Explorer


Publisher - Microsoft-Windows-StorDiag

Event ID 4 v1

Message:

CopyOffload request servicing time taken by lower driver stack(s).

Event Data:

# Name In Type
Out Type
1 DeviceNumber win:UInt32 xs:unsignedInt
2 RequestDuration (in 100ns) win:UInt64 xs:unsignedLong
3 Irp win:Pointer win:HexInt64
4 Command win:UInt8 win:HexInt8
5 ServiceAction win:UInt8 win:HexInt8
6 SrbStatus win:UInt8 win:HexInt8
7 OriginalIrp win:Pointer win:HexInt64

Observed Windows Versions:

Version: 1

Fingerprint: SQHY5ZWKQ6532