Elastic Windows Event Explorer


Publisher - Microsoft-Windows-WMI-Activity

Event ID 13

Message:

Stop OperationId = %{OperationId}; ResultCode = %{ResultCode}

Event Data:

# Name In Type
Out Type
1 OperationId win:UInt32 xs:unsignedInt
2 ResultCode win:HexInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: L2NMJPRI7YLNY