зеркало из https://github.com/microsoft/Tx.git
1970 строки
68 KiB
C#
1970 строки
68 KiB
C#
//
|
|
// This code was generated by EtwEventTypeGen.exe
|
|
//
|
|
|
|
using System;
|
|
|
|
namespace Tx.Windows.Microsoft_Windows_WinINet
|
|
{
|
|
public enum EventTask : uint {
|
|
task0 = 574,
|
|
task1 = 573,
|
|
task2 = 572,
|
|
task3 = 571,
|
|
task4 = 570,
|
|
task5 = 569,
|
|
task6 = 568,
|
|
task7 = 567,
|
|
task8 = 566,
|
|
task9 = 565,
|
|
task10 = 564,
|
|
task11 = 563,
|
|
task12 = 562,
|
|
task13 = 561,
|
|
task14 = 560,
|
|
task15 = 559,
|
|
task16 = 558,
|
|
task17 = 557,
|
|
task18 = 556,
|
|
task19 = 555,
|
|
task20 = 554,
|
|
task21 = 553,
|
|
task22 = 552,
|
|
task23 = 551,
|
|
task24 = 550,
|
|
task25 = 542,
|
|
task26 = 587,
|
|
task27 = 584,
|
|
task28 = 583,
|
|
task29 = 582,
|
|
task30 = 581,
|
|
task31 = 580,
|
|
task32 = 545,
|
|
task33 = 544,
|
|
task34 = 543,
|
|
task35 = 541,
|
|
task36 = 540,
|
|
task37 = 537,
|
|
task38 = 539,
|
|
task39 = 538,
|
|
task40 = 536,
|
|
task41 = 535,
|
|
task42 = 534,
|
|
task43 = 533,
|
|
task44 = 532,
|
|
task45 = 531,
|
|
task46 = 530,
|
|
task47 = 529,
|
|
task48 = 528,
|
|
task49 = 527,
|
|
task50 = 526,
|
|
task51 = 525,
|
|
task52 = 524,
|
|
task53 = 523,
|
|
task54 = 522,
|
|
task55 = 521,
|
|
task56 = 520,
|
|
task57 = 519,
|
|
task58 = 518,
|
|
task59 = 517,
|
|
task60 = 516,
|
|
task61 = 515,
|
|
task62 = 514,
|
|
task63 = 547,
|
|
task64 = 546,
|
|
task65 = 513,
|
|
task66 = 512,
|
|
task67 = 511,
|
|
task68 = 510,
|
|
task69 = 509,
|
|
task70 = 508,
|
|
task71 = 507,
|
|
task72 = 503,
|
|
task73 = 506,
|
|
task74 = 505,
|
|
task75 = 504,
|
|
task76 = 502,
|
|
task77 = 501,
|
|
task78 = 500,
|
|
}
|
|
|
|
public enum mapWPADNetworkDecision : int {
|
|
WPAD_NETWORK_DECISION_OFF = 0,
|
|
WPAD_NETWORK_DECISION_ON = 1,
|
|
WPAD_NETWORK_DECISION_UNKNOWN = 2 | 3,
|
|
}
|
|
|
|
[Format("Request=%1, Flags=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1056, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Select_Stop_1056 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Flags=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1055, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Select_Start_1055 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
[Format("error=%1, AddressName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1054, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_DHCP_I252WPAD_Stop_1054 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint error { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("Order=%1, AddressName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1053, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_DHCP_I252WPAD_Start_1053 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint Order { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("error=%1, Flags=%2, AddressName=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1052, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Getaddrinfo_Stop_1052 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint error { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("Flags=%1, AddressName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1051, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Getaddrinfo_Start_1051 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, AddressName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1049, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Redirect_Info_1049 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Socket=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1048, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_LookupConnection_Stop_1048 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Socket { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1047, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_LookupConnection_Start_1047 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Socket=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1046, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Connect_Stop_1046 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Socket { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1045, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_Connect_Start_1045 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1043, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_DrainResponsePostReceiveBuf_Info_1043 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1041, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_PostReceiveBuf_Info_1041 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1039, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_ReadDataPostReceiveBuf_Info_1039 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1037, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_ReadData_Info_1037 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1035, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_CRLF_Info_1035 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1033, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_Extra_Info_1033 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, Size=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1031, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_Main_Info_1031 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Size { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, HostName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1030, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_ResolveHost_Stop_1030 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, HostName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1029, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_ResolveHost_Start_1029 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1028, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_AutodialIfNotLocalHost_Stop_1028 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, HostName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1027, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_AutodialIfNotLocalHost_Start_1027 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1025, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PostNet_CacheMiss_Info_1025 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1023, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PostNet_CacheHit_Info_1023 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1021, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PostNet_CacheLookup_Info_1021 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1019, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PreNet_CacheMiss_Info_1019 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1017, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PreNet_CacheHit_Info_1017 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1015, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_PreNet_CacheLookup_Info_1015 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1013, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_OfflineCacheMiss_Info_1013 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1011, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_OfflineCacheHit_Info_1011 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1009, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_OfflineCacheLookup_Info_1009 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, StatusLineLength=%2, StatusLine=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1008, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_Stop_1008 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint StatusLineLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string StatusLine { get; set; }
|
|
}
|
|
|
|
[Format("Request=%1, AddressName=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1007, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet IE events")]
|
|
|
|
public class Wininet_SendRequest_Start_1007 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Request { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressName { get; set; }
|
|
}
|
|
|
|
[Format("_TestStr0Length=%1, TestStr0=%2, _TestStr1Length=%3, TestStr1=%4, _TestStr2Length=%5, TestStr2=%6, _TestStr0WLength=%7, TestStr0W=%8, _TestStr1WLength=%9, TestStr1W=%10, _TestStr2WLength=%11, TestStr2W=%12, TestStrLength=%13, TestStr=%14, TestStrWLength=%15, TestStrW=%16")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 1000, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_TEST_EVENT_Info_1000 : SystemEvent
|
|
{
|
|
[EventField("win:UInt8")]
|
|
public byte _TestStr0Length { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string TestStr0 { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _TestStr1Length { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string TestStr1 { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint _TestStr2Length { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string TestStr2 { get; set; }
|
|
|
|
[EventField("win:UInt8")]
|
|
public byte _TestStr0WLength { get; set; }
|
|
|
|
[EventField("win:UnicodeString")]
|
|
public string TestStr0W { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _TestStr1WLength { get; set; }
|
|
|
|
[EventField("win:UnicodeString")]
|
|
public string TestStr1W { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint _TestStr2WLength { get; set; }
|
|
|
|
[EventField("win:UnicodeString")]
|
|
public string TestStr2W { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort TestStrLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string TestStr { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort TestStrWLength { get; set; }
|
|
|
|
[EventField("win:UnicodeString")]
|
|
public string TestStrW { get; set; }
|
|
}
|
|
|
|
[Format("Autoproxy full scenario stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 835, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_ALL_Stop_835 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy full scenario started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 834, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_ALL_Start_834 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Script Download Stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 829, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD_Stop_829 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Script Download Started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 828, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD_Start_828 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Detection with SWPAD UNKNOWN stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 827, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION_Stop_827 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Detection with SWPAD UNKNOWN started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 826, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION_Start_826 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Detection with SWPAD ON stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 825, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION_Stop_825 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy Detection with SWPAD ON started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 824, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION_Start_824 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy SWPAD lookup stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 823, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP_Stop_823 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy SWPAD lookup started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 822, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP_Start_822 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy host IP lookup stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 821, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP_Stop_821 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Autoproxy host IP lookup started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 820, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP_Start_820 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("AutoProxy SWPAD Decision (%1) NumConnections (%2)")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 819, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_SWPAD_Info_819 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public mapWPADNetworkDecision WPADNetworkDecision { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint NetworkCount { get; set; }
|
|
}
|
|
|
|
[Format("WinInet Activity Transfer Event")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 818, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_TRANSFER_Info_818 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Blocking autoproxy determination stopped")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 817, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_BLOCKING_AUTOPROXY_DETERMINATION_Stop_817 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Blocking autoproxy determination started")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 816, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_BLOCKING_AUTOPROXY_DETERMINATION_Start_816 : SystemEvent
|
|
{
|
|
}
|
|
|
|
[Format("Error locating proxy information for the URL: URL=%2, Error=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 815, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_FIND_INFO_FOR_URL_opcode0_815 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Client has successfully retrieved proxy data for accessing a specified resource: URL=%2, ProxyString=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 814, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_FIND_INFO_FOR_URL_Stop_814 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ProxyStringLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ProxyString { get; set; }
|
|
}
|
|
|
|
[Format("Searching for Proxy Information for the URL: URL=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 813, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_FIND_INFO_FOR_URL_Start_813 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
}
|
|
|
|
[Format("The downloaded configuration file could not be used: ConfigurationURL=%2, MIMEType=%4, Error=%5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 812, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DOWNLOAD_opcode0_812 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _MIMETypeLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string MIMEType { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Downloading the configuration file from the configuration URL failed: ConfigurationURL=%2, Error=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 811, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DOWNLOAD_opcode0_811 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 810, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DOWNLOAD_Stop_810 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
}
|
|
|
|
[Format("Begin downloading the configuration file from the configuration URL: ConfigurationURL=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 809, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DOWNLOAD_Start_809 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
}
|
|
|
|
[Format("Search for WPAD configruation file failed: Error=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 808, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_SEARCH_opcode0_808 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Search for WPAD configuration file using DNS failed: DetectFlags=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 807, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DNS_opcode0_807 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint DetectFlags { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("WPAD configuration file found using DNS: ConfigurationURL=%2, DetectFlags=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 806, 0,
|
|
"win:Stop", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DNS_Stop_806 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint DetectFlags { get; set; }
|
|
}
|
|
|
|
[Format("Begin search for configuration file using DNS: DetectFlags=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 805, 0,
|
|
"win:Start", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DNS_Start_805 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint DetectFlags { get; set; }
|
|
}
|
|
|
|
[Format("Search for WPAD configuration file using DHCP failed: Interface=%2, ConfigurationURL=%4, Error=%5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 804, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DHCP_opcode0_804 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _InterfaceLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Interface { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("WPAD configuration file found using DHCP: Interface=%2, ConfigurationURL=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 803, 0,
|
|
"win:Stop", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DHCP_Stop_803 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _InterfaceLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Interface { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConfigurationURLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConfigurationURL { get; set; }
|
|
}
|
|
|
|
[Format("Begin search for configuration file using DHCP: Interface=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 802, 0,
|
|
"win:Start", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_DHCP_Start_802 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _InterfaceLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Interface { get; set; }
|
|
}
|
|
|
|
[Format("Client begins attempts to locate the WPAD configuration file: ConnectionName=%2, DetectFlags=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 801, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with AUTOPROXY")]
|
|
|
|
public class WININET_AUTOPROXY_SEARCH_Start_801 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ConnectionNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ConnectionName { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint DetectFlags { get; set; }
|
|
}
|
|
|
|
[Format("SSL renegotiation failed: RequestHandle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 713, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_RENEGOTIATION_opcode0_713 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("SSL renegotiation between client and server has completed successfully: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 712, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_RENEGOTIATION_Stop_712 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("Client begins SSL renegotiation: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 711, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_RENEGOTIATION_Start_711 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("The selected client certificate will be used for the SSL transaction: RequestHandle=%1, CertHash=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 708, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_CLIENT_CERT_SELECTED_Info_708 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _CertHashLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string CertHash { get; set; }
|
|
}
|
|
|
|
[Format("There is no client certificate available: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 707, 0,
|
|
"win:Info", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_CLIENT_CERT_UNAVAILABLE_Info_707 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Server requires a client certificate for client authorization: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 706, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_CLIENT_CERT_REQUIRED_Info_706 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("Server certificate validated: RequestHandle=%1, CertHash=%3, WarningFlags=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 705, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_SERVER_CERT_VALIDATED_Info_705 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _CertHashLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string CertHash { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint WarningFlags { get; set; }
|
|
}
|
|
|
|
[Format("Error validating server certificate (SCHANNEL error): RequestHandle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 704, 0,
|
|
"win:Info", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_SERVER_CERT_ERROR_Info_704 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("SSL negotiation failed: RequestHandle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 703, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_NEGOTIATION_opcode0_703 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("SSL negotiation between client and server has completed successfully: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 702, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_NEGOTIATION_Stop_702 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("Client begins SSL negotiation: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 701, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with HTTPS")]
|
|
|
|
public class WININET_HTTPS_NEGOTIATION_Start_701 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("Client adds authorization headers to an HTTP request: RequestHandle=%1, Scheme=%3, IsProxy=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 606, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_CLIENT_ADD_HEADERS_Info_606 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _SchemeLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Scheme { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Using default credentials: RequestHandle=%1, IsProxy=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 605, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_USING_DEFAULT_CREDS_Info_605 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Using cached credentials: RequestHandle=%1, IsProxy=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 604, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_USING_CACHED_CREDS_Info_604 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Client sets password: RequestHandle=%1, IsProxy=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 603, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_CLIENT_SETS_PASSWORD_Info_603 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Client sets username: RequestHandle=%1, IsProxy=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 602, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_CLIENT_SETS_USERNAME_Info_602 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Auth response received: RequestHandle=%1, Scheme=%3, IsProxy=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 601, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with authentication")]
|
|
|
|
public class WININET_AUTH_RESPONSE_RECEIVED_Info_601 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _SchemeLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Scheme { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool IsProxy { get; set; }
|
|
}
|
|
|
|
[Format("Cookie added to the request header: Domain=%2, Path=%4, Name=%6, Value=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 507, 0,
|
|
"win:Info", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_ADDED_TO_HEADER_Info_507 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _DomainLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Domain { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _PathLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Path { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _NameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Name { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ValueLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Value { get; set; }
|
|
}
|
|
|
|
[Format("A cookie header was created for the request: URL=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 506, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_REQUEST_HEADER_CREATED_Info_506 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
}
|
|
|
|
[Format("Server cookie was rejected by the client's P3P policy: Domain=%2, Path=%4, Name=%6, Value=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 505, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_P3P_REJECTED_Info_505 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _DomainLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Domain { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _PathLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Path { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _NameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Name { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ValueLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Value { get; set; }
|
|
}
|
|
|
|
[Format("Client has rejected a cookie sent by the server: Domain=%2, Path=%4, Name=%6, Value=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 504, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_BLOCKED_Info_504 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _DomainLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Domain { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _PathLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Path { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _NameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Name { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ValueLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Value { get; set; }
|
|
}
|
|
|
|
[Format("Client has deleted a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 503, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_DELETED_Info_503 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _DomainLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Domain { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _PathLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Path { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _NameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Name { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ValueLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Value { get; set; }
|
|
}
|
|
|
|
[Format("Client has stored a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 502, 0,
|
|
"win:Info", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_STORED_Info_502 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _DomainLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Domain { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _PathLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Path { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _NameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Name { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ValueLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Value { get; set; }
|
|
}
|
|
|
|
[Format("Received response including a cookie header: URL=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 501, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with Cookies")]
|
|
|
|
public class WININET_COOKIE_HEADER_RECEIVED_Info_501 : SystemEvent
|
|
{
|
|
[EventField("win:UInt32")]
|
|
public uint URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
}
|
|
|
|
[Format("A network change was detected: Handle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 308, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_NETWORK_CHANGE_DETECTED_Info_308 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Handle { get; set; }
|
|
}
|
|
|
|
[Format("Re-used DNS cache, query for %2 hostname is complete: Handle=%3, Addresses=%5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 307, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_DNS_QUERY_Stop_307 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _HostNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _AddressListLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressList { get; set; }
|
|
}
|
|
|
|
[Format("DNS query for %2 hostname failed: Handle=%3 Error=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 306, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_DNS_QUERY_opcode0_306 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _HostNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("DNS query for %2 hostname is complete: Handle=%3, Addresses=%5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 305, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_DNS_QUERY_Stop_305 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _HostNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _AddressListLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AddressList { get; set; }
|
|
}
|
|
|
|
[Format("DNS query for %2 hostname is sent: Handle=%3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 304, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_DNS_QUERY_Start_304 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _HostNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string HostName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("TCP connection closed successfully: SocketHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 303, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_TCP_CONNECTION_Stop_303 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
}
|
|
|
|
[Format("TCP connection to %2 for connection handle %3 failed: Error=%4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 302, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_TCP_CONNECTION_opcode0_302 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServerNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ServerName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("TCP connection to server %2 established: ConnectionHandle=%3, SocketHandle=%4, LocalPort=%5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 301, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with network operations (TCP, DNS)")]
|
|
|
|
public class WININET_TCP_CONNECTION_Start_301 : SystemEvent
|
|
{
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServerNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ServerName { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint LocalPort { get; set; }
|
|
}
|
|
|
|
[Format("HTTP Response Headers RequestHandle=%1 %3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 211, 0,
|
|
"win:Info", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses", "Flagged on all WinINet events dealing with potential personally identifiable information")]
|
|
|
|
public class WININET_RESPONSE_HEADER_Info_211 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort Length { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Headers { get; set; }
|
|
}
|
|
|
|
[Format("HTTP Request Headers RequestHandle=%1 %3")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 210, 0,
|
|
"win:Info", "win:Verbose", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses", "Flagged on all WinINet events dealing with potential personally identifiable information")]
|
|
|
|
public class WININET_REQUEST_HEADER_Info_210 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort Length { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Headers { get; set; }
|
|
}
|
|
|
|
[Format("HTTP response entity body received: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 209, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_RESPONSE_BODY_RECEIVED_Info_209 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
}
|
|
|
|
[Format("Keep-alive connection is closed: ConnectionHandle=%1, SocketHandle=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 208, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_KEEP_ALIVE_CONNECTION_CLOSED_Info_208 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
}
|
|
|
|
[Format("Connection is returned to keep-alive pool: RequestHandle=%1, SocketHandle=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 207, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_KEEP_ALIVE_CONNECTION_POOLED_Info_207 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
}
|
|
|
|
[Format("Keep-alive connection is re-used: ConnectionHandle=%1, SocketHandle=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 206, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_KEEP_ALIVE_CONNECTION_REUSED_Info_206 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
}
|
|
|
|
[Format("HTTP connection (Handle=%1, SocketHandle=%2) closed due to the following reason: %4")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 205, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_CONNECTION_CLOSED_Info_205 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ReasonLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Reason { get; set; }
|
|
}
|
|
|
|
[Format("HTTP response failed: Handle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 204, 0,
|
|
"Fail", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_RESPONSE_opcode0_204 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Handle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("HTTP response (%1) received: RequestHandle=%2, SocketHandle=%3, %5, ContentLength=%7")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 203, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_RESPONSE_Stop_203 : SystemEvent
|
|
{
|
|
[EventField("win:Int32")]
|
|
public int ResponseCode { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _VerbLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Verb { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ContentLengthStrLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ContentLength { get; set; }
|
|
}
|
|
|
|
[Format("HTTP request send failed: Handle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 202, 0,
|
|
"Fail", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_REQUEST_opcode0_202 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong Handle { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("HTTP request was sent successfully: RequestHandle=%1, SocketHandle=%2, %4, CookieSent= %5")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 201, 0,
|
|
"win:Stop", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_REQUEST_Stop_201 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong RequestHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong SocketHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _VerbLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Verb { get; set; }
|
|
|
|
[EventField("win:Boolean")]
|
|
public bool Cookie { get; set; }
|
|
}
|
|
|
|
[Format("HTTP request was received from API: RequestHandle=%1")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 200, 0,
|
|
"win:Start", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with processing of HTTP requests and responses")]
|
|
|
|
public class WININET_HTTP_REQUEST_Start_200 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong HINTERNET { get; set; }
|
|
}
|
|
|
|
[Format("Request handle %1 Server Details: Server=%3 Port=%4 Service=%6")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 108, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_HTTP_REQUEST_HANDLE_CREATED_Info_108 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServerNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ServerName { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint ServerPort { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServiceLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Service { get; set; }
|
|
}
|
|
|
|
[Format("Handle %1 failed to close: Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 107, 0,
|
|
"win:Info", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_HANDLE_CLOSE_FAILED_Info_107 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong HINTERNET { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Failed to create handle: ParentHandle=%1, Error=%2")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 106, 0,
|
|
"win:Info", "win:Error", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_HANDLE_CREATE_FAILED_Info_106 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong HINTERNET { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Error { get; set; }
|
|
}
|
|
|
|
[Format("Handle %1 closed successfully")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 105, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_HANDLE_CLOSED_Info_105 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong HINTERNET { get; set; }
|
|
}
|
|
|
|
[Format("Request handle %1 created by HttpOpenRequest: ConnectionHandle=%2, %4, Target=%6, Ver=%8, Referrer=%10, Media types=%12, Flags=%13")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 104, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_HTTP_REQUEST_HANDLE_CREATED_Info_104 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong ParentHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _VerbLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Verb { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ObjectNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ObjectName { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _VersionLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Version { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint _ReferrerLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Referrer { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _AcceptTypesLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AcceptTypes { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
[Format("Handle %1 created by InternetConnect: SessionHandle=%2, Server=%4:%5, %7, Flags=%8")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 103, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_CONNECT_HANDLE_CREATED_Info_103 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong ParentHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServerNameLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ServerName { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint ServerPort { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ServiceLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Service { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
[Format("Handle %1 created by InternetOpenURL: SessionHandle=%2,URL=%4, Headers=%6, Flags=%7")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 102, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_OPEN_URL_HANDLE_CREATED_Info_102 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong ConnectionHandle { get; set; }
|
|
|
|
[EventField("win:Pointer")]
|
|
public ulong ParentHandle { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _URLLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string URL { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _HeadersLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string Headers { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
[Format("Session handle %1 created: UserAgent=%3, AccessType=%5, ProxyList=%7, ProxyBypassList=%9, Flags=%10")]
|
|
|
|
[ManifestEvent("{43d1a55c-76d6-4f7e-995c-64c711e5cafe}", 101, 0,
|
|
"win:Info", "win:Informational", "Microsoft-Windows-WinINet/Analytic", "Flagged on all WinINet events dealing with creation or destruction of INTERNET handles")]
|
|
|
|
public class WININET_ROOT_HANDLE_CREATED_Info_101 : SystemEvent
|
|
{
|
|
[EventField("win:Pointer")]
|
|
public ulong HINTERNET { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _UserAgentLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string UserAgent { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _AccessTypeLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string AccessType { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ProxyListLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ProxyList { get; set; }
|
|
|
|
[EventField("win:UInt16")]
|
|
public ushort _ProxyBypassListLength { get; set; }
|
|
|
|
[EventField("win:AnsiString")]
|
|
public string ProxyBypassList { get; set; }
|
|
|
|
[EventField("win:UInt32")]
|
|
public uint Flags { get; set; }
|
|
}
|
|
|
|
}
|