Windows 10, version 1809 basic level Windows diagnostic events and fields

03/27/2020

350 minutes to read

+3



In this article

Applies to

Windows 10, version 1809

The Basic level gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Microsoft Store. When the level is set to Basic, it also includes the Security level information.

The Basic level helps to identify problems that can occur on a particular device hardware or software configuration. For example, it can help determine if crashes are more frequent on devices with a specific amount of memory or that are running a particular driver version. This helps Microsoft fix operating system or app problems.

Use this article to learn about diagnostic events, grouped by event area, and the fields within each event. A brief description is provided for each field. Every event generated includes common data, which collects device data.

You can learn more about Windows functional and diagnostic data through these articles:

Account trace logging provider events

Microsoft.Windows.Mitigation.AccountTraceLoggingProvider.General

This event provides information about application properties to indicate the successful execution.

The following fields are available:

AppMode Indicates the mode the app is being currently run around privileges.

Indicates the mode the app is being currently run around privileges. ExitCode Indicates the exit code of the app.

Indicates the exit code of the app. Help Indicates if the app needs to be launched in the help mode.

Indicates if the app needs to be launched in the help mode. ParseError Indicates if there was a parse error during the execution.

Indicates if there was a parse error during the execution. RightsAcquired Indicates if the right privileges were acquired for successful execution.

Indicates if the right privileges were acquired for successful execution. RightsWereEnabled Indicates if the right privileges were enabled for successful execution.

Indicates if the right privileges were enabled for successful execution. TestMode Indicates whether the app is being run in test mode.

Microsoft.Windows.Mitigation.AccountTraceLoggingProvider.GetCount

This event provides information about the properties of user accounts in the Administrator group.

The following fields are available:

Internal Indicates the internal property associated with the count group.

Indicates the internal property associated with the count group. LastError The error code (if applicable) for the cause of the failure to get the count of the user account.

The error code (if applicable) for the cause of the failure to get the count of the user account. Result The HResult error.

AppLocker events

Microsoft.Windows.Security.AppLockerCSP.ActivityStoppedAutomatically

Automatically closed activity for start/stop operations that aren't explicitly closed.

Microsoft.Windows.Security.AppLockerCSP.AddParams

This event indicates the parameters passed to the Add function of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

child The child URI of the node to add.

The child URI of the node to add. uri URI of the node relative to %SYSTEM32%/AppLocker.

Microsoft.Windows.Security.AppLockerCSP.AddStart

This event indicates the start of an Add operation for the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.AddStop

This event indicates the end of an Add operation for the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

hr The HRESULT returned by Add function in AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.CAppLockerCSP::Rollback

This event provides the result of the Rollback operation in the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

oldId Previous id for the CSP transaction.

Previous id for the CSP transaction. txId Current id for the CSP transaction.

Microsoft.Windows.Security.AppLockerCSP.ClearParams

This event provides the parameters passed to the Clear operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

uri The URI relative to the %SYSTEM32%\AppLocker folder.

Microsoft.Windows.Security.AppLockerCSP.ClearStart

This event indicates the start of the Clear operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.ClearStop

This event indicates the end of the Clear operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

hr HRESULT reported at the end of the 'Clear' function.

Microsoft.Windows.Security.AppLockerCSP.ConfigManagerNotificationStart

This event indicates the start of the Configuration Manager Notification operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

NotifyState State sent by ConfigManager to AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.ConfigManagerNotificationStop

This event indicates the end of the Configuration Manager Notification operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

hr HRESULT returned by the ConfigManagerNotification function in AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.CreateNodeInstanceParams

This event provides the parameters that were passed to the Create Node Instance operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

NodeId NodeId passed to CreateNodeInstance.

NodeId passed to CreateNodeInstance. nodeOps NodeOperations parameter passed to CreateNodeInstance.

NodeOperations parameter passed to CreateNodeInstance. uri URI passed to CreateNodeInstance, relative to %SYSTEM32%\AppLocker.

Microsoft.Windows.Security.AppLockerCSP.CreateNodeInstanceStart

This event indicates the start of the Create Node Instance operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.CreateNodeInstanceStop

This event indicates the end of the Create Node Instance operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

hr HRESULT returned by the CreateNodeInstance function in AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.DeleteChildParams

This event provides the parameters passed to the Delete Child operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

child The child URI of the node to delete.

The child URI of the node to delete. uri URI relative to %SYSTEM32%\AppLocker.

Microsoft.Windows.Security.AppLockerCSP.DeleteChildStart

This event indicates the start of the Delete Child operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.DeleteChildStop

This event indicates the end of the Delete Child operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

hr HRESULT returned by the DeleteChild function in AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.EnumPolicies

This event provides the logged Uniform Resource Identifier (URI) relative to %SYSTEM32%\AppLocker if the plug-in GUID is null or the Configuration Service Provider (CSP) doesn't believe the old policy is present.

The following fields are available:

uri URI relative to %SYSTEM32%\AppLocker.

Microsoft.Windows.Security.AppLockerCSP.GetChildNodeNamesParams

This event provides the parameters passed to the Get Child Node Names operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

uri URI relative to %SYSTEM32%/AppLocker for MDM node.

Microsoft.Windows.Security.AppLockerCSP.GetChildNodeNamesStart

This event indicates the start of the Get Child Node Names operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.GetChildNodeNamesStop

This event indicates the end of the Get Child Node Names operation of the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

child[0] If function succeeded, the first child's name, else "NA".

If function succeeded, the first child's name, else "NA". count If function succeeded, the number of child node names returned by the function, else 0.

If function succeeded, the number of child node names returned by the function, else 0. hr HRESULT returned by the GetChildNodeNames function of AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.GetLatestId

This event provides the latest time-stamped unique identifier in the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

dirId The latest directory identifier found by GetLatestId.

The latest directory identifier found by GetLatestId. id The id returned by GetLatestId if id > 0 - otherwise the dirId parameter.

Microsoft.Windows.Security.AppLockerCSP.HResultException

This event provides the result code (HRESULT) generated by any arbitrary function in the AppLocker Configuration Service Provider (CSP).

The following fields are available:

file File in the OS code base in which the exception occurs.

File in the OS code base in which the exception occurs. function Function in the OS code base in which the exception occurs.

Function in the OS code base in which the exception occurs. hr HRESULT that is reported.

HRESULT that is reported. line Line in the file in the OS code base in which the exception occurs.

Microsoft.Windows.Security.AppLockerCSP.SetValueParams

This event provides the parameters that were passed to the SetValue operation in the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

The following fields are available:

dataLength Length of the value to set.

Length of the value to set. uri The node URI to that should contain the value, relative to %SYSTEM32%\AppLocker.

Microsoft.Windows.Security.AppLockerCSP.SetValueStart

This event indicates the start of the SetValue operation in the AppLocker Configuration Service Provider (CSP) to help keep Windows secure.

Microsoft.Windows.Security.AppLockerCSP.SetValueStop

End of the "SetValue" operation for the AppLockerCSP node.

The following fields are available:

hr HRESULT returned by the SetValue function in AppLockerCSP.

Microsoft.Windows.Security.AppLockerCSP.TryRemediateMissingPolicies

This event provides information for fixing a policy in the AppLocker Configuration Service Provider (CSP) to help keep Windows secure. It includes Uniform Resource Identifier (URI) relative to %SYSTEM32%\AppLocker that needs to be fixed.

The following fields are available:

uri URI for node relative to %SYSTEM32%/AppLocker.

Appraiser events

Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount

This event lists the types of objects and how many of each exist on the client device. This allows for a quick way to ensure that the records present on the server match what is present on the client.

The following fields are available:

DatasourceApplicationFile_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS1 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. DatasourceApplicationFile_RS2 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. DatasourceApplicationFile_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceApplicationFile_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS1 The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device.

The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device. DatasourceDevicePnp_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDevicePnp_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS1 The total DataSourceDriverPackage objects targeting Windows 10 version 1607 on this device.

The total DataSourceDriverPackage objects targeting Windows 10 version 1607 on this device. DatasourceDriverPackage_RS2 The total DataSourceDriverPackage objects targeting Windows 10, version 1703 on this device.

The total DataSourceDriverPackage objects targeting Windows 10, version 1703 on this device. DatasourceDriverPackage_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceDriverPackage_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS1 The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device.

The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device. DataSourceMatchingInfoBlock_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoBlock_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS1 The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device.

The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. DataSourceMatchingInfoPassive_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPassive_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_RS1 The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device.

The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. DataSourceMatchingInfoPostUpgrade_RS2 The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device.

The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. DataSourceMatchingInfoPostUpgrade_RS3 The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device.

The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. DataSourceMatchingInfoPostUpgrade_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DataSourceMatchingInfoPostUpgrade_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_RS1 The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device.

The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device. DatasourceSystemBios_RS2 The total DatasourceSystemBios objects targeting Windows 10 version 1703 present on this device.

The total DatasourceSystemBios objects targeting Windows 10 version 1703 present on this device. DatasourceSystemBios_RS3 The total DatasourceSystemBios objects targeting Windows 10 version 1709 present on this device.

The total DatasourceSystemBios objects targeting Windows 10 version 1709 present on this device. DatasourceSystemBios_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DatasourceSystemBios_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionApplicationFile_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS1 The total DecisionDevicePnp objects targeting Windows 10 version 1607 on this device.

The total DecisionDevicePnp objects targeting Windows 10 version 1607 on this device. DecisionDevicePnp_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDevicePnp_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS1 The total DecisionDriverPackage objects targeting Windows 10 version 1607 on this device.

The total DecisionDriverPackage objects targeting Windows 10 version 1607 on this device. DecisionDriverPackage_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS3 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionDriverPackage_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_RS1 The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device.

The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device. DecisionMatchingInfoBlock_RS2 The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device.

The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device. DecisionMatchingInfoBlock_RS3 The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device.

The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device. DecisionMatchingInfoBlock_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_RS4 The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1803 present on this device.

The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1803 present on this device. DecisionMatchingInfoBlock_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoBlock_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_RS1 The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device.

The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. DecisionMatchingInfoPassive_RS2 The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device.

The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device. DecisionMatchingInfoPassive_RS3 The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device.

The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device. DecisionMatchingInfoPassive_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPassive_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_19H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_RS1 The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device.

The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. DecisionMatchingInfoPostUpgrade_RS2 The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device.

The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. DecisionMatchingInfoPostUpgrade_RS3 The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device.

The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. DecisionMatchingInfoPostUpgrade_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_RS4 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMatchingInfoPostUpgrade_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_19H1Setup The total DecisionMediaCenter objects targeting the next release of Windows on this device.

The total DecisionMediaCenter objects targeting the next release of Windows on this device. DecisionMediaCenter_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_RS1 The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device.

The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device. DecisionMediaCenter_RS2 The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device.

The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device. DecisionMediaCenter_RS3 The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device.

The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device. DecisionMediaCenter_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_RS4 The total DecisionMediaCenter objects targeting Windows 10 version 1803 present on this device.

The total DecisionMediaCenter objects targeting Windows 10 version 1803 present on this device. DecisionMediaCenter_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionMediaCenter_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_19ASetup The total DecisionSystemBios objects targeting the next release of Windows on this device.

The total DecisionSystemBios objects targeting the next release of Windows on this device. DecisionSystemBios_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_19H1Setup The total DecisionSystemBios objects targeting the next release of Windows on this device.

The total DecisionSystemBios objects targeting the next release of Windows on this device. DecisionSystemBios_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_RS1 The total DecisionSystemBios objects targeting Windows 10 version 1607 on this device.

The total DecisionSystemBios objects targeting Windows 10 version 1607 on this device. DecisionSystemBios_RS2 The total DecisionSystemBios objects targeting Windows 10 version 1703 on this device.

The total DecisionSystemBios objects targeting Windows 10 version 1703 on this device. DecisionSystemBios_RS3 The total DecisionSystemBios objects targeting Windows 10 version 1709 on this device.

The total DecisionSystemBios objects targeting Windows 10 version 1709 on this device. DecisionSystemBios_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_RS4 The total DecisionSystemBios objects targeting Windows 10 version, 1803 present on this device.

The total DecisionSystemBios objects targeting Windows 10 version, 1803 present on this device. DecisionSystemBios_RS4Setup The total DecisionSystemBios objects targeting the next release of Windows on this device.

The total DecisionSystemBios objects targeting the next release of Windows on this device. DecisionSystemBios_RS5 The total DecisionSystemBios objects targeting the next release of Windows on this device.

The total DecisionSystemBios objects targeting the next release of Windows on this device. DecisionSystemBios_RS5Setup The total DecisionSystemBios objects targeting the next release of Windows on this device.

The total DecisionSystemBios objects targeting the next release of Windows on this device. DecisionSystemBios_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemBios_TH2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionSystemProcessor_RS2 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionTest_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionTest_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. DecisionTest_RS1 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. InventoryApplicationFile The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventoryDeviceContainer A count of device container objects in cache.

A count of device container objects in cache. InventoryDevicePnp A count of device Plug and Play objects in cache.

A count of device Plug and Play objects in cache. InventoryDriverBinary A count of driver binary objects in cache.

A count of driver binary objects in cache. InventoryDriverPackage A count of device objects in cache.

A count of device objects in cache. InventoryLanguagePack The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventoryMediaCenter The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventorySystemBios The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventorySystemMachine The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventorySystemProcessor The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventoryTest The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. InventoryUplevelDriverPackage The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. PCFP The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemMemory The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemProcessorCompareExchange The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemProcessorLahfSahf The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemProcessorNx The total number of objects of this type present on this device.

The total number of objects of this type present on this device. SystemProcessorPrefetchW The total number of objects of this type present on this device.

The total number of objects of this type present on this device. SystemProcessorSse2 The total number of objects of this type present on this device.

The total number of objects of this type present on this device. SystemTouch The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemWim The total number of objects of this type present on this device.

The total number of objects of this type present on this device. SystemWindowsActivationStatus The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. SystemWlan The total number of objects of this type present on this device.

The total number of objects of this type present on this device. Wmdrm_19ASetup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_19H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_19H1Setup The total Wmdrm objects targeting the next release of Windows on this device.

The total Wmdrm objects targeting the next release of Windows on this device. Wmdrm_20H1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_20H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_21H1Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_RS1 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. Wmdrm_RS2 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. Wmdrm_RS3 An ID for the system, calculated by hashing hardware identifiers.

An ID for the system, calculated by hashing hardware identifiers. Wmdrm_RS3Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_RS4 The total Wmdrm objects targeting Windows 10, version 1803 present on this device.

The total Wmdrm objects targeting Windows 10, version 1803 present on this device. Wmdrm_RS4Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_RS5 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_RS5Setup The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_TH1 The count of the number of this particular object type present on this device.

The count of the number of this particular object type present on this device. Wmdrm_TH2 The count of the number of this particular object type present on this device.

Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd

Represents the basic metadata about specific application files installed on the system.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file that is generating the events.

The version of the appraiser file that is generating the events. AvDisplayName If the app is an anti-virus app, this is its display name.

If the app is an anti-virus app, this is its display name. CompatModelIndex The compatibility prediction for this file.

The compatibility prediction for this file. HasCitData Indicates whether the file is present in CIT data.

Indicates whether the file is present in CIT data. HasUpgradeExe Indicates whether the anti-virus app has an upgrade.exe file.

Indicates whether the anti-virus app has an upgrade.exe file. IsAv Is the file an anti-virus reporting EXE?

Is the file an anti-virus reporting EXE? ResolveAttempted This will always be an empty string when sending diagnostic data.

This will always be an empty string when sending diagnostic data. SdbEntries An array of fields that indicates the SDB entries that apply to this file.

Microsoft.Windows.Appraiser.General.DatasourceApplicationFileRemove

This event indicates that the DatasourceApplicationFile object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceApplicationFileStartSync

This event indicates that a new set of DatasourceApplicationFileAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd

This event sends compatibility data for a Plug and Play device, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

ActiveNetworkConnection Indicates whether the device is an active network device.

Indicates whether the device is an active network device. AppraiserVersion The version of the appraiser file generating the events.

The version of the appraiser file generating the events. CosDeviceRating An enumeration that indicates if there is a driver on the target operating system.

An enumeration that indicates if there is a driver on the target operating system. CosDeviceSolution An enumeration that indicates how a driver on the target operating system is available.

An enumeration that indicates how a driver on the target operating system is available. CosDeviceSolutionUrl Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd . Empty string

Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd . Empty string CosPopulatedFromId The expected uplevel driver matching ID based on driver coverage data.

The expected uplevel driver matching ID based on driver coverage data. IsBootCritical Indicates whether the device boot is critical.

Indicates whether the device boot is critical. UplevelInboxDriver Indicates whether there is a driver uplevel for this device.

Indicates whether there is a driver uplevel for this device. WuDriverCoverage Indicates whether there is a driver uplevel for this device, according to Windows Update.

Indicates whether there is a driver uplevel for this device, according to Windows Update. WuDriverUpdateId The Windows Update ID of the applicable uplevel driver.

The Windows Update ID of the applicable uplevel driver. WuPopulatedFromId The expected uplevel driver matching ID based on driver coverage from Windows Update.

Microsoft.Windows.Appraiser.General.DatasourceDevicePnpRemove

This event indicates that the DatasourceDevicePnp object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceDevicePnpStartSync

This event indicates that a new set of DatasourceDevicePnpAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceDriverPackageAdd

This event sends compatibility database data about driver packages to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

Microsoft.Windows.Appraiser.General.DatasourceDriverPackageRemove

This event indicates that the DatasourceDriverPackage object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceDriverPackageStartSync

This event indicates that a new set of DatasourceDriverPackageAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoBlockAdd

This event sends blocking data about any compatibility blocking entries on the system that are not directly related to specific applications or devices, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

The version of the appraiser file generating the events. ResolveAttempted This will always be an empty string when sending diagnostic data.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoBlockRemove

This event indicates that the DataSourceMatchingInfoBlock object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoBlockStartSync

This event indicates that a full set of DataSourceMatchingInfoBlockStAdd events have been sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveAdd

This event sends compatibility database information about non-blocking compatibility entries on the system that are not keyed by either applications or devices, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveRemove

This event indicates that the DataSourceMatchingInfoPassive object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveStartSync

This event indicates that a new set of DataSourceMatchingInfoPassiveAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPostUpgradeAdd

This event sends compatibility database information about entries requiring reinstallation after an upgrade on the system that are not keyed by either applications or devices, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPostUpgradeRemove

This event indicates that the DataSourceMatchingInfoPostUpgrade object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPostUpgradeStartSync

This event indicates that a new set of DataSourceMatchingInfoPostUpgradeAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceSystemBiosAdd

This event sends compatibility database information about the BIOS to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file generating the events.

Microsoft.Windows.Appraiser.General.DatasourceSystemBiosRemove

This event indicates that the DatasourceSystemBios object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DatasourceSystemBiosStartSync

This event indicates that a new set of DatasourceSystemBiosAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd

This event sends compatibility decision data about a file to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file that is generating the events.

The version of the appraiser file that is generating the events. BlockAlreadyInbox The uplevel runtime block on the file already existed on the current OS.

The uplevel runtime block on the file already existed on the current OS. BlockingApplication Indicates whether there are any application issues that interfere with the upgrade due to the file in question.

Indicates whether there are any application issues that interfere with the upgrade due to the file in question. DisplayGenericMessage Will be a generic message be shown for this file?

Will be a generic message be shown for this file? DisplayGenericMessageGated Indicates whether a generic message be shown for this file.

Indicates whether a generic message be shown for this file. HardBlock This file is blocked in the SDB.

This file is blocked in the SDB. HasUxBlockOverride Does the file have a block that is overridden by a tag in the SDB?

Does the file have a block that is overridden by a tag in the SDB? MigApplication Does the file have a MigXML from the SDB associated with it that applies to the current upgrade mode?

Does the file have a MigXML from the SDB associated with it that applies to the current upgrade mode? MigRemoval Does the file have a MigXML from the SDB that will cause the app to be removed on upgrade?

Does the file have a MigXML from the SDB that will cause the app to be removed on upgrade? NeedsDismissAction Will the file cause an action that can be dismissed?

Will the file cause an action that can be dismissed? NeedsInstallPostUpgradeData After upgrade, the file will have a post-upgrade notification to install a replacement for the app.

After upgrade, the file will have a post-upgrade notification to install a replacement for the app. NeedsNotifyPostUpgradeData Does the file have a notification that should be shown after upgrade?

Does the file have a notification that should be shown after upgrade? NeedsReinstallPostUpgradeData After upgrade, this file will have a post-upgrade notification to reinstall the app.

After upgrade, this file will have a post-upgrade notification to reinstall the app. NeedsUninstallAction The file must be uninstalled to complete the upgrade.

The file must be uninstalled to complete the upgrade. SdbBlockUpgrade The file is tagged as blocking upgrade in the SDB,

The file is tagged as blocking upgrade in the SDB, SdbBlockUpgradeCanReinstall The file is tagged as blocking upgrade in the SDB. It can be reinstalled after upgrade.

The file is tagged as blocking upgrade in the SDB. It can be reinstalled after upgrade. SdbBlockUpgradeUntilUpdate The file is tagged as blocking upgrade in the SDB. If the app is updated, the upgrade can proceed.

The file is tagged as blocking upgrade in the SDB. If the app is updated, the upgrade can proceed. SdbReinstallUpgrade The file is tagged as needing to be reinstalled after upgrade in the SDB. It does not block upgrade.

The file is tagged as needing to be reinstalled after upgrade in the SDB. It does not block upgrade. SdbReinstallUpgradeWarn The file is tagged as needing to be reinstalled after upgrade with a warning in the SDB. It does not block upgrade.

The file is tagged as needing to be reinstalled after upgrade with a warning in the SDB. It does not block upgrade. SoftBlock The file is softblocked in the SDB and has a warning.

Microsoft.Windows.Appraiser.General.DecisionApplicationFileRemove

This event indicates that the DecisionApplicationFile object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionApplicationFileStartSync

This event indicates that a new set of DecisionApplicationFileAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd

This event sends compatibility decision data about a Plug and Play (PNP) device to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

The version of the appraiser file generating the events. AssociatedDriverIsBlocked Is the driver associated with this PNP device blocked?

Is the driver associated with this PNP device blocked? AssociatedDriverWillNotMigrate Will the driver associated with this plug-and-play device migrate?

Will the driver associated with this plug-and-play device migrate? BlockAssociatedDriver Should the driver associated with this PNP device be blocked?

Should the driver associated with this PNP device be blocked? BlockingDevice Is this PNP device blocking upgrade?

Is this PNP device blocking upgrade? BlockUpgradeIfDriverBlocked Is the PNP device both boot critical and does not have a driver included with the OS?

Is the PNP device both boot critical and does not have a driver included with the OS? BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork Is this PNP device the only active network device?

Is this PNP device the only active network device? DisplayGenericMessage Will a generic message be shown during Setup for this PNP device?

Will a generic message be shown during Setup for this PNP device? DisplayGenericMessageGated Indicates whether a generic message will be shown during Setup for this PNP device.

Indicates whether a generic message will be shown during Setup for this PNP device. DriverAvailableInbox Is a driver included with the operating system for this PNP device?

Is a driver included with the operating system for this PNP device? DriverAvailableOnline Is there a driver for this PNP device on Windows Update?

Is there a driver for this PNP device on Windows Update? DriverAvailableUplevel Is there a driver on Windows Update or included with the operating system for this PNP device?

Is there a driver on Windows Update or included with the operating system for this PNP device? DriverBlockOverridden Is there is a driver block on the device that has been overridden?

Is there is a driver block on the device that has been overridden? NeedsDismissAction Will the user would need to dismiss a warning during Setup for this device?

Will the user would need to dismiss a warning during Setup for this device? NotRegressed Does the device have a problem code on the source OS that is no better than the one it would have on the target OS?

Does the device have a problem code on the source OS that is no better than the one it would have on the target OS? SdbDeviceBlockUpgrade Is there an SDB block on the PNP device that blocks upgrade?

Is there an SDB block on the PNP device that blocks upgrade? SdbDriverBlockOverridden Is there an SDB block on the PNP device that blocks upgrade, but that block was overridden?

Microsoft.Windows.Appraiser.General.DecisionDevicePnpRemove

This event indicates that the DecisionDevicePnp object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionDevicePnpStartSync

The DecisionDevicePnpStartSync event indicates that a new set of DecisionDevicePnpAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionDriverPackageAdd

This event sends decision data about driver package compatibility to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

The version of the appraiser file generating the events. DisplayGenericMessageGated Indicates whether a generic offer block message will be shown for this driver package.

Indicates whether a generic offer block message will be shown for this driver package. DriverBlockOverridden Does the driver package have an SDB block that blocks it from migrating, but that block has been overridden?

Does the driver package have an SDB block that blocks it from migrating, but that block has been overridden? DriverIsDeviceBlocked Was the driver package was blocked because of a device block?

Was the driver package was blocked because of a device block? DriverIsDriverBlocked Is the driver package blocked because of a driver block?

Is the driver package blocked because of a driver block? DriverIsTroubleshooterBlocked Indicates whether the driver package is blocked because of a troubleshooter block.

Indicates whether the driver package is blocked because of a troubleshooter block. DriverShouldNotMigrate Should the driver package be migrated during upgrade?

Should the driver package be migrated during upgrade? SdbDriverBlockOverridden Does the driver package have an SDB block that blocks it from migrating, but that block has been overridden?

Microsoft.Windows.Appraiser.General.DecisionDriverPackageRemove

This event indicates that the DecisionDriverPackage object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionDriverPackageStartSync

This event indicates that a new set of DecisionDriverPackageAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoBlockAdd

This event sends compatibility decision data about blocking entries on the system that are not keyed by either applications or devices, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the appraiser file generating the events.

The version of the appraiser file generating the events. BlockingApplication Are there are any application issues that interfere with upgrade due to matching info blocks?

Are there are any application issues that interfere with upgrade due to matching info blocks? DisplayGenericMessage Will a generic message be shown for this block?

Will a generic message be shown for this block? NeedsDismissAction Will the file cause an action that can be dismissed?

Will the file cause an action that can be dismissed? NeedsUninstallAction Does the user need to take an action in setup due to a matching info block?

Does the user need to take an action in setup due to a matching info block? SdbBlockUpgrade Is a matching info block blocking upgrade?

Is a matching info block blocking upgrade? SdbBlockUpgradeCanReinstall Is a matching info block blocking upgrade, but has the can reinstall tag?

Is a matching info block blocking upgrade, but has the can reinstall tag? SdbBlockUpgradeUntilUpdate Is a matching info block blocking upgrade but has the until update tag?

Is a matching info block blocking upgrade but has the until update tag? SdbReinstallUpgradeWarn The file is tagged as needing to be reinstalled after upgrade with a warning in the SDB. It does not block upgrade.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoBlockRemove

This event indicates that the DecisionMatchingInfoBlock object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoBlockStartSync

This event indicates that a new set of DecisionMatchingInfoBlockAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPassiveAdd

This event sends compatibility decision data about non-blocking entries on the system that are not keyed by either applications or devices, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

The version of the Appraiser file that is generating the events. BlockingApplication Are there any application issues that interfere with upgrade due to matching info blocks?

Are there any application issues that interfere with upgrade due to matching info blocks? DisplayGenericMessageGated Indicates whether a generic offer block message will be shown due to matching info blocks.

Indicates whether a generic offer block message will be shown due to matching info blocks. MigApplication Is there a matching info block with a mig for the current mode of upgrade?

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPassiveRemove

This event Indicates that the DecisionMatchingInfoPassive object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPassiveStartSync

This event indicates that a new set of DecisionMatchingInfoPassiveAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPostUpgradeAdd

This event sends compatibility decision data about entries that require reinstall after upgrade. It's used to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

The version of the Appraiser file that is generating the events. NeedsInstallPostUpgradeData Will the file have a notification after upgrade to install a replacement for the app?

Will the file have a notification after upgrade to install a replacement for the app? NeedsNotifyPostUpgradeData Should a notification be shown for this file after upgrade?

Should a notification be shown for this file after upgrade? NeedsReinstallPostUpgradeData Will the file have a notification after upgrade to reinstall the app?

Will the file have a notification after upgrade to reinstall the app? SdbReinstallUpgrade The file is tagged as needing to be reinstalled after upgrade in the compatibility database (but is not blocking upgrade).

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPostUpgradeRemove

This event indicates that the DecisionMatchingInfoPostUpgrade object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMatchingInfoPostUpgradeStartSync

This event indicates that a new set of DecisionMatchingInfoPostUpgradeAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMediaCenterAdd

This event sends decision data about the presence of Windows Media Center, to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file generating the events.

The version of the Appraiser file generating the events. BlockingApplication Is there any application issues that interfere with upgrade due to Windows Media Center?

Is there any application issues that interfere with upgrade due to Windows Media Center? MediaCenterActivelyUsed If Windows Media Center is supported on the edition, has it been run at least once and are the MediaCenterIndicators are true?

If Windows Media Center is supported on the edition, has it been run at least once and are the MediaCenterIndicators are true? MediaCenterIndicators Do any indicators imply that Windows Media Center is in active use?

Do any indicators imply that Windows Media Center is in active use? MediaCenterInUse Is Windows Media Center actively being used?

Is Windows Media Center actively being used? MediaCenterPaidOrActivelyUsed Is Windows Media Center actively being used or is it running on a supported edition?

Is Windows Media Center actively being used or is it running on a supported edition? NeedsDismissAction Are there any actions that can be dismissed coming from Windows Media Center?

Microsoft.Windows.Appraiser.General.DecisionMediaCenterRemove

This event indicates that the DecisionMediaCenter object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionMediaCenterStartSync

This event indicates that a new set of DecisionMediaCenterAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionSystemBiosAdd

This event sends compatibility decision data about the BIOS to help keep Windows up to date.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file generating the events.

The version of the Appraiser file generating the events. Blocking Is the device blocked from upgrade due to a BIOS block?

Is the device blocked from upgrade due to a BIOS block? DisplayGenericMessageGated Indicates whether a generic offer block message will be shown for the bios.

Indicates whether a generic offer block message will be shown for the bios. HasBiosBlock Does the device have a BIOS block?

Microsoft.Windows.Appraiser.General.DecisionSystemBiosRemove

This event indicates that the DecisionSystemBios object is no longer present.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.DecisionSystemBiosStartSync

This event indicates that a new set of DecisionSystemBiosAdd events will be sent.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file that is generating the events.

Microsoft.Windows.Appraiser.General.GatedRegChange

This event sends data about the results of running a set of quick-blocking instructions, to help keep Windows up to date.

The following fields are available:

NewData The data in the registry value after the scan completed.

The data in the registry value after the scan completed. OldData The previous data in the registry value before the scan ran.

The previous data in the registry value before the scan ran. PCFP An ID for the system calculated by hashing hardware identifiers.

An ID for the system calculated by hashing hardware identifiers. RegKey The registry key name for which a result is being sent.

The registry key name for which a result is being sent. RegValue The registry value for which a result is being sent.

The registry value for which a result is being sent. Time The client time of the event.

Microsoft.Windows.Appraiser.General.InventoryApplicationFileAdd

This event represents the basic metadata about a file on the system. The file must be part of an app and either have a block in the compatibility database or be part of an antivirus program.

This event includes fields from Ms.Device.DeviceInventoryChange.

The following fields are available:

AppraiserVersion The version of the Appraiser file generating the events.

The version of the Appraiser file generating the events. AvDisplayName If the app is an antivirus app, this is its display name.

If the app is an antivirus app, this is its display name. AvProductState Indicates whether the antivirus program is turned on and the signatures are up to date.

Indicates whether the antivirus program is turned on and the signatures are up to date. BinaryType A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64.

A binary type. Example: UNINITIALIZED, ZERO_BYTE, DATA_ONLY, DOS_MODULE, NE16_MODULE, PE32_UNKNOWN, PE32_I386, PE32_ARM, PE64_UNKNOWN, PE64_AMD64, PE64_ARM64, PE64_IA64, PE32_CLR_32, PE32_CLR_IL, PE32_CLR_IL_PREFER32, PE64_CLR_64. BinFileVersion An attempt to clean up FileVersion at the client that tries to place the version into 4 octets.

An attempt to clean up FileVersion at the client that tries to place the version into 4 octets. BinProductVersion An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets.

An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets. BoeProgramId If there is no entry in Add/Remove Programs, this is the ProgramID that is generated from the file metadata.

If there is no entry in Add/Remove Programs, this is the ProgramID that is generated from the file metadata. CompanyName The company name of the vendor who developed this file.

The company name of the vendor who developed this file. FileId A hash that uniquely identifies a file.

A hash that uniquely identifies a file. FileVersion The File version field from the file metadata under Properties -> Details.

The File version field from the file metadata under Properties -> Details. HasUpgradeExe Indicates whether the antivirus app has an upgrade.exe file.

Indicates whether the antivirus app has an upgrade.exe file. IsAv Indicates whether the file an antivirus reporting EXE.

Indicates whether the file an antivirus reporting EXE. LinkDate The date and time that this file was linked on.

The date and time that this file was linked on. LowerCaseLongPath The full file path to the file that was inventoried on the device.

The full file path to the file that was inventoried on the device. Name The name of the file that was inventoried.

The name of the file that was inventoried. ProductName The Product name field from the file metadata under Properties -> Details.

The Product name field from the file metadata under Properties -> Details. ProductVersion The Product version field from the file metadata under Properties -> Details.

The Product version field from the file metadata under Properties -> Details. ProgramId A hash of the Name, Version, Publisher, and Language of an application used to identify it.

A hash of the Name, Version, Publisher, and Language of an application used to identify it. Size The size of the file (in hexadecimal bytes).

Microsoft.Windows.Appraiser.General.InventoryApplicationFileRemove

This event indicates that the InventoryApplicationFile object is no longer present.

This event includes fields from Ms.Device.Devic