ホーム › System.Diagnostics.Etw › 定数
定数
496Windows.Win32.System.Diagnostics.Etw
| 名前 | 型 | 値 |
|---|---|---|
| ALPCGuid | GUID | — |
| DiskIoGuid | GUID | — |
| EventTraceConfigGuid | GUID | — |
| FileIoGuid | GUID | — |
| ImageLoadGuid | GUID | — |
| PageFaultGuid | GUID | — |
| PerfInfoGuid | GUID | — |
| ProcessGuid | GUID | — |
| RegistryGuid | GUID | — |
| SplitIoGuid | GUID | — |
| TcpIpGuid | GUID | — |
| ThreadGuid | GUID | — |
| UdpIpGuid | GUID | — |
| WNODE_FLAG_ALL_DATA | DWORD | 1 |
| WNODE_FLAG_SINGLE_INSTANCE | DWORD | 2 |
| WNODE_FLAG_SINGLE_ITEM | DWORD | 4 |
| WNODE_FLAG_EVENT_ITEM | DWORD | 8 |
| WNODE_FLAG_FIXED_INSTANCE_SIZE | DWORD | 16 |
| WNODE_FLAG_TOO_SMALL | DWORD | 32 |
| WNODE_FLAG_INSTANCES_SAME | DWORD | 64 |
| WNODE_FLAG_STATIC_INSTANCE_NAMES | DWORD | 128 |
| WNODE_FLAG_INTERNAL | DWORD | 256 |
| WNODE_FLAG_USE_TIMESTAMP | DWORD | 512 |
| WNODE_FLAG_PERSIST_EVENT | DWORD | 1024 |
| WNODE_FLAG_EVENT_REFERENCE | DWORD | 8192 |
| WNODE_FLAG_ANSI_INSTANCENAMES | DWORD | 16384 |
| WNODE_FLAG_METHOD_ITEM | DWORD | 32768 |
| WNODE_FLAG_PDO_INSTANCE_NAMES | DWORD | 65536 |
| WNODE_FLAG_TRACED_GUID | DWORD | 131072 |
| WNODE_FLAG_LOG_WNODE | DWORD | 262144 |
| WNODE_FLAG_USE_GUID_PTR | DWORD | 524288 |
| WNODE_FLAG_USE_MOF_PTR | DWORD | 1048576 |
| WNODE_FLAG_NO_HEADER | DWORD | 2097152 |
| WNODE_FLAG_SEND_DATA_BLOCK | DWORD | 4194304 |
| WNODE_FLAG_VERSIONED_PROPERTIES | DWORD | 8388608 |
| WNODE_FLAG_SEVERITY_MASK | DWORD | 4278190080 |
| WMIREG_FLAG_EXPENSIVE | DWORD | 1 |
| WMIREG_FLAG_INSTANCE_LIST | DWORD | 4 |
| WMIREG_FLAG_INSTANCE_BASENAME | DWORD | 8 |
| WMIREG_FLAG_INSTANCE_PDO | DWORD | 32 |
| WMIREG_FLAG_REMOVE_GUID | DWORD | 65536 |
| WMIREG_FLAG_RESERVED1 | DWORD | 131072 |
| WMIREG_FLAG_RESERVED2 | DWORD | 262144 |
| WMIREG_FLAG_TRACED_GUID | DWORD | 524288 |
| WMIREG_FLAG_TRACE_CONTROL_GUID | DWORD | 4096 |
| WMIREG_FLAG_EVENT_ONLY_GUID | DWORD | 64 |
| WMI_GUIDTYPE_TRACECONTROL | DWORD | 0 |
| WMI_GUIDTYPE_TRACE | DWORD | 1 |
| WMI_GUIDTYPE_DATA | DWORD | 2 |
| WMI_GUIDTYPE_EVENT | DWORD | 3 |
| WMIGUID_QUERY | DWORD | 1 |
| WMIGUID_SET | DWORD | 2 |
| WMIGUID_NOTIFICATION | DWORD | 4 |
| WMIGUID_READ_DESCRIPTION | DWORD | 8 |
| WMIGUID_EXECUTE | DWORD | 16 |
| TRACELOG_CREATE_REALTIME | DWORD | 32 |
| TRACELOG_CREATE_ONDISK | DWORD | 64 |
| TRACELOG_GUID_ENABLE | DWORD | 128 |
| TRACELOG_ACCESS_KERNEL_LOGGER | DWORD | 256 |
| TRACELOG_LOG_EVENT | DWORD | 512 |
| TRACELOG_CREATE_INPROC | DWORD | 512 |
| TRACELOG_ACCESS_REALTIME | DWORD | 1024 |
| TRACELOG_REGISTER_GUIDS | DWORD | 2048 |
| TRACELOG_JOIN_GROUP | DWORD | 4096 |
| WMI_GLOBAL_LOGGER_ID | DWORD | 1 |
| MAX_PAYLOAD_PREDICATES | DWORD | 8 |
| EventTraceGuid | GUID | — |
| SystemTraceControlGuid | GUID | — |
| DefaultTraceSecurityGuid | GUID | — |
| PrivateLoggerNotificationGuid | GUID | — |
| SystemIoFilterProviderGuid | GUID | — |
| SystemObjectProviderGuid | GUID | — |
| SystemPowerProviderGuid | GUID | — |
| SystemHypervisorProviderGuid | GUID | — |
| SystemLockProviderGuid | GUID | — |
| SystemConfigProviderGuid | GUID | — |
| SystemCpuProviderGuid | GUID | — |
| SystemSchedulerProviderGuid | GUID | — |
| SystemProfileProviderGuid | GUID | — |
| SystemIoProviderGuid | GUID | — |
| SystemMemoryProviderGuid | GUID | — |
| SystemRegistryProviderGuid | GUID | — |
| SystemProcessProviderGuid | GUID | — |
| SystemAlpcProviderGuid | GUID | — |
| SystemSyscallProviderGuid | GUID | — |
| SystemInterruptProviderGuid | GUID | — |
| SystemTimerProviderGuid | GUID | — |
| LastBranchRecordProviderGuid | GUID | — |
| KERNEL_LOGGER_NAMEW | unknown | NT Kernel Logger |
| GLOBAL_LOGGER_NAMEW | unknown | GlobalLogger |
| EVENT_LOGGER_NAMEW | unknown | EventLog |
| DIAG_LOGGER_NAMEW | unknown | DiagLog |
| KERNEL_LOGGER_NAMEA | unknown | NT Kernel Logger |
| GLOBAL_LOGGER_NAMEA | unknown | GlobalLogger |
| EVENT_LOGGER_NAMEA | unknown | EventLog |
| DIAG_LOGGER_NAMEA | unknown | DiagLog |
| MAX_MOF_FIELDS | DWORD | 16 |
| SYSTEM_EVENT_TYPE | DWORD | 1 |
| EVENT_TRACE_TYPE_INFO | DWORD | 0 |
| EVENT_TRACE_TYPE_START | DWORD | 1 |
| EVENT_TRACE_TYPE_END | DWORD | 2 |
| EVENT_TRACE_TYPE_STOP | DWORD | 2 |
| EVENT_TRACE_TYPE_DC_START | DWORD | 3 |
| EVENT_TRACE_TYPE_DC_END | DWORD | 4 |
| EVENT_TRACE_TYPE_EXTENSION | DWORD | 5 |
| EVENT_TRACE_TYPE_REPLY | DWORD | 6 |
| EVENT_TRACE_TYPE_DEQUEUE | DWORD | 7 |
| EVENT_TRACE_TYPE_RESUME | DWORD | 7 |
| EVENT_TRACE_TYPE_CHECKPOINT | DWORD | 8 |
| EVENT_TRACE_TYPE_SUSPEND | DWORD | 8 |
| EVENT_TRACE_TYPE_WINEVT_SEND | DWORD | 9 |
| EVENT_TRACE_TYPE_WINEVT_RECEIVE | DWORD | 240 |
| TRACE_LEVEL_NONE | DWORD | 0 |
| TRACE_LEVEL_CRITICAL | DWORD | 1 |
| TRACE_LEVEL_FATAL | DWORD | 1 |
| TRACE_LEVEL_ERROR | DWORD | 2 |
| TRACE_LEVEL_WARNING | DWORD | 3 |
| TRACE_LEVEL_INFORMATION | DWORD | 4 |
| TRACE_LEVEL_VERBOSE | DWORD | 5 |
| TRACE_LEVEL_RESERVED6 | DWORD | 6 |
| TRACE_LEVEL_RESERVED7 | DWORD | 7 |
| TRACE_LEVEL_RESERVED8 | DWORD | 8 |
| TRACE_LEVEL_RESERVED9 | DWORD | 9 |
| EVENT_TRACE_TYPE_LOAD | DWORD | 10 |
| EVENT_TRACE_TYPE_TERMINATE | DWORD | 11 |
| EVENT_TRACE_TYPE_IO_READ | DWORD | 10 |
| EVENT_TRACE_TYPE_IO_WRITE | DWORD | 11 |
| EVENT_TRACE_TYPE_IO_READ_INIT | DWORD | 12 |
| EVENT_TRACE_TYPE_IO_WRITE_INIT | DWORD | 13 |
| EVENT_TRACE_TYPE_IO_FLUSH | DWORD | 14 |
| EVENT_TRACE_TYPE_IO_FLUSH_INIT | DWORD | 15 |
| EVENT_TRACE_TYPE_IO_REDIRECTED_INIT | DWORD | 16 |
| EVENT_TRACE_TYPE_MM_TF | DWORD | 10 |
| EVENT_TRACE_TYPE_MM_DZF | DWORD | 11 |
| EVENT_TRACE_TYPE_MM_COW | DWORD | 12 |
| EVENT_TRACE_TYPE_MM_GPF | DWORD | 13 |
| EVENT_TRACE_TYPE_MM_HPF | DWORD | 14 |
| EVENT_TRACE_TYPE_MM_AV | DWORD | 15 |
| EVENT_TRACE_TYPE_SEND | DWORD | 10 |
| EVENT_TRACE_TYPE_RECEIVE | DWORD | 11 |
| EVENT_TRACE_TYPE_CONNECT | DWORD | 12 |
| EVENT_TRACE_TYPE_DISCONNECT | DWORD | 13 |
| EVENT_TRACE_TYPE_RETRANSMIT | DWORD | 14 |
| EVENT_TRACE_TYPE_ACCEPT | DWORD | 15 |
| EVENT_TRACE_TYPE_RECONNECT | DWORD | 16 |
| EVENT_TRACE_TYPE_CONNFAIL | DWORD | 17 |
| EVENT_TRACE_TYPE_COPY_TCP | DWORD | 18 |
| EVENT_TRACE_TYPE_COPY_ARP | DWORD | 19 |
| EVENT_TRACE_TYPE_ACKFULL | DWORD | 20 |
| EVENT_TRACE_TYPE_ACKPART | DWORD | 21 |
| EVENT_TRACE_TYPE_ACKDUP | DWORD | 22 |
| EVENT_TRACE_TYPE_GUIDMAP | DWORD | 10 |
| EVENT_TRACE_TYPE_CONFIG | DWORD | 11 |
| EVENT_TRACE_TYPE_SIDINFO | DWORD | 12 |
| EVENT_TRACE_TYPE_SECURITY | DWORD | 13 |
| EVENT_TRACE_TYPE_DBGID_RSDS | DWORD | 64 |
| EVENT_TRACE_TYPE_REGCREATE | DWORD | 10 |
| EVENT_TRACE_TYPE_REGOPEN | DWORD | 11 |
| EVENT_TRACE_TYPE_REGDELETE | DWORD | 12 |
| EVENT_TRACE_TYPE_REGQUERY | DWORD | 13 |
| EVENT_TRACE_TYPE_REGSETVALUE | DWORD | 14 |
| EVENT_TRACE_TYPE_REGDELETEVALUE | DWORD | 15 |
| EVENT_TRACE_TYPE_REGQUERYVALUE | DWORD | 16 |
| EVENT_TRACE_TYPE_REGENUMERATEKEY | DWORD | 17 |
| EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY | DWORD | 18 |
| EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE | DWORD | 19 |
| EVENT_TRACE_TYPE_REGSETINFORMATION | DWORD | 20 |
| EVENT_TRACE_TYPE_REGFLUSH | DWORD | 21 |
| EVENT_TRACE_TYPE_REGKCBCREATE | DWORD | 22 |
| EVENT_TRACE_TYPE_REGKCBDELETE | DWORD | 23 |
| EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN | DWORD | 24 |
| EVENT_TRACE_TYPE_REGKCBRUNDOWNEND | DWORD | 25 |
| EVENT_TRACE_TYPE_REGVIRTUALIZE | DWORD | 26 |
| EVENT_TRACE_TYPE_REGCLOSE | DWORD | 27 |
| EVENT_TRACE_TYPE_REGSETSECURITY | DWORD | 28 |
| EVENT_TRACE_TYPE_REGQUERYSECURITY | DWORD | 29 |
| EVENT_TRACE_TYPE_REGCOMMIT | DWORD | 30 |
| EVENT_TRACE_TYPE_REGPREPARE | DWORD | 31 |
| EVENT_TRACE_TYPE_REGROLLBACK | DWORD | 32 |
| EVENT_TRACE_TYPE_REGMOUNTHIVE | DWORD | 33 |
| EVENT_TRACE_TYPE_CONFIG_CPU | DWORD | 10 |
| EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK | DWORD | 11 |
| EVENT_TRACE_TYPE_CONFIG_LOGICALDISK | DWORD | 12 |
| EVENT_TRACE_TYPE_CONFIG_NIC | DWORD | 13 |
| EVENT_TRACE_TYPE_CONFIG_VIDEO | DWORD | 14 |
| EVENT_TRACE_TYPE_CONFIG_SERVICES | DWORD | 15 |
| EVENT_TRACE_TYPE_CONFIG_POWER | DWORD | 16 |
| EVENT_TRACE_TYPE_CONFIG_NETINFO | DWORD | 17 |
| EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA | DWORD | 18 |
| EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX | DWORD | 19 |
| EVENT_TRACE_TYPE_CONFIG_IRQ | DWORD | 21 |
| EVENT_TRACE_TYPE_CONFIG_PNP | DWORD | 22 |
| EVENT_TRACE_TYPE_CONFIG_IDECHANNEL | DWORD | 23 |
| EVENT_TRACE_TYPE_CONFIG_NUMANODE | DWORD | 24 |
| EVENT_TRACE_TYPE_CONFIG_PLATFORM | DWORD | 25 |
| EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP | DWORD | 26 |
| EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER | DWORD | 27 |
| EVENT_TRACE_TYPE_CONFIG_DPI | DWORD | 28 |
| EVENT_TRACE_TYPE_CONFIG_CI_INFO | DWORD | 29 |
| EVENT_TRACE_TYPE_CONFIG_MACHINEID | DWORD | 30 |
| EVENT_TRACE_TYPE_CONFIG_DEFRAG | DWORD | 31 |
| EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM | DWORD | 32 |
| EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY | DWORD | 33 |
| EVENT_TRACE_TYPE_CONFIG_FLIGHTID | DWORD | 34 |
| EVENT_TRACE_TYPE_CONFIG_PROCESSOR | DWORD | 35 |
| EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION | DWORD | 36 |
| EVENT_TRACE_TYPE_CONFIG_BOOT | DWORD | 37 |
| EVENT_TRACE_TYPE_OPTICAL_IO_READ | DWORD | 55 |
| EVENT_TRACE_TYPE_OPTICAL_IO_WRITE | DWORD | 56 |
| EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH | DWORD | 57 |
| EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT | DWORD | 58 |
| EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT | DWORD | 59 |
| EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT | DWORD | 60 |
| EVENT_TRACE_TYPE_FLT_PREOP_INIT | DWORD | 96 |
| EVENT_TRACE_TYPE_FLT_POSTOP_INIT | DWORD | 97 |
| EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION | DWORD | 98 |
| EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION | DWORD | 99 |
| EVENT_TRACE_TYPE_FLT_PREOP_FAILURE | DWORD | 100 |
| EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE | DWORD | 101 |
| EVENT_TRACE_FLAG_DEBUG_EVENTS | DWORD | 4194304 |
| EVENT_TRACE_FLAG_EXTENSION | DWORD | 2147483648 |
| EVENT_TRACE_FLAG_FORWARD_WMI | DWORD | 1073741824 |
| EVENT_TRACE_FLAG_ENABLE_RESERVE | DWORD | 536870912 |
| EVENT_TRACE_FILE_MODE_NONE | DWORD | 0 |
| EVENT_TRACE_FILE_MODE_SEQUENTIAL | DWORD | 1 |
| EVENT_TRACE_FILE_MODE_CIRCULAR | DWORD | 2 |
| EVENT_TRACE_FILE_MODE_APPEND | DWORD | 4 |
| EVENT_TRACE_REAL_TIME_MODE | DWORD | 256 |
| EVENT_TRACE_DELAY_OPEN_FILE_MODE | DWORD | 512 |
| EVENT_TRACE_BUFFERING_MODE | DWORD | 1024 |
| EVENT_TRACE_PRIVATE_LOGGER_MODE | DWORD | 2048 |
| EVENT_TRACE_ADD_HEADER_MODE | DWORD | 4096 |
| EVENT_TRACE_USE_GLOBAL_SEQUENCE | DWORD | 16384 |
| EVENT_TRACE_USE_LOCAL_SEQUENCE | DWORD | 32768 |
| EVENT_TRACE_RELOG_MODE | DWORD | 65536 |
| EVENT_TRACE_USE_PAGED_MEMORY | DWORD | 16777216 |
| EVENT_TRACE_FILE_MODE_NEWFILE | DWORD | 8 |
| EVENT_TRACE_FILE_MODE_PREALLOCATE | DWORD | 32 |
| EVENT_TRACE_NONSTOPPABLE_MODE | DWORD | 64 |
| EVENT_TRACE_SECURE_MODE | DWORD | 128 |
| EVENT_TRACE_USE_KBYTES_FOR_SIZE | DWORD | 8192 |
| EVENT_TRACE_PRIVATE_IN_PROC | DWORD | 131072 |
| EVENT_TRACE_MODE_RESERVED | DWORD | 1048576 |
| EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING | DWORD | 268435456 |
| EVENT_TRACE_SYSTEM_LOGGER_MODE | DWORD | 33554432 |
| EVENT_TRACE_ADDTO_TRIAGE_DUMP | DWORD | 2147483648 |
| EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN | DWORD | 4194304 |
| EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN | DWORD | 8388608 |
| EVENT_TRACE_INDEPENDENT_SESSION_MODE | DWORD | 134217728 |
| EVENT_TRACE_COMPRESSED_MODE | DWORD | 67108864 |
| EVENT_TRACE_CONTROL_INCREMENT_FILE | DWORD | 4 |
| EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME | DWORD | 5 |
| TRACE_MESSAGE_PERFORMANCE_TIMESTAMP | DWORD | 16 |
| TRACE_MESSAGE_POINTER32 | DWORD | 64 |
| TRACE_MESSAGE_POINTER64 | DWORD | 128 |
| TRACE_MESSAGE_FLAG_MASK | DWORD | 65535 |
| EVENT_TRACE_USE_PROCTIME | DWORD | 1 |
| EVENT_TRACE_USE_NOCPUTIME | DWORD | 2 |
| TRACE_HEADER_FLAG_USE_TIMESTAMP | DWORD | 512 |
| TRACE_HEADER_FLAG_TRACED_GUID | DWORD | 131072 |
| TRACE_HEADER_FLAG_LOG_WNODE | DWORD | 262144 |
| TRACE_HEADER_FLAG_USE_GUID_PTR | DWORD | 524288 |
| TRACE_HEADER_FLAG_USE_MOF_PTR | DWORD | 1048576 |
| SYSTEM_ALPC_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_CONFIG_KW_SYSTEM | ULONGLONG | 1 |
| SYSTEM_CONFIG_KW_GRAPHICS | ULONGLONG | 2 |
| SYSTEM_CONFIG_KW_STORAGE | ULONGLONG | 4 |
| SYSTEM_CONFIG_KW_NETWORK | ULONGLONG | 8 |
| SYSTEM_CONFIG_KW_SERVICES | ULONGLONG | 16 |
| SYSTEM_CONFIG_KW_PNP | ULONGLONG | 32 |
| SYSTEM_CONFIG_KW_OPTICAL | ULONGLONG | 64 |
| SYSTEM_CPU_KW_CONFIG | ULONGLONG | 1 |
| SYSTEM_CPU_KW_CACHE_FLUSH | ULONGLONG | 2 |
| SYSTEM_CPU_KW_SPEC_CONTROL | ULONGLONG | 4 |
| SYSTEM_CPU_KW_DOMAIN_CHANGE | ULONGLONG | 8 |
| SYSTEM_HYPERVISOR_KW_PROFILE | ULONGLONG | 1 |
| SYSTEM_HYPERVISOR_KW_CALLOUTS | ULONGLONG | 2 |
| SYSTEM_HYPERVISOR_KW_VTL_CHANGE | ULONGLONG | 4 |
| SYSTEM_INTERRUPT_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT | ULONGLONG | 2 |
| SYSTEM_INTERRUPT_KW_DPC | ULONGLONG | 4 |
| SYSTEM_INTERRUPT_KW_DPC_QUEUE | ULONGLONG | 8 |
| SYSTEM_INTERRUPT_KW_WDF_DPC | ULONGLONG | 16 |
| SYSTEM_INTERRUPT_KW_WDF_INTERRUPT | ULONGLONG | 32 |
| SYSTEM_INTERRUPT_KW_IPI | ULONGLONG | 64 |
| SYSTEM_IO_KW_DISK | ULONGLONG | 1 |
| SYSTEM_IO_KW_DISK_INIT | ULONGLONG | 2 |
| SYSTEM_IO_KW_FILENAME | ULONGLONG | 4 |
| SYSTEM_IO_KW_SPLIT | ULONGLONG | 8 |
| SYSTEM_IO_KW_FILE | ULONGLONG | 16 |
| SYSTEM_IO_KW_OPTICAL | ULONGLONG | 32 |
| SYSTEM_IO_KW_OPTICAL_INIT | ULONGLONG | 64 |
| SYSTEM_IO_KW_DRIVERS | ULONGLONG | 128 |
| SYSTEM_IO_KW_CC | ULONGLONG | 256 |
| SYSTEM_IO_KW_NETWORK | ULONGLONG | 512 |
| SYSTEM_IO_KW_FILE_INIT | ULONGLONG | 1024 |
| SYSTEM_IO_KW_TIMER | ULONGLONG | 2048 |
| SYSTEM_IOFILTER_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_IOFILTER_KW_INIT | ULONGLONG | 2 |
| SYSTEM_IOFILTER_KW_FASTIO | ULONGLONG | 4 |
| SYSTEM_IOFILTER_KW_FAILURE | ULONGLONG | 8 |
| SYSTEM_LOCK_KW_SPINLOCK | ULONGLONG | 1 |
| SYSTEM_LOCK_KW_SPINLOCK_COUNTERS | ULONGLONG | 2 |
| SYSTEM_LOCK_KW_SYNC_OBJECTS | ULONGLONG | 4 |
| SYSTEM_MEMORY_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_MEMORY_KW_HARD_FAULTS | ULONGLONG | 2 |
| SYSTEM_MEMORY_KW_ALL_FAULTS | ULONGLONG | 4 |
| SYSTEM_MEMORY_KW_POOL | ULONGLONG | 8 |
| SYSTEM_MEMORY_KW_MEMINFO | ULONGLONG | 16 |
| SYSTEM_MEMORY_KW_PFSECTION | ULONGLONG | 32 |
| SYSTEM_MEMORY_KW_MEMINFO_WS | ULONGLONG | 64 |
| SYSTEM_MEMORY_KW_HEAP | ULONGLONG | 128 |
| SYSTEM_MEMORY_KW_WS | ULONGLONG | 256 |
| SYSTEM_MEMORY_KW_CONTMEM_GEN | ULONGLONG | 512 |
| SYSTEM_MEMORY_KW_VIRTUAL_ALLOC | ULONGLONG | 1024 |
| SYSTEM_MEMORY_KW_FOOTPRINT | ULONGLONG | 2048 |
| SYSTEM_MEMORY_KW_SESSION | ULONGLONG | 4096 |
| SYSTEM_MEMORY_KW_REFSET | ULONGLONG | 8192 |
| SYSTEM_MEMORY_KW_VAMAP | ULONGLONG | 16384 |
| SYSTEM_MEMORY_KW_NONTRADEABLE | ULONGLONG | 32768 |
| SYSTEM_OBJECT_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_OBJECT_KW_HANDLE | ULONGLONG | 2 |
| SYSTEM_POWER_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_POWER_KW_HIBER_RUNDOWN | ULONGLONG | 2 |
| SYSTEM_POWER_KW_PROCESSOR_IDLE | ULONGLONG | 4 |
| SYSTEM_POWER_KW_IDLE_SELECTION | ULONGLONG | 8 |
| SYSTEM_POWER_KW_PPM_EXIT_LATENCY | ULONGLONG | 16 |
| SYSTEM_PROCESS_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_PROCESS_KW_INSWAP | ULONGLONG | 2 |
| SYSTEM_PROCESS_KW_FREEZE | ULONGLONG | 4 |
| SYSTEM_PROCESS_KW_PERF_COUNTER | ULONGLONG | 8 |
| SYSTEM_PROCESS_KW_WAKE_COUNTER | ULONGLONG | 16 |
| SYSTEM_PROCESS_KW_WAKE_DROP | ULONGLONG | 32 |
| SYSTEM_PROCESS_KW_WAKE_EVENT | ULONGLONG | 64 |
| SYSTEM_PROCESS_KW_DEBUG_EVENTS | ULONGLONG | 128 |
| SYSTEM_PROCESS_KW_DBGPRINT | ULONGLONG | 256 |
| SYSTEM_PROCESS_KW_JOB | ULONGLONG | 512 |
| SYSTEM_PROCESS_KW_WORKER_THREAD | ULONGLONG | 1024 |
| SYSTEM_PROCESS_KW_THREAD | ULONGLONG | 2048 |
| SYSTEM_PROCESS_KW_LOADER | ULONGLONG | 4096 |
| SYSTEM_PROFILE_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_PROFILE_KW_PMC_PROFILE | ULONGLONG | 2 |
| SYSTEM_REGISTRY_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_REGISTRY_KW_HIVE | ULONGLONG | 2 |
| SYSTEM_REGISTRY_KW_NOTIFICATION | ULONGLONG | 4 |
| SYSTEM_SCHEDULER_KW_XSCHEDULER | ULONGLONG | 1 |
| SYSTEM_SCHEDULER_KW_DISPATCHER | ULONGLONG | 2 |
| SYSTEM_SCHEDULER_KW_KERNEL_QUEUE | ULONGLONG | 4 |
| SYSTEM_SCHEDULER_KW_SHOULD_YIELD | ULONGLONG | 8 |
| SYSTEM_SCHEDULER_KW_ANTI_STARVATION | ULONGLONG | 16 |
| SYSTEM_SCHEDULER_KW_LOAD_BALANCER | ULONGLONG | 32 |
| SYSTEM_SCHEDULER_KW_AFFINITY | ULONGLONG | 64 |
| SYSTEM_SCHEDULER_KW_PRIORITY | ULONGLONG | 128 |
| SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR | ULONGLONG | 256 |
| SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH | ULONGLONG | 512 |
| SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH | ULONGLONG | 1024 |
| SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD | ULONGLONG | 2048 |
| SYSTEM_SCHEDULER_KW_READY_QUEUE | ULONGLONG | 4096 |
| SYSTEM_SCHEDULER_KW_CPU_PARTITION | ULONGLONG | 8192 |
| SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ | ULONGLONG | 16384 |
| SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE | ULONGLONG | 32768 |
| SYSTEM_SCHEDULER_KW_AUTOBOOST | ULONGLONG | 65536 |
| SYSTEM_SYSCALL_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_TIMER_KW_GENERAL | ULONGLONG | 1 |
| SYSTEM_TIMER_KW_CLOCK_TIMER | ULONGLONG | 2 |
| SYSTEM_MEMORY_POOL_FILTER_ID | DWORD | 1 |
| _typedef_TRACELOGGER_HANDLE | DWORD | 1 |
| ETW_NULL_TYPE_VALUE | DWORD | 0 |
| ETW_OBJECT_TYPE_VALUE | DWORD | 1 |
| ETW_STRING_TYPE_VALUE | DWORD | 2 |
| ETW_SBYTE_TYPE_VALUE | DWORD | 3 |
| ETW_BYTE_TYPE_VALUE | DWORD | 4 |
| ETW_INT16_TYPE_VALUE | DWORD | 5 |
| ETW_UINT16_TYPE_VALUE | DWORD | 6 |
| ETW_INT32_TYPE_VALUE | DWORD | 7 |
| ETW_UINT32_TYPE_VALUE | DWORD | 8 |
| ETW_INT64_TYPE_VALUE | DWORD | 9 |
| ETW_UINT64_TYPE_VALUE | DWORD | 10 |
| ETW_CHAR_TYPE_VALUE | DWORD | 11 |
| ETW_SINGLE_TYPE_VALUE | DWORD | 12 |
| ETW_DOUBLE_TYPE_VALUE | DWORD | 13 |
| ETW_BOOLEAN_TYPE_VALUE | DWORD | 14 |
| ETW_DECIMAL_TYPE_VALUE | DWORD | 15 |
| ETW_GUID_TYPE_VALUE | DWORD | 101 |
| ETW_ASCIICHAR_TYPE_VALUE | DWORD | 102 |
| ETW_ASCIISTRING_TYPE_VALUE | DWORD | 103 |
| ETW_COUNTED_STRING_TYPE_VALUE | DWORD | 104 |
| ETW_POINTER_TYPE_VALUE | DWORD | 105 |
| ETW_SIZET_TYPE_VALUE | DWORD | 106 |
| ETW_HIDDEN_TYPE_VALUE | DWORD | 107 |
| ETW_BOOL_TYPE_VALUE | DWORD | 108 |
| ETW_COUNTED_ANSISTRING_TYPE_VALUE | DWORD | 109 |
| ETW_REVERSED_COUNTED_STRING_TYPE_VALUE | DWORD | 110 |
| ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE | DWORD | 111 |
| ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE | DWORD | 112 |
| ETW_REDUCED_ANSISTRING_TYPE_VALUE | DWORD | 113 |
| ETW_REDUCED_STRING_TYPE_VALUE | DWORD | 114 |
| ETW_SID_TYPE_VALUE | DWORD | 115 |
| ETW_VARIANT_TYPE_VALUE | DWORD | 116 |
| ETW_PTVECTOR_TYPE_VALUE | DWORD | 117 |
| ETW_WMITIME_TYPE_VALUE | DWORD | 118 |
| ETW_DATETIME_TYPE_VALUE | DWORD | 119 |
| ETW_REFRENCE_TYPE_VALUE | DWORD | 120 |
| TRACE_PROVIDER_FLAG_LEGACY | DWORD | 1 |
| TRACE_PROVIDER_FLAG_PRE_ENABLE | DWORD | 2 |
| TRACE_LBR_EVENT_OPCODE | DWORD | 32 |
| TRACE_LBR_MAXIMUM_EVENTS | DWORD | 4 |
| KERNEL_LOGGER_NAME | unknown | NT Kernel Logger |
| GLOBAL_LOGGER_NAME | unknown | GlobalLogger |
| EVENT_LOGGER_NAME | unknown | EventLog |
| ENABLE_TRACE_PARAMETERS_VERSION | DWORD | 1 |
| ENABLE_TRACE_PARAMETERS_VERSION_2 | DWORD | 2 |
| EVENT_MIN_LEVEL | DWORD | 0 |
| EVENT_MAX_LEVEL | DWORD | 255 |
| EVENT_ACTIVITY_CTRL_GET_ID | DWORD | 1 |
| EVENT_ACTIVITY_CTRL_SET_ID | DWORD | 2 |
| EVENT_ACTIVITY_CTRL_CREATE_ID | DWORD | 3 |
| EVENT_ACTIVITY_CTRL_GET_SET_ID | DWORD | 4 |
| EVENT_ACTIVITY_CTRL_CREATE_SET_ID | DWORD | 5 |
| MAX_EVENT_DATA_DESCRIPTORS | DWORD | 128 |
| MAX_EVENT_FILTER_DATA_SIZE | DWORD | 1024 |
| MAX_EVENT_FILTER_PAYLOAD_SIZE | DWORD | 4096 |
| MAX_EVENT_FILTER_EVENT_NAME_SIZE | DWORD | 4096 |
| MAX_EVENT_FILTERS_COUNT | DWORD | 13 |
| MAX_EVENT_FILTER_PID_COUNT | DWORD | 8 |
| MAX_EVENT_FILTER_EVENT_ID_COUNT | DWORD | 64 |
| EVENT_FILTER_TYPE_NONE | DWORD | 0 |
| EVENT_FILTER_TYPE_SCHEMATIZED | DWORD | 2147483648 |
| EVENT_FILTER_TYPE_SYSTEM_FLAGS | DWORD | 2147483649 |
| EVENT_FILTER_TYPE_TRACEHANDLE | DWORD | 2147483650 |
| EVENT_FILTER_TYPE_PID | DWORD | 2147483652 |
| EVENT_FILTER_TYPE_EXECUTABLE_NAME | DWORD | 2147483656 |
| EVENT_FILTER_TYPE_PACKAGE_ID | DWORD | 2147483664 |
| EVENT_FILTER_TYPE_PACKAGE_APP_ID | DWORD | 2147483680 |
| EVENT_FILTER_TYPE_PAYLOAD | DWORD | 2147483904 |
| EVENT_FILTER_TYPE_EVENT_ID | DWORD | 2147484160 |
| EVENT_FILTER_TYPE_EVENT_NAME | DWORD | 2147484672 |
| EVENT_FILTER_TYPE_STACKWALK | DWORD | 2147487744 |
| EVENT_FILTER_TYPE_STACKWALK_NAME | DWORD | 2147491840 |
| EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW | DWORD | 2147500032 |
| EVENT_FILTER_TYPE_CONTAINER | DWORD | 2147516416 |
| EVENT_DATA_DESCRIPTOR_TYPE_NONE | DWORD | 0 |
| EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA | DWORD | 1 |
| EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA | DWORD | 2 |
| EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE | DWORD | 3 |
| EVENT_WRITE_FLAG_NO_FAULTING | DWORD | 1 |
| EVENT_WRITE_FLAG_INPRIVATE | DWORD | 2 |
| EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID | DWORD | 1 |
| EVENT_HEADER_EXT_TYPE_SID | DWORD | 2 |
| EVENT_HEADER_EXT_TYPE_TS_ID | DWORD | 3 |
| EVENT_HEADER_EXT_TYPE_INSTANCE_INFO | DWORD | 4 |
| EVENT_HEADER_EXT_TYPE_STACK_TRACE32 | DWORD | 5 |
| EVENT_HEADER_EXT_TYPE_STACK_TRACE64 | DWORD | 6 |
| EVENT_HEADER_EXT_TYPE_PEBS_INDEX | DWORD | 7 |
| EVENT_HEADER_EXT_TYPE_PMC_COUNTERS | DWORD | 8 |
| EVENT_HEADER_EXT_TYPE_PSM_KEY | DWORD | 9 |
| EVENT_HEADER_EXT_TYPE_EVENT_KEY | DWORD | 10 |
| EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL | DWORD | 11 |
| EVENT_HEADER_EXT_TYPE_PROV_TRAITS | DWORD | 12 |
| EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY | DWORD | 13 |
| EVENT_HEADER_EXT_TYPE_CONTROL_GUID | DWORD | 14 |
| EVENT_HEADER_EXT_TYPE_QPC_DELTA | DWORD | 15 |
| EVENT_HEADER_EXT_TYPE_CONTAINER_ID | DWORD | 16 |
| EVENT_HEADER_EXT_TYPE_STACK_KEY32 | DWORD | 17 |
| EVENT_HEADER_EXT_TYPE_STACK_KEY64 | DWORD | 18 |
| EVENT_HEADER_EXT_TYPE_MAX | DWORD | 19 |
| EVENT_HEADER_PROPERTY_XML | DWORD | 1 |
| EVENT_HEADER_PROPERTY_FORWARDED_XML | DWORD | 2 |
| EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG | DWORD | 4 |
| EVENT_HEADER_PROPERTY_RELOGGABLE | DWORD | 8 |
| EVENT_HEADER_FLAG_EXTENDED_INFO | DWORD | 1 |
| EVENT_HEADER_FLAG_PRIVATE_SESSION | DWORD | 2 |
| EVENT_HEADER_FLAG_STRING_ONLY | DWORD | 4 |
| EVENT_HEADER_FLAG_TRACE_MESSAGE | DWORD | 8 |
| EVENT_HEADER_FLAG_NO_CPUTIME | DWORD | 16 |
| EVENT_HEADER_FLAG_32_BIT_HEADER | DWORD | 32 |
| EVENT_HEADER_FLAG_64_BIT_HEADER | DWORD | 64 |
| EVENT_HEADER_FLAG_DECODE_GUID | DWORD | 128 |
| EVENT_HEADER_FLAG_CLASSIC_HEADER | DWORD | 256 |
| EVENT_HEADER_FLAG_PROCESSOR_INDEX | DWORD | 512 |
| EVENT_ENABLE_PROPERTY_SID | DWORD | 1 |
| EVENT_ENABLE_PROPERTY_TS_ID | DWORD | 2 |
| EVENT_ENABLE_PROPERTY_STACK_TRACE | DWORD | 4 |
| EVENT_ENABLE_PROPERTY_PSM_KEY | DWORD | 8 |
| EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 | DWORD | 16 |
| EVENT_ENABLE_PROPERTY_PROVIDER_GROUP | DWORD | 32 |
| EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0 | DWORD | 64 |
| EVENT_ENABLE_PROPERTY_PROCESS_START_KEY | DWORD | 128 |
| EVENT_ENABLE_PROPERTY_EVENT_KEY | DWORD | 256 |
| EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE | DWORD | 512 |
| EVENT_ENABLE_PROPERTY_ENABLE_SILOS | DWORD | 1024 |
| EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING | DWORD | 2048 |
| PROCESS_TRACE_MODE_REAL_TIME | DWORD | 256 |
| PROCESS_TRACE_MODE_RAW_TIMESTAMP | DWORD | 4096 |
| PROCESS_TRACE_MODE_EVENT_RECORD | DWORD | 268435456 |
| CLSID_TraceRelogger | GUID | — |