Skip to content

Instantly share code, notes, and snippets.

@leechristensen

leechristensen/Exploring TraceLogging metadata in C:\Windows\system32\MicrosoftAccountTokenProvider.dll.txt

Created July 14, 2020 18:05
Show Gist options
  • Save leechristensen/66f4ca21ffea66f7b721b0347413b194 to your computer and use it in GitHub Desktop.
Save leechristensen/66f4ca21ffea66f7b721b0347413b194 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Exploring TraceLogging metadata in C:\Windows\system32\MicrosoftAccountTokenProvider.dll.txt
# Download from TLGMetadataParser.psm1 from https://gist.github.com/mattifestation/edbac1614694886c8ef4583149f53658
PS C:\> Import-Module TLGMetadataParser.psm1
PS C:\> $Info = Get-TraceLoggingMetadata -Path C:\Windows\system32\MicrosoftAccountTokenProvider.dll
PS C:\> $Info.Providers
ProviderGUID ProviderName ProviderGroupGUID
------------ ------------ -----------------
05f02597-fe85-4e67-8542-69567ab8fd4f MSAClientTraceLoggingProvider 4f50731a-89cf-4782-b3e0-dce8c90476ba
05f02597-fe85-4e67-8542-69567ab8fd4f MSAClientTraceLoggingProvider 4f50731a-89cf-4782-b3e0-dce8c90476ba
PS C:\> $Info.Events | select EventName
EventName
---------
ActivityStoppedAutomatically
ActivityStoppedAutomatically
ActivityIntermediateStop
ActivityError
ActivityError
CheckPackageSidForAadSSOCookieCallDetails
GetCookieInfoForUriCall_AADSSO
GetCookieInfoForUriCall_Cache
GetCookieInfoForUriCall_Start
GetCookieInfoForUriCall_Stop
GetCookieInfoWithUriForAccount
GetCookieInfoWithUriForAccount
GetCookieInfoWithUriForAccount
FallbackError
FallbackError
PS C:\> $Info | ConvertTo-Json
(see https://gist.github.com/leechristensen/d0e1fdc1fef666e7f4b6cc3a3e7caee3)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment