Created
January 2, 2021 15:46
-
-
Save michel-pi/6bfe36c46ace0421c2dc2108114c39da to your computer and use it in GitHub Desktop.
Windows 10 v2004 WMI Event Class List
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| __Event | |
| __ExtrinsicEvent | |
| Win32_DeviceChangeEvent | |
| Win32_SystemConfigurationChangeEvent | |
| Win32_VolumeChangeEvent | |
| MSFT_WMI_GenericNonCOMEvent | |
| MSFT_NCProvEvent | |
| MSFT_NCProvCancelQuery | |
| MSFT_NCProvClientConnected | |
| MSFT_NCProvNewQuery | |
| MSFT_NCProvAccessCheck | |
| Win32_SystemTrace | |
| Win32_ProcessTrace | |
| Win32_ProcessStartTrace | |
| Win32_ProcessStopTrace | |
| Win32_ThreadTrace | |
| Win32_ThreadStartTrace | |
| Win32_ThreadStopTrace | |
| Win32_ModuleTrace | |
| Win32_ModuleLoadTrace | |
| Win32_PowerManagementEvent | |
| Win32_ComputerSystemEvent | |
| Win32_ComputerShutdownEvent | |
| MSFT_SCMEvent | |
| MSFT_SCMEventLogEvent | |
| MSFT_NetSevereServiceFailed | |
| MSFT_NetTransactInvalid | |
| MSFT_NetServiceNotInteractive | |
| MSFT_NetTakeOwnership | |
| MSFT_NetServiceConfigBackoutFailed | |
| MSFT_NetServiceShutdownFailed | |
| MSFT_NetServiceStartHung | |
| MSFT_NetServiceStopControlSuccess | |
| MSFT_NetServiceSlowStartup | |
| MSFT_NetCallToFunctionFailed | |
| MSFT_NetBadAccount | |
| MSFT_NetBadServiceState | |
| MSFT_NetConnectionTimeout | |
| MSFT_NetCircularDependencyAuto | |
| MSFT_NetServiceStartTypeChanged | |
| MSFT_NetServiceLogonTypeNotGranted | |
| MSFT_NetServiceStartFailedGroup | |
| MSFT_NetDependOnLaterService | |
| MSFT_NetFirstLogonFailedII | |
| MSFT_NetServiceDifferentPIDConnected | |
| MSFT_NetServiceCrashNoAction | |
| MSFT_NetCircularDependencyDemand | |
| MSFT_NetServiceExitFailed | |
| MSFT_NetServiceStartFailedII | |
| MSFT_NetServiceExitFailedSpecific | |
| MSFT_NetBootSystemDriversFailed | |
| MSFT_NetServiceCrash | |
| MSFT_NetServiceRecoveryFailed | |
| MSFT_NetServiceStatusSuccess | |
| MSFT_NetTransactTimeout | |
| MSFT_NetFirstLogonFailed | |
| MSFT_NetServiceControlSuccess | |
| MSFT_NetServiceStartFailed | |
| MSFT_NetServiceStartFailedNone | |
| MSFT_NetReadfileTimeout | |
| MSFT_NetRevertedToLastKnownGood | |
| MSFT_NetCallToFunctionFailedII | |
| MSFT_NetDependOnLaterGroup | |
| MSFT_WmiSelfEvent | |
| MSFT_WmiEssEvent | |
| MSFT_WmiThreadPoolEvent | |
| MSFT_WmiThreadPoolThreadCreated | |
| MSFT_WmiThreadPoolThreadDeleted | |
| MSFT_WmiRegisterNotificationSink | |
| MSFT_WmiFilterEvent | |
| MSFT_WmiFilterDeactivated | |
| MSFT_WmiFilterActivated | |
| MSFT_WmiCancelNotificationSink | |
| MSFT_WmiProviderEvent | |
| MSFT_WmiConsumerProviderEvent | |
| MSFT_WmiConsumerProviderSinkLoaded | |
| MSFT_WmiConsumerProviderSinkUnloaded | |
| MSFT_WmiConsumerProviderUnloaded | |
| MSFT_WmiConsumerProviderLoaded | |
| Msft_WmiProvider_OperationEvent | |
| Msft_WmiProvider_ComServerLoadOperationEvent | |
| Msft_WmiProvider_OperationEvent_Post | |
| Msft_WmiProvider_PutInstanceAsyncEvent_Post | |
| Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Post | |
| Msft_WmiProvider_DeleteInstanceAsyncEvent_Post | |
| Msft_WmiProvider_CancelQuery_Post | |
| Msft_WmiProvider_NewQuery_Post | |
| Msft_WmiProvider_ProvideEvents_Post | |
| Msft_WmiProvider_ExecQueryAsyncEvent_Post | |
| Msft_WmiProvider_AccessCheck_Post | |
| Msft_WmiProvider_CreateClassEnumAsyncEvent_Post | |
| Msft_WmiProvider_DeleteClassAsyncEvent_Post | |
| Msft_WmiProvider_ExecMethodAsyncEvent_Post | |
| Msft_WmiProvider_GetObjectAsyncEvent_Post | |
| Msft_WmiProvider_PutClassAsyncEvent_Post | |
| Msft_WmiProvider_InitializationOperationFailureEvent | |
| Msft_WmiProvider_InitializationOperationEvent | |
| Msft_WmiProvider_LoadOperationFailureEvent | |
| Msft_WmiProvider_ComServerLoadOperationFailureEvent | |
| Msft_WmiProvider_UnLoadOperationEvent | |
| Msft_WmiProvider_LoadOperationEvent | |
| Msft_WmiProvider_OperationEvent_Pre | |
| Msft_WmiProvider_DeleteInstanceAsyncEvent_Pre | |
| Msft_WmiProvider_AccessCheck_Pre | |
| Msft_WmiProvider_ExecQueryAsyncEvent_Pre | |
| Msft_WmiProvider_DeleteClassAsyncEvent_Pre | |
| Msft_WmiProvider_NewQuery_Pre | |
| Msft_WmiProvider_PutInstanceAsyncEvent_Pre | |
| Msft_WmiProvider_CreateClassEnumAsyncEvent_Pre | |
| Msft_WmiProvider_ExecMethodAsyncEvent_Pre | |
| Msft_WmiProvider_ProvideEvents_Pre | |
| Msft_WmiProvider_CancelQuery_Pre | |
| Msft_WmiProvider_PutClassAsyncEvent_Pre | |
| Msft_WmiProvider_GetObjectAsyncEvent_Pre | |
| Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Pre | |
| Win32_IP4RouteTableEvent | |
| RegistryEvent | |
| RegistryKeyChangeEvent | |
| RegistryTreeChangeEvent | |
| RegistryValueChangeEvent | |
| __SystemEvent | |
| __EventDroppedEvent | |
| __EventQueueOverflowEvent | |
| __QOSFailureEvent | |
| __ConsumerFailureEvent | |
| __InstanceOperationEvent | |
| __InstanceModificationEvent | |
| __InstanceCreationEvent | |
| __MethodInvocationEvent | |
| __InstanceDeletionEvent | |
| __ClassOperationEvent | |
| __ClassDeletionEvent | |
| __ClassModificationEvent | |
| __ClassCreationEvent | |
| __NamespaceOperationEvent | |
| __NamespaceModificationEvent | |
| __NamespaceDeletionEvent | |
| __NamespaceCreationEvent | |
| __TimerEvent |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment