| 1 | <?xml version="1.0"?> |
| 2 | <!-- |
| 3 | Available Profiles (use profile name with wpr -start): |
| 4 | - WSL: General WSL tracing (default) |
| 5 | - WSL-Storage: WSL with enhanced storage tracing |
| 6 | - WSL-Networking: WSL with comprehensive networking tracing |
| 7 | - WSL-HvSocket: WSL with HvSocket-specific tracing |
| 8 | |
| 9 | Example: wpr -start wsl.wprp!WSL-Networking -filemode |
| 10 | --> |
| 11 | <WindowsPerformanceRecorder Version="1"> |
| 12 | <Profiles> |
| 13 | <!-- Event Collectors --> |
| 14 | <EventCollector Id="Collector" Name="Collector"> |
| 15 | <BufferSize Value="512"/> |
| 16 | <Buffers Value="4096"/> |
| 17 | </EventCollector> |
| 18 | |
| 19 | <!-- |
| 20 | Separate collector used by sub-profiles. Using the same provider in a sub-profile |
| 21 | would replace the base provider instead of extending it. |
| 22 | --> |
| 23 | <EventCollector Id="Collector_extra" Name="Collector_extra"> |
| 24 | <BufferSize Value="512"/> |
| 25 | <Buffers Value="4096"/> |
| 26 | </EventCollector> |
| 27 | |
| 28 | <!-- Event Providers --> |
| 29 | <EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/> |
| 30 | <EventProvider Id="9p_errors" Name="06C601B3-6957-4F8C-A15F-74875B24429D" /> |
| 31 | <EventProvider Id="aad_WPP" Name="4DE9BC9C-B27A-43C9-8994-0915F1A5E24F" /> |
| 32 | <EventProvider Id="basecsp_WPP" Name="133A980D-035D-4E2D-B250-94577AD8FCED" /> |
| 33 | <EventProvider Id="BCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473302" /> |
| 34 | <EventProvider Id="BFE_WPP" Name="106B464A-8043-46B1-8CB8-E92A0CD7A560" /> |
| 35 | <EventProvider Id="CAPI1_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473305" /> |
| 36 | <EventProvider Id="CHAT_WPP" Name="9B52E09F-0C58-4EAF-877F-70F9B54A7946" /> |
| 37 | <EventProvider Id="cloudap_WPP" Name="EC3CA551-21E9-47D0-9742-1195429831BB" /> |
| 38 | <EventProvider Id="CNG_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473303" /> |
| 39 | <EventProvider Id="credssp_WPP" Name="6165F3E2-AE38-45D4-9B23-6B4818758BD9" /> |
| 40 | <EventProvider Id="CRYPTOWINRT_WPP" Name="786396CD-2FF3-53D3-D1CA-43E41D9FB73B" /> |
| 41 | <EventProvider Id="dclocator_WPP" Name="CA030134-54CD-4130-9177-DAE76A3C5791" /> |
| 42 | <EventProvider Id="digest_WPP" Name="FB6A424F-B5D6-4329-B9B5-A975B3A93EAD" /> |
| 43 | <EventProvider Id="DNS_WPP" Name="609151DD-04F5-4DA7-974C-FC6947EAA323" /> |
| 44 | <EventProvider Id="dpapis_WPP" Name="EA3F84FC-03BB-540E-B6AA-9664F81A31FB" /> |
| 45 | <EventProvider Id="EventProvider_HvSocketTraceProvider" Name="B2ED3BDB-CD74-5B2C-F660-85079CA074B3" NonPagedMemory="true"> |
| 46 | <Keywords> |
| 47 | <Keyword Value="0x0"/> |
| 48 | </Keywords> |
| 49 | </EventProvider> |
| 50 | <EventProvider Id="EventProvider_Microsoft.Windows.EMPS.Enrollment" Name="E74EFD1A-B62D-4B83-AB00-66F4A166A2D3" /> |
| 51 | <EventProvider Id="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment" Name="F9E3B648-9AF1-4DC3-9A8E-BF42C0FBCE9A" /> |
| 52 | <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload" Name="0BBE6221-EF09-4A3F-82EE-BE00DBB6A98A" /> |
| 53 | <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore" Name="42C60CEA-0FE7-4541-A86B-9E11F95BD9BF" /> |
| 54 | <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner" Name="B876B1FC-C7F1-443E-9012-86677F7DE580" /> |
| 55 | <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM" Name="7EDBED09-1FF7-4FEE-B8C3-5DB694420830" /> |
| 56 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.API" Name="82ADD491-01D7-4B85-9EAD-192C3CAACA23" /> |
| 57 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CommandCsp" Name="00BB69FC-60BC-4502-9438-25608F375CCB" /> |
| 58 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CSP" Name="16E12400-A2D8-44B7-9479-004568EC7819" /> |
| 59 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Engine" Name="A6A847B7-4429-49AA-BBA6-2AD8C191AC8C" /> |
| 60 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Handlers" Name="0383D92C-2337-4F25-A0B5-A51767F04746" /> |
| 61 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Migration" Name="A0AF985E-83F9-4E1A-B658-338DCFE27893" /> |
| 62 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Operations" Name="7F99598F-B2C1-4371-9911-63DEE13B9EB1" /> |
| 63 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Platform" Name="B1F30020-8BC3-4888-BB1B-4DD681F24209" /> |
| 64 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine" Name="55239D60-0EB6-495B-874E-15DE5D5F9A70" /> |
| 65 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia" Name="B55883E6-6C45-45C2-AB9D-800BB7B66B13" /> |
| 66 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch" Name="08FACCFA-125D-4ED6-B0B7-B4A1A912E693" /> |
| 67 | <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvTool" Name="2BF4B6BA-556E-4D05-8534-CAFEDF19FED8" /> |
| 68 | <EventProvider Id="EventProvider_Telemetry_StorVSP" Name="544d0787-9f6d-432e-8414-e035a8b0541d"> |
| 69 | <Keywords> |
| 70 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 71 | </Keywords> |
| 72 | </EventProvider> |
| 73 | <EventProvider Id="EventProvider_Trace_Vhdmp" Name="dc284fb3-1eab-4854-828a-b25417280280" Level="3"> |
| 74 | <Keywords> |
| 75 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 76 | </Keywords> |
| 77 | </EventProvider> |
| 78 | <EventProvider Id="gMSAClient_WPP" Name="2D45EC97-EF01-4D4F-B9ED-EE3F4D3C11F3" /> |
| 79 | <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" /> |
| 80 | <EventProvider Id="HTTP_sys_WPP" Name="20F61733-57F1-4127-9F48-4AB7A9308AE2" /> |
| 81 | <EventProvider Id="HyperV_EmulatedStorage" Name="86E15E01-EDF1-4AC7-89CF-B19563FD6894" Level="6"> |
| 82 | <Keywords> |
| 83 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 84 | </Keywords> |
| 85 | </EventProvider> |
| 86 | <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" /> |
| 87 | <EventProvider Id="HyperV_SyntheticStorage" Name="EDACD782-2564-4497-ADE6-7199377850F2" Level="6"> |
| 88 | <Keywords> |
| 89 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 90 | </Keywords> |
| 91 | </EventProvider> |
| 92 | <EventProvider Id="idcommon_WPP" Name="B1108F75-3252-4B66-9239-80FD47E06494" /> |
| 93 | <EventProvider Id="idlisten_WPP" Name="D93FE84A-795E-4608-80EC-CE29A96C8658" /> |
| 94 | <EventProvider Id="idstore_WPP" Name="82C7D3DF-434D-44FC-A7CC-453A8075144E" /> |
| 95 | <EventProvider Id="IPNat" Name="AE3F6C6D-BF2A-4291-9D07-59E661274EE3" /> |
| 96 | <EventProvider Id="kdc_WPP" Name="1BBA8B19-7F31-43C0-9643-6E911F79A06B" /> |
| 97 | <EventProvider Id="kerb_WPP" Name="6B510852-3583-4E2D-AFFE-A67F9F223438" /> |
| 98 | <EventProvider Id="KerbClientShared_WPP" Name="FACB33C4-4513-4C38-AD1E-57C1F6828FC0" /> |
| 99 | <EventProvider Id="KerbComm_WPP" Name="60A7AB7A-BC57-43E9-B78A-A1D516577AE3" /> |
| 100 | <EventProvider Id="kps_WPP" Name="97A38277-13C0-4394-A0B2-2A70B465D64F" /> |
| 101 | <EventProvider Id="livessp_WPP" Name="C10B942D-AE1B-4786-BC66-052E5B4BE40E" /> |
| 102 | <EventProvider Id="LsaAudit_WPP" Name="DAA76F6A-2D11-4399-A646-1D62B7380F15" /> |
| 103 | <EventProvider Id="LsaDs_WPP" Name="169EC169-5B77-4A3E-9DB6-441799D5CACB" /> |
| 104 | <EventProvider Id="LsaIso_WPP" Name="366B218A-A5AA-4096-8131-0BDAFCC90E93" /> |
| 105 | <EventProvider Id="LsaTrace_WPP" Name="D0B639E0-E650-4D1D-8F39-1580ADE72784" /> |
| 106 | <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/> |
| 107 | <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/> |
| 108 | <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/> |
| 109 | <EventProvider Id="Microsoft_OneCore_NetworkingTriage_GetConnected" Name="60523747-6516-48B7-84B1-3264FA2CB359" /> |
| 110 | <EventProvider Id="Microsoft_OneCore_NetworkingTriage_OnDemand" Name="ABB1FC61-49BA-4CC3-809F-7ABE1F8BA315" /> |
| 111 | <EventProvider Id="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement" Name="923C0FFD-7933-4B52-8A49-121ABF2DC357" /> |
| 112 | <EventProvider Id="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP" Name="8DB3086D-116F-5BED-CFD5-9AFDA80D28EA" /> |
| 113 | <EventProvider Id="Microsoft_OSG_Wininet_WPP" Name="1A211EE8-52DB-4AF0-BB66-FB8C9F20B0E2" /> |
| 114 | <EventProvider Id="Microsoft_Quic_ETW" Name="ff15e657-4f26-570e-88ab-0796b258d11c" /> |
| 115 | <EventProvider Id="Microsoft_Web_Platform_WPP" Name="FF32ADA1-5A4B-583C-889E-A3C027B201F5" /> |
| 116 | <EventProvider Id="Microsoft_Windows_AppModel_Exec_WPP" Name="EB65A492-86C0-406A-BACE-9912D595BD69" /> |
| 117 | <EventProvider Id="Microsoft_Windows_BranchCacheClientEventProvider" Name="e837619c-a2a8-4689-833f-47b48ebd2442" /> |
| 118 | <EventProvider Id="Microsoft_Windows_BranchCacheEventProvider" Name="dd85457f-4e2d-44a5-a7a7-6253362e34dc" /> |
| 119 | <EventProvider Id="Microsoft_Windows_BrokerInfrastructure_WPP" Name="63B6C2D2-0440-44DE-A674-AA51A251B123" /> |
| 120 | <EventProvider Id="Microsoft_Windows_CAPI2_WPP" Name="5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB" /> |
| 121 | <EventProvider Id="Microsoft_Windows_CertificateServices_Deployment_WPP" Name="B2D1F576-2E85-4489-B504-1861C40544B3" /> |
| 122 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP" Name="F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43" /> |
| 123 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP" Name="54164045-7C50-4905-963F-E5BC1EEF0CCA" /> |
| 124 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP" Name="89A2278B-C662-4AFF-A06C-46AD3F220BCA" /> |
| 125 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP" Name="BC0669E1-A10D-4A78-834E-1CA3C806C93B" /> |
| 126 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP" Name="BEA18B89-126F-4155-9EE4-D36038B02680" /> |
| 127 | <EventProvider Id="Microsoft_Windows_CertificateServicesClient_WPP" Name="73370BD6-85E5-430B-B60A-FEA1285808A7" /> |
| 128 | <EventProvider Id="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP" Name="98BF1CD3-583E-4926-95EE-A61BF3F46470" /> |
| 129 | <EventProvider Id="Microsoft_Windows_CertPolEng_WPP" Name="AF9CC194-E9A8-42BD-B0D1-834E9CFAB799" /> |
| 130 | <EventProvider Id="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP" Name="3DA494E4-0FE2-415C-B895-FB5265C5C83B" /> |
| 131 | <EventProvider Id="Microsoft_Windows_DeviceManagement_SCEP_WPP" Name="D5A5B540-C580-4DEE-8BB4-185E34AA00C5" /> |
| 132 | <EventProvider Id="Microsoft_Windows_DM_Enrollment_Provider_WPP" Name="9FBF7B95-0697-4935-ADA2-887BE9DF12BC" /> |
| 133 | <EventProvider Id="Microsoft_Windows_DNS_Client" Name="1c95126e-7eea-49a9-a3fe-a378b03ddb4d" /> |
| 134 | <EventProvider Id="Microsoft_Windows_DNS_Client_Configuration_PowerShell" Name="563a50d8-3536-4c8a-a361-b37af04094ec" /> |
| 135 | <EventProvider Id="Microsoft_Windows_DNS_Client_WinRNR" Name="b923f87a-b069-42b5-bd32-35623aba1c48" /> |
| 136 | <EventProvider Id="Microsoft_Windows_HttpService" Name="dd5ef90a-6398-47a4-ad34-4dcecdef795f" /> |
| 137 | <EventProvider Id="Microsoft_Windows_LiveId_WPP" Name="05F02597-FE85-4E67-8542-69567AB8FD4F" /> |
| 138 | <EventProvider Id="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP" Name="5836994D-A677-53E7-1389-588AD1420CC5" /> |
| 139 | <EventProvider Id="Microsoft_Windows_ProcessStateManager_WPP" Name="D49918CF-9489-4BF1-9D7B-014D864CF71F" /> |
| 140 | <EventProvider Id="Microsoft_Windows_ResourceManager_WPP" Name="4180C4F7-E238-5519-338F-EC214F0B49AA" /> |
| 141 | <EventProvider Id="Microsoft_Windows_Runtime_Web_Http" Name="41877cb4-11fc-4188-b590-712c143c881d" /> |
| 142 | <EventProvider Id="Microsoft_Windows_Security_AADAuthHelper_WPP" Name="9EBB3B15-B094-41B1-A3B8-0F141B06BADD" /> |
| 143 | <EventProvider Id="Microsoft_Windows_Security_AADCloudAPPlugin_WPP" Name="556045FD-58C5-4A97-9881-B121F68B79C5" /> |
| 144 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP" Name="9DADD79B-D556-53F2-67C4-129FA62B7512" /> |
| 145 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_Client_WPP" Name="1B5106B1-7622-4740-AD81-D9C6EE74F124" /> |
| 146 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP" Name="1D480C11-3870-4B19-9144-47A53CD973BD" /> |
| 147 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP" Name="225B3FED-0356-59D1-1F82-EED163299FA8" /> |
| 148 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_Service_WPP" Name="39A5AA08-031D-4777-A32D-ED386BF03470" /> |
| 149 | <EventProvider Id="Microsoft_Windows_Security_Biometrics_Trustlet_WPP" Name="9DF19CFA-E122-5343-284B-F3945CCD65B2" /> |
| 150 | <EventProvider Id="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP" Name="507C53AE-AF42-5938-AEDE-4A9D908640ED" /> |
| 151 | <EventProvider Id="Microsoft_Windows_Security_DevCredClient_WPP" Name="78983C7D-917F-58DA-E8D4-F393DECF4EC0" /> |
| 152 | <EventProvider Id="Microsoft_Windows_Security_DevCredProv_WPP" Name="7955D36A-450B-5E2A-A079-95876BCA450A" /> |
| 153 | <EventProvider Id="Microsoft_Windows_Security_DevCredSvc_WPP" Name="C3FEB5BF-1A8D-53F3-AAA8-44496392BF69" /> |
| 154 | <EventProvider Id="Microsoft_Windows_Security_DevCredTask_WPP" Name="86D5FE65-0564-4618-B90B-E146049DEBF4" /> |
| 155 | <EventProvider Id="Microsoft_Windows_Security_DevCredWinRt_WPP" Name="36FF4C84-82A2-4B23-8BA5-A25CBDFF3410" /> |
| 156 | <EventProvider Id="Microsoft_Windows_Security_DeviceLock_WPP" Name="2056054C-97A6-5AE4-B181-38BC6B58007E" /> |
| 157 | <EventProvider Id="Microsoft_Windows_Security_Fido_WPP" Name="08B15CE7-C9FF-5E64-0D16-66589573C50F" /> |
| 158 | <EventProvider Id="Microsoft_Windows_Security_LsaSrv_WPP" Name="4D9DFB91-4337-465A-A8B5-05A27D930D48" /> |
| 159 | <EventProvider Id="Microsoft_Windows_Security_NGC_CredProv_WPP" Name="CAC8D861-7B16-5B6B-5FC0-85014776BDAC" /> |
| 160 | <EventProvider Id="Microsoft_Windows_Security_NGC_CryptNgc_WPP" Name="6D7051A0-9C83-5E52-CF8F-0ECAF5D5F6FD" /> |
| 161 | <EventProvider Id="Microsoft_Windows_Security_NGC_CSP_WPP" Name="89F392FF-EE7C-56A3-3F61-2D5B31A36935" /> |
| 162 | <EventProvider Id="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP" Name="34646397-1635-5D14-4D2C-2FEBDCCCF5E9" /> |
| 163 | <EventProvider Id="Microsoft_Windows_Security_NGC_KeyStaging_WPP" Name="9B223F67-67A1-5B53-9126-4593FE81DF25" /> |
| 164 | <EventProvider Id="Microsoft_Windows_Security_NGC_KspSvc_WPP" Name="B66B577F-AE49-5CCF-D2D7-8EB96BFD440C" /> |
| 165 | <EventProvider Id="Microsoft_Windows_Security_NGC_Local_WPP" Name="3B9DBF69-E9F0-5389-D054-A94BC30E33F7" /> |
| 166 | <EventProvider Id="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP" Name="CDD94AC7-CD2F-5189-E126-2DEB1B2FACBF" /> |
| 167 | <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnr_WPP" Name="0ABA6892-455B-551D-7DA8-3A8F85225E1A" /> |
| 168 | <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP" Name="9DF6A82D-5174-5EBF-842A-39947C48BF2A" /> |
| 169 | <EventProvider Id="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP" Name="CDC6BEB9-6D78-5138-D232-D951916AB98F" /> |
| 170 | <EventProvider Id="Microsoft_Windows_Security_NGC_PopKeySrv_WPP" Name="1D6540CE-A81B-4E74-AD35-EEF8463F97F5" /> |
| 171 | <EventProvider Id="Microsoft_Windows_Security_NGC_Recovery_WPP" Name="9D4CA978-8A14-545E-C047-A45991F0E92F" /> |
| 172 | <EventProvider Id="Microsoft_Windows_Security_NGC_Trustlet_WPP" Name="C0B2937D-E634-56A2-1451-7D678AA3BC53" /> |
| 173 | <EventProvider Id="Microsoft_Windows_Security_TokenBroker_WPP" Name="077B8C4A-E425-578D-F1AC-6FDF1220FF68" /> |
| 174 | <EventProvider Id="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP" Name="AA02D1A4-72D8-5F50-D425-7402EA09253A" /> |
| 175 | <EventProvider Id="Microsoft_Windows_Shell_CloudExperienceHost_WPP" Name="D0034F5E-3686-5A74-DC48-5A22DD4F3D5B" /> |
| 176 | <EventProvider Id="Microsoft_Windows_WBioSrvc_WPP" Name="34BEC984-F11F-4F1F-BB9B-3BA33C8D0132" /> |
| 177 | <EventProvider Id="Microsoft_Windows_WebIO" Name="50b3e73c-9370-461d-bb9f-26f32d68887d" /> |
| 178 | <EventProvider Id="Microsoft_Windows_WinHttp" Name="7d44233d-3055-4b9c-ba64-0d47ca40a232" /> |
| 179 | <EventProvider Id="Microsoft_Windows_WinINet" Name="43d1a55c-76d6-4f7e-995c-64c711e5cafe" /> |
| 180 | <EventProvider Id="Microsoft_Windows_Winsock_NameResolution" Name="55404E71-4DB9-4DEB-A5F5-8F86E46DDE56" /> |
| 181 | <EventProvider Id="Microsoft-Windows-DHCP-Client" Name="15A7A4F8-0072-4EAB-ABAD-F98A4D666AED" /> |
| 182 | <EventProvider Id="Microsoft-Windows-DHCPv6-Client" Name="6A1F2B00-6A90-4C38-95A5-5CAB3B056778" /> |
| 183 | <EventProvider Id="Microsoft-Windows-Host-Network-Management" Name="93f693dc-9163-4dee-af64-d855218af242" /> |
| 184 | <EventProvider Id="Microsoft-Windows-Hyper-V-VfpExt" Name="9F2660EA-CFE7-428F-9850-AECA612619B0"/> |
| 185 | <EventProvider Id="Microsoft-Windows-Hyper-V-VmSwitch" Name="67DC0D66-3695-47C0-9642-33F76F7BD7AD"/> |
| 186 | <EventProvider Id="Microsoft-Windows-HyperV-Vid" Name="5931D877-4860-4ee7-A95C-610A5F0D1407" NonPagedMemory="true" /> |
| 187 | <EventProvider Id="Microsoft-Windows-Overlay-HNSPlugin" Name="564368D6-577B-4af5-AD84-1C54464848E6" /> |
| 188 | <EventProvider Id="Microsoft-Windows-SharedAccess_NAT" Name="A6F32731-9A38-4159-A220-3D9B7FC5FE5D" /> |
| 189 | <EventProvider Id="Microsoft-Windows-TCPIP" Name="2f07e2ee-15db-40f1-90ef-9d7ba282188a" NonPagedMemory="true" EventKey="true" Strict="true"/> |
| 190 | <EventProvider Id="Microsoft-Windows-WinNat" Name="66C07ECD-6667-43FC-93F8-05CF07F446EC" /> |
| 191 | <EventProvider Id="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin" Name="D0E4BC17-34C7-43fc-9A72-D89A59D6979A" /> |
| 192 | <EventProvider Id="Microsoft.Windows.Hyper.V.NetSetupHelper" Name="94DEB9D1-0A52-449B-B368-41E4426B4F36"/> |
| 193 | <EventProvider Id="Microsoft.Windows.Hyper.V.VmsIf" Name="6C28C7E5-331B-4437-9C69-5352A2F7F296" /> |
| 194 | <EventProvider Id="Microsoft.Windows.HyperV.Compute" Name="80CE50DE-D264-4581-950D-ABADEEE0D340" /> |
| 195 | <EventProvider Id="Microsoft.Windows.HyperV.Socket" Name="b2ed3bdb-cd74-5b2c-f660-85079ca074b3"/> |
| 196 | <EventProvider Id="Microsoft.Windows.HyperV.Vid" Name="1111450B-DACC-40A3-84AB-F7DBA4A6E63A" NonPagedMemory="true"/> |
| 197 | <EventProvider Id="Microsoft.Windows.Networking.FlowSteering" Name="662abf07-6dda-5b25-c2c5-345236dbb2d2"/> |
| 198 | <EventProvider Id="mpssvcService" Name="5EEFEBDB-E90C-423a-8ABF-0241E7C5B87D" /> |
| 199 | <EventProvider Id="MsQuic_WPP" Name="620FD025-BE51-42EF-A5C0-50F13F183AD9" /> |
| 200 | <EventProvider Id="msxml_WPP" Name="927821F8-D9E6-42E2-84F2-949E18256F3A" /> |
| 201 | <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" /> |
| 202 | <EventProvider Id="NCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473301" /> |
| 203 | <EventProvider Id="NCRYPTSSLP_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473304" /> |
| 204 | <EventProvider Id="ndis_wpp" Name="DD7A21E6-A651-46D4-B7C2-66543067B869"/> |
| 205 | <EventProvider Id="negoexts_WPP" Name="5AF52B0D-E633-4EAD-828A-4B85B8DAAC2B" /> |
| 206 | <EventProvider Id="Netio_WPP" Name="EB004A05-9B1A-11D4-9123-0050047759BC" /> |
| 207 | <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" /> |
| 208 | <EventProvider Id="ntlm_WPP" Name="5BBB6C18-AA45-49B1-A15F-085F7ED0AA90" /> |
| 209 | <EventProvider Id="NtlmShared_WPP" Name="AC69AE5B-5B21-405F-8266-4424944A43E9" /> |
| 210 | <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" NonPagedMemory="true" Strict="true"/> |
| 211 | <EventProvider Id="pku2u_WPP" Name="2A6FAF47-5449-4805-89A3-A504F3E221A6" /> |
| 212 | <EventProvider Id="PortTrackerServer_WPP" Name="090bf343-4490-42d3-b273-8af174d314fb" /> |
| 213 | <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" /> |
| 214 | <EventProvider Id="SharedAccessWPP" Name="9B322459-4AD9-4F81-8EEA-DC77CDD18CA6" /> |
| 215 | <EventProvider Id="storvsp" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true" Level="4"> |
| 216 | <Keywords> |
| 217 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 218 | </Keywords> |
| 219 | </EventProvider> |
| 220 | <EventProvider Id="storvsp_io" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true"> |
| 221 | <Keywords> |
| 222 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 223 | </Keywords> |
| 224 | </EventProvider> |
| 225 | <EventProvider Id="storvsp_wpp" Name="f96abc17-6a5e-4a49-a3f4-a2a86fa03846" NonPagedMemory="true" Level="4"> |
| 226 | <Keywords> |
| 227 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 228 | </Keywords> |
| 229 | </EventProvider> |
| 230 | <EventProvider Id="TLS_WPP" Name="37D2C3CD-C5D4-4587-8531-4696C44244C8" /> |
| 231 | <EventProvider Id="TokenBinding_WPP" Name="AEF66A73-A765-4421-B348-B7E0FC8C9898" /> |
| 232 | <EventProvider Id="TPM_WPP" Name="3A8D6942-B034-48E2-B314-F69C2B4655A3" /> |
| 233 | <EventProvider Id="UrlMon_WPP" Name="3FAB3162-24CE-4ED5-B23D-63501544E11D" /> |
| 234 | <EventProvider Id="vault_WPP" Name="7FDD167C-79E5-4403-8C84-B7C0BB9923A1" /> |
| 235 | <EventProvider Id="vfpext" Name="9F2660EA-CFE7-428F-9850-AECA612619B0" /> |
| 236 | <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="4"> |
| 237 | <Keywords> |
| 238 | <Keyword Value="0xFFFFFFFFFFFFFFFD" /> |
| 239 | </Keywords> |
| 240 | </EventProvider> |
| 241 | <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5"> |
| 242 | <Keywords> |
| 243 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 244 | </Keywords> |
| 245 | </EventProvider> |
| 246 | <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4"> |
| 247 | <Keywords> |
| 248 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 249 | </Keywords> |
| 250 | </EventProvider> |
| 251 | <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4"> |
| 252 | <Keywords> |
| 253 | <Keyword Value="0xFFFFFFFFFFFFFFFF" /> |
| 254 | </Keywords> |
| 255 | </EventProvider> |
| 256 | <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/> |
| 257 | <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/> |
| 258 | <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/> |
| 259 | <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/> |
| 260 | <EventProvider Id="VmSwitch_wpp" Name="1F387CBC-6818-4530-9DB6-5F1058CD7E86"/> |
| 261 | <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/> |
| 262 | <EventProvider Id="webauth_WPP" Name="EF98103D-8D3A-4BEF-9DF2-2156563E64FA" /> |
| 263 | <EventProvider Id="Webio_WPP" Name="08F93B14-1608-4A72-9CFA-457EECEDBBA7" /> |
| 264 | <EventProvider Id="webplatform_WPP" Name="2A3C6602-411E-4DC6-B138-EA19D64F5BBA" /> |
| 265 | <EventProvider Id="WinHttp_WPP" Name="B3A7698A-0C45-44DA-B73D-E181C9B5C8E6" /> |
| 266 | <EventProvider Id="Wininet_WPP" Name="4E749B6A-667D-4C72-80EF-373EE3246B08" /> |
| 267 | <EventProvider Id="WinNatSys" Name="aa7387cf-3639-496a-b3bf-dc1e79a6fc5a" /> |
| 268 | <EventProvider Id="Winsock_WPP" Name="1D44957B-7181-4835-B70A-D0B16112A4DE" /> |
| 269 | <EventProvider Id="wlidsvc_WPP" Name="3F8B9EF5-BBD2-4C81-B6C9-DA3CDB72D3C5" /> |
| 270 | <EventProvider Id="wsl_devicehost" Name="9d6c7b9e-2581-4d8a-b8c5-b90b4a17094a"/> |
| 271 | <EventProvider Id="wslapi" Name="beb94edf-1a7b-5058-0696-ff9e6b1798d1"/> |
| 272 | <EventProvider Id="wslc" Name="0383CE62-8F86-4766-AFB2-9D66A7FB1E90"/> |
| 273 | <EventProvider Id="wslclient" Name="8cbb7724-7223-5d6f-8137-564dac45104d"/> |
| 274 | |
| 275 | <!-- PROFILE: General WSL Tracing (Default, also serves as base for other profiles) --> |
| 276 | <Profile |
| 277 | Id="WSL.Verbose.File" |
| 278 | Name="WSL" |
| 279 | Description="General traces for WSL components" |
| 280 | LoggingMode="File" |
| 281 | DetailLevel="Verbose" |
| 282 | > |
| 283 | <Collectors> |
| 284 | <EventCollectorId Value="Collector"> |
| 285 | <EventProviders> |
| 286 | <EventProviderId Value="9p"/> |
| 287 | <EventProviderId Value="9p_errors"/> |
| 288 | <EventProviderId Value="EventProvider_Microsoft.Windows.EMPS.Enrollment"/> |
| 289 | <EventProviderId Value="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment"/> |
| 290 | <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload"/> |
| 291 | <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore"/> |
| 292 | <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner"/> |
| 293 | <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM"/> |
| 294 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.API"/> |
| 295 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CommandCsp"/> |
| 296 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CSP"/> |
| 297 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Engine"/> |
| 298 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Handlers"/> |
| 299 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Migration"/> |
| 300 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/> |
| 301 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Platform"/> |
| 302 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine"/> |
| 303 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia"/> |
| 304 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch"/> |
| 305 | <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvTool"/> |
| 306 | <EventProviderId Value="EventProvider_Telemetry_StorVSP"/> |
| 307 | <EventProviderId Value="EventProvider_Trace_Vhdmp"/> |
| 308 | <EventProviderId Value="hns"/> |
| 309 | <EventProviderId Value="HyperV_EmulatedStorage"/> |
| 310 | <EventProviderId Value="hyperv_storage"/> |
| 311 | <EventProviderId Value="HyperV_SyntheticStorage"/> |
| 312 | <EventProviderId Value="lxcore_kernel"/> |
| 313 | <EventProviderId Value="lxcore_service"/> |
| 314 | <EventProviderId Value="lxcore_user"/> |
| 315 | <EventProviderId Value="Microsoft-Windows-HyperV-Vid"/> |
| 316 | <EventProviderId Value="Microsoft.Windows.HyperV.Vid"/> |
| 317 | <EventProviderId Value="mup"/> |
| 318 | <EventProviderId Value="netmgmt"/> |
| 319 | <EventProviderId Value="p9rdr"/> |
| 320 | <EventProviderId Value="rfsmon"/> |
| 321 | <EventProviderId Value="storvsp"/> |
| 322 | <EventProviderId Value="vfpext"/> |
| 323 | <EventProviderId Value="vhdmp"/> |
| 324 | <EventProviderId Value="vhdmp_wpp"/> |
| 325 | <EventProviderId Value="virtdisk"/> |
| 326 | <EventProviderId Value="virtdisk_wpp"/> |
| 327 | <EventProviderId Value="vm_chipset"/> |
| 328 | <EventProviderId Value="vmcompute"/> |
| 329 | <EventProviderId Value="vmcompute_dll"/> |
| 330 | <EventProviderId Value="vmmm"/> |
| 331 | <EventProviderId Value="vmwp"/> |
| 332 | <EventProviderId Value="wsl_devicehost"/> |
| 333 | <EventProviderId Value="wslapi"/> |
| 334 | <EventProviderId Value="wslc"/> |
| 335 | <EventProviderId Value="wslclient"/> |
| 336 | </EventProviders> |
| 337 | </EventCollectorId> |
| 338 | </Collectors> |
| 339 | </Profile> |
| 340 | |
| 341 | <!-- PROFILE: Storage-focused WSL Tracing --> |
| 342 | <Profile |
| 343 | Id="WSL-Storage.Verbose.File" |
| 344 | Name="WSL-Storage" |
| 345 | Description="WSL traces with enhanced storage providers" |
| 346 | LoggingMode="File" |
| 347 | DetailLevel="Verbose" |
| 348 | Base="WSL.Verbose.File" |
| 349 | > |
| 350 | <Collectors> |
| 351 | <EventCollectorId Value="Collector_extra"> |
| 352 | <EventProviders> |
| 353 | <!-- Additional storage-specific providers --> |
| 354 | <EventProviderId Value="storvsp_io"/> |
| 355 | <EventProviderId Value="storvsp_wpp"/> |
| 356 | </EventProviders> |
| 357 | </EventCollectorId> |
| 358 | </Collectors> |
| 359 | </Profile> |
| 360 | |
| 361 | <!-- PROFILE: Networking-focused WSL Tracing --> |
| 362 | <Profile |
| 363 | Id="WSL-Networking.Verbose.File" |
| 364 | Name="WSL-Networking" |
| 365 | Description="WSL traces with comprehensive networking providers" |
| 366 | LoggingMode="File" |
| 367 | DetailLevel="Verbose" |
| 368 | Base="WSL.Verbose.File" |
| 369 | > |
| 370 | <Collectors> |
| 371 | <EventCollectorId Value="Collector_extra"> |
| 372 | <EventProviders> |
| 373 | <!-- Additional networking-specific providers --> |
| 374 | <EventProviderId Value="aad_WPP"/> |
| 375 | <EventProviderId Value="basecsp_WPP"/> |
| 376 | <EventProviderId Value="BCRYPT_WPP"/> |
| 377 | <EventProviderId Value="BFE_WPP"/> |
| 378 | <EventProviderId Value="CAPI1_WPP"/> |
| 379 | <EventProviderId Value="CHAT_WPP"/> |
| 380 | <EventProviderId Value="cloudap_WPP"/> |
| 381 | <EventProviderId Value="CNG_WPP"/> |
| 382 | <EventProviderId Value="credssp_WPP"/> |
| 383 | <EventProviderId Value="CRYPTOWINRT_WPP"/> |
| 384 | <EventProviderId Value="dclocator_WPP"/> |
| 385 | <EventProviderId Value="digest_WPP"/> |
| 386 | <EventProviderId Value="DNS_WPP"/> |
| 387 | <EventProviderId Value="dpapis_WPP"/> |
| 388 | <EventProviderId Value="gMSAClient_WPP"/> |
| 389 | <EventProviderId Value="HTTP_sys_WPP"/> |
| 390 | <EventProviderId Value="idcommon_WPP"/> |
| 391 | <EventProviderId Value="idlisten_WPP"/> |
| 392 | <EventProviderId Value="idstore_WPP"/> |
| 393 | <EventProviderId Value="IPNat"/> |
| 394 | <EventProviderId Value="kdc_WPP"/> |
| 395 | <EventProviderId Value="kerb_WPP"/> |
| 396 | <EventProviderId Value="KerbClientShared_WPP"/> |
| 397 | <EventProviderId Value="KerbComm_WPP"/> |
| 398 | <EventProviderId Value="kps_WPP"/> |
| 399 | <EventProviderId Value="livessp_WPP"/> |
| 400 | <EventProviderId Value="LsaAudit_WPP"/> |
| 401 | <EventProviderId Value="LsaDs_WPP"/> |
| 402 | <EventProviderId Value="LsaIso_WPP"/> |
| 403 | <EventProviderId Value="LsaTrace_WPP"/> |
| 404 | <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_GetConnected"/> |
| 405 | <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_OnDemand"/> |
| 406 | <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement"/> |
| 407 | <EventProviderId Value="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP"/> |
| 408 | <EventProviderId Value="Microsoft_OSG_Wininet_WPP"/> |
| 409 | <EventProviderId Value="Microsoft_Quic_ETW"/> |
| 410 | <EventProviderId Value="Microsoft_Web_Platform_WPP"/> |
| 411 | <EventProviderId Value="Microsoft_Windows_AppModel_Exec_WPP"/> |
| 412 | <EventProviderId Value="Microsoft_Windows_BranchCacheClientEventProvider"/> |
| 413 | <EventProviderId Value="Microsoft_Windows_BranchCacheEventProvider"/> |
| 414 | <EventProviderId Value="Microsoft_Windows_BrokerInfrastructure_WPP"/> |
| 415 | <EventProviderId Value="Microsoft_Windows_CAPI2_WPP"/> |
| 416 | <EventProviderId Value="Microsoft_Windows_CertificateServices_Deployment_WPP"/> |
| 417 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP"/> |
| 418 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP"/> |
| 419 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP"/> |
| 420 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP"/> |
| 421 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP"/> |
| 422 | <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_WPP"/> |
| 423 | <EventProviderId Value="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP"/> |
| 424 | <EventProviderId Value="Microsoft_Windows_CertPolEng_WPP"/> |
| 425 | <EventProviderId Value="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP"/> |
| 426 | <EventProviderId Value="Microsoft_Windows_DeviceManagement_SCEP_WPP"/> |
| 427 | <EventProviderId Value="Microsoft_Windows_DM_Enrollment_Provider_WPP"/> |
| 428 | <EventProviderId Value="Microsoft_Windows_DNS_Client"/> |
| 429 | <EventProviderId Value="Microsoft_Windows_DNS_Client_Configuration_PowerShell"/> |
| 430 | <EventProviderId Value="Microsoft_Windows_DNS_Client_WinRNR"/> |
| 431 | <EventProviderId Value="Microsoft_Windows_HttpService"/> |
| 432 | <EventProviderId Value="Microsoft_Windows_LiveId_WPP"/> |
| 433 | <EventProviderId Value="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP"/> |
| 434 | <EventProviderId Value="Microsoft_Windows_ProcessStateManager_WPP"/> |
| 435 | <EventProviderId Value="Microsoft_Windows_ResourceManager_WPP"/> |
| 436 | <EventProviderId Value="Microsoft_Windows_Runtime_Web_Http"/> |
| 437 | <EventProviderId Value="Microsoft_Windows_Security_AADAuthHelper_WPP"/> |
| 438 | <EventProviderId Value="Microsoft_Windows_Security_AADCloudAPPlugin_WPP"/> |
| 439 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP"/> |
| 440 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Client_WPP"/> |
| 441 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP"/> |
| 442 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP"/> |
| 443 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Service_WPP"/> |
| 444 | <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Trustlet_WPP"/> |
| 445 | <EventProviderId Value="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP"/> |
| 446 | <EventProviderId Value="Microsoft_Windows_Security_DevCredClient_WPP"/> |
| 447 | <EventProviderId Value="Microsoft_Windows_Security_DevCredProv_WPP"/> |
| 448 | <EventProviderId Value="Microsoft_Windows_Security_DevCredSvc_WPP"/> |
| 449 | <EventProviderId Value="Microsoft_Windows_Security_DevCredTask_WPP"/> |
| 450 | <EventProviderId Value="Microsoft_Windows_Security_DevCredWinRt_WPP"/> |
| 451 | <EventProviderId Value="Microsoft_Windows_Security_DeviceLock_WPP"/> |
| 452 | <EventProviderId Value="Microsoft_Windows_Security_Fido_WPP"/> |
| 453 | <EventProviderId Value="Microsoft_Windows_Security_LsaSrv_WPP"/> |
| 454 | <EventProviderId Value="Microsoft_Windows_Security_NGC_CredProv_WPP"/> |
| 455 | <EventProviderId Value="Microsoft_Windows_Security_NGC_CryptNgc_WPP"/> |
| 456 | <EventProviderId Value="Microsoft_Windows_Security_NGC_CSP_WPP"/> |
| 457 | <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP"/> |
| 458 | <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyStaging_WPP"/> |
| 459 | <EventProviderId Value="Microsoft_Windows_Security_NGC_KspSvc_WPP"/> |
| 460 | <EventProviderId Value="Microsoft_Windows_Security_NGC_Local_WPP"/> |
| 461 | <EventProviderId Value="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP"/> |
| 462 | <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnr_WPP"/> |
| 463 | <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP"/> |
| 464 | <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP"/> |
| 465 | <EventProviderId Value="Microsoft_Windows_Security_NGC_PopKeySrv_WPP"/> |
| 466 | <EventProviderId Value="Microsoft_Windows_Security_NGC_Recovery_WPP"/> |
| 467 | <EventProviderId Value="Microsoft_Windows_Security_NGC_Trustlet_WPP"/> |
| 468 | <EventProviderId Value="Microsoft_Windows_Security_TokenBroker_WPP"/> |
| 469 | <EventProviderId Value="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP"/> |
| 470 | <EventProviderId Value="Microsoft_Windows_Shell_CloudExperienceHost_WPP"/> |
| 471 | <EventProviderId Value="Microsoft_Windows_WBioSrvc_WPP"/> |
| 472 | <EventProviderId Value="Microsoft_Windows_WebIO"/> |
| 473 | <EventProviderId Value="Microsoft_Windows_WinHttp"/> |
| 474 | <EventProviderId Value="Microsoft_Windows_WinINet"/> |
| 475 | <EventProviderId Value="Microsoft_Windows_Winsock_NameResolution"/> |
| 476 | <EventProviderId Value="Microsoft-Windows-DHCP-Client"/> |
| 477 | <EventProviderId Value="Microsoft-Windows-DHCPv6-Client"/> |
| 478 | <EventProviderId Value="Microsoft-Windows-Host-Network-Management"/> |
| 479 | <EventProviderId Value="Microsoft-Windows-Hyper-V-VfpExt"/> |
| 480 | <EventProviderId Value="Microsoft-Windows-Hyper-V-VmSwitch"/> |
| 481 | <EventProviderId Value="Microsoft-Windows-Overlay-HNSPlugin"/> |
| 482 | <EventProviderId Value="Microsoft-Windows-SharedAccess_NAT"/> |
| 483 | <EventProviderId Value="Microsoft-Windows-TCPIP"/> |
| 484 | <EventProviderId Value="Microsoft-Windows-WinNat"/> |
| 485 | <EventProviderId Value="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin"/> |
| 486 | <EventProviderId Value="Microsoft.Windows.Hyper.V.NetSetupHelper"/> |
| 487 | <EventProviderId Value="Microsoft.Windows.Hyper.V.VmsIf"/> |
| 488 | <EventProviderId Value="Microsoft.Windows.HyperV.Compute"/> |
| 489 | <EventProviderId Value="Microsoft.Windows.HyperV.Socket"/> |
| 490 | <EventProviderId Value="Microsoft.Windows.Networking.FlowSteering"/> |
| 491 | <EventProviderId Value="mpssvcService"/> |
| 492 | <EventProviderId Value="MsQuic_WPP"/> |
| 493 | <EventProviderId Value="msxml_WPP"/> |
| 494 | <EventProviderId Value="NCRYPT_WPP"/> |
| 495 | <EventProviderId Value="NCRYPTSSLP_WPP"/> |
| 496 | <EventProviderId Value="ndis_wpp"/> |
| 497 | <EventProviderId Value="negoexts_WPP"/> |
| 498 | <EventProviderId Value="Netio_WPP"/> |
| 499 | <EventProviderId Value="ntlm_WPP"/> |
| 500 | <EventProviderId Value="NtlmShared_WPP"/> |
| 501 | <EventProviderId Value="pku2u_WPP"/> |
| 502 | <EventProviderId Value="PortTrackerServer_WPP"/> |
| 503 | <EventProviderId Value="SharedAccessWPP"/> |
| 504 | <EventProviderId Value="TLS_WPP"/> |
| 505 | <EventProviderId Value="TokenBinding_WPP"/> |
| 506 | <EventProviderId Value="TPM_WPP"/> |
| 507 | <EventProviderId Value="UrlMon_WPP"/> |
| 508 | <EventProviderId Value="vault_WPP"/> |
| 509 | <EventProviderId Value="VmSwitch_wpp"/> |
| 510 | <EventProviderId Value="webauth_WPP"/> |
| 511 | <EventProviderId Value="Webio_WPP"/> |
| 512 | <EventProviderId Value="webplatform_WPP"/> |
| 513 | <EventProviderId Value="WinHttp_WPP"/> |
| 514 | <EventProviderId Value="Wininet_WPP"/> |
| 515 | <EventProviderId Value="WinNatSys"/> |
| 516 | <EventProviderId Value="Winsock_WPP"/> |
| 517 | <EventProviderId Value="wlidsvc_WPP"/> |
| 518 | </EventProviders> |
| 519 | </EventCollectorId> |
| 520 | </Collectors> |
| 521 | </Profile> |
| 522 | |
| 523 | <!-- PROFILE: HvSocket-focused WSL Tracing --> |
| 524 | <Profile |
| 525 | Id="WSL-HvSocket.Verbose.File" |
| 526 | Name="WSL-HvSocket" |
| 527 | Description="WSL traces with HvSocket-specific providers" |
| 528 | LoggingMode="File" |
| 529 | DetailLevel="Verbose" |
| 530 | Base="WSL.Verbose.File" |
| 531 | > |
| 532 | <Collectors> |
| 533 | <EventCollectorId Value="Collector_extra"> |
| 534 | <EventProviders> |
| 535 | <!-- Additional providers specific to HvSocket profile --> |
| 536 | <EventProviderId Value="EventProvider_HvSocketTraceProvider"/> |
| 537 | </EventProviders> |
| 538 | </EventCollectorId> |
| 539 | </Collectors> |
| 540 | </Profile> |
| 541 | |
| 542 | </Profiles> |
| 543 | </WindowsPerformanceRecorder> |