Export (0) Print
Expand All
1 out of 2 rated this helpful - Rate this topic

Event Tracing MOF Classes

The classes are defined in the \root\wmi namespace. The EventVersion qualifier for the kernel events associates the class with a specific operating system. For example, version zero is associated with Windows 2000, version one with Windows XP and Windows Server 2003, and version two with Windows Vista.

The following MOF classes define the ETW event classes.

The following MOF classes define the kernel events classes.



Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2014 Microsoft. All rights reserved.