Security ETW Events

.NET Framework (current version)
 

Security events are raised during strong name verification and Authenticode verification.

This category consists of the following events:

The following table shows the keyword and level. (For more information, see CLR ETW Keywords and Levels.)

Keyword for raising the eventLevel
SecurityKeyword (0x400)Informational(4)

The following table shows the event information.

EventEvent IDRaised when
StrongNameVerificationStart_V1181Start of strong name verification.
StrongNameVerificationStop_V1182End of strong name verification.

The following table shows the event data.

Field nameData typeDescription
VerificationFlagswin:UInt32The verification flags.
ErrorCodewin:UInt32The HResult error code.
FullyQualifiedAssemblyNamewin:UnicodeStringThe fully qualified assembly name.
ClrInstanceIDwin:UInt16Unique ID for the instance of CLR or CoreCLR.

Back to top

The following table shows the keyword and level.

Keyword for raising the eventLevel
SecurityKeyword (0x400)Informational(4)

The following table shows the event information.

EventEvent IDRaised when
AuthenticodeVerificationStart_V1183Start of Authenticode verification.
AuthenticodeVerificationStop_V1184End of Authenticode verification.

The following table shows the event data.

Field nameData typeDescription
VerificationFlagswin:UInt32The verification flags.
ErrorCodewin:UInt32The HResult error code.
ModulePathwin:UnicodeStringThe module path.
ClrInstanceIDwin:UInt16Unique ID for the instance of CLR or CoreCLR.

CLR ETW Events

Show: