Security ETW Events
Security events are raised during strong name verification and Authenticode verification.
This category consists of the following events:
StrongNameVerificationStart_V1 and StrongNameVerificationStop_V1 Events
AuthenticodeVerificationStart_V1 and AuthenticodeVerificationStop_V1 Events
StrongNameVerificationStart_V1 and StrongNameVerificationStop_V1 Events
The following table shows the keyword and level. (For more information, see CLR ETW Keywords and Levels.)
Keyword for raising the event |
Level |
|---|---|
SecurityKeyword (0x400) |
Informational(4) |
The following table shows the event information.
Event |
Event ID |
Raised when |
|---|---|---|
StrongNameVerificationStart_V1 |
181 |
Start of strong name verification. |
StrongNameVerificationStop_V1 |
182 |
End of strong name verification. |
The following table shows the event data.
Field name |
Data type |
Description |
|---|---|---|
VerificationFlags |
win:UInt32 |
The verification flags. |
ErrorCode |
win:UInt32 |
The HResult error code. |
FullyQualifiedAssemblyName |
win:UnicodeString |
The fully qualified assembly name. |
ClrInstanceID |
win:UInt16 |
Unique ID for the instance of CLR or CoreCLR. |
Back to top
AuthenticodeVerificationStart_V1 and AuthenticodeVerificationStop_V1 Events
The following table shows the keyword and level.
Keyword for raising the event |
Level |
|---|---|
SecurityKeyword (0x400) |
Informational(4) |
The following table shows the event information.
Event |
Event ID |
Raised when |
|---|---|---|
AuthenticodeVerificationStart_V1 |
183 |
Start of Authenticode verification. |
AuthenticodeVerificationStop_V1 |
184 |
End of Authenticode verification. |
The following table shows the event data.
Field name |
Data type |
Description |
|---|---|---|
VerificationFlags |
win:UInt32 |
The verification flags. |
ErrorCode |
win:UInt32 |
The HResult error code. |
ModulePath |
win:UnicodeString |
The module path. |
ClrInstanceID |
win:UInt16 |
Unique ID for the instance of CLR or CoreCLR. |
Back to top