Windows NT KAMIDAKI 10.0 build 19045 (Windows 10) AMD64
Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.3.9
Server IP : 192.168.3.16 & Your IP : 216.73.216.140
Domains :
Cant Read [ /etc/named.conf ]
User : SISTEMA
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
C: /
Windows /
SysWOW64 /
wbem /
Delete
Unzip
Name
Size
Permission
Date
Action
AutoRecover
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
Logs
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
Repository
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
en
[ DIR ]
drwxrwxrwx
2023-03-23 12:54
en-US
[ DIR ]
drwxrwxrwx
2023-11-16 06:32
pt-BR
[ DIR ]
drwxrwxrwx
2023-11-16 06:32
tmf
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
xml
[ DIR ]
drwxrwxrwx
2019-12-07 10:15
AgentWmi.mof
17.1
KB
-rw-rw-rw-
2019-12-07 15:56
AgentWmiUninstall.mof
693
B
-rw-rw-rw-
2019-12-07 10:10
BthMtpEnum.mof
2.56
KB
-rw-rw-rw-
2019-12-07 10:10
CIWmi.mof
2.04
KB
-rw-rw-rw-
2019-12-07 10:10
DscCoreConfProv.mof
6.52
KB
-rw-rw-rw-
2019-12-07 10:10
FolderRedirectionWMIProvider.mof
8.79
KB
-rw-rw-rw-
2019-12-07 10:08
FunDisc.mof
702
B
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-Base.mof
31.36
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-FileSystemSupport.mof
2.03
KB
-rw-rw-rw-
2019-12-07 10:10
IMAPIv2-LegacyShim.mof
759
B
-rw-rw-rw-
2019-12-07 10:10
IpmiDTrc.mof
638
B
-rw-rw-rw-
2019-12-07 10:08
IpmiPTrc.mof
763
B
-rw-rw-rw-
2019-12-07 10:08
L2SecHC.mof
2.28
KB
-rw-rw-rw-
2019-12-07 10:09
Microsoft.AppV.AppVClientWmi.dll
31.88
KB
-rw-rw-rw-
2023-11-16 03:02
Microsoft.AppV.AppVClientWmi.mof
11.42
KB
-rw-rw-rw-
2019-12-07 15:56
Microsoft.Uev.AgentWmi.dll
1.03
MB
-rw-rw-rw-
2025-06-10 19:46
Microsoft.Uev.ManagedAgentWmi.mof
3.06
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft.Uev.ManagedAgentWmiUninstall.mof
514
B
-rw-rw-rw-
2019-12-07 10:10
MsDtcWmi.mof
21.02
KB
-rw-rw-rw-
2019-12-07 10:09
OfflineFilesConfigurationWmiProvider.mof
5.43
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesConfigurationWmiProvider_Uninstall.mof
800
B
-rw-rw-rw-
2019-12-07 10:10
OfflineFilesWmiProvider.mof
14.25
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesWmiProvider_Uninstall.mof
2.11
KB
-rw-rw-rw-
2019-12-07 10:10
PS_MMAgent.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:10
PolicMan.dll
85.5
KB
-rw-rw-rw-
2019-12-07 15:56
PolicMan.mof
11.87
KB
-rw-rw-rw-
2019-12-07 15:56
PrintManagementProvider.dll
192
KB
-rw-rw-rw-
2025-05-14 02:05
RacWmiProv.dll
54
KB
-rw-rw-rw-
2019-12-07 10:10
RacWmiProv.mof
2.96
KB
-rw-rw-rw-
2019-12-07 10:10
Remove.Microsoft.AppV.AppvClientWmi.mof
830
B
-rw-rw-rw-
2019-12-07 10:10
SchedProv.mof
49.88
KB
-rw-rw-rw-
2019-12-07 10:09
UserStateWMIProvider.mof
3.18
KB
-rw-rw-rw-
2019-12-07 10:08
WMIADAP.exe
126
KB
-rwxrwxrwx
2024-06-13 15:20
WMIC.exe
417
KB
-rwxrwxrwx
2025-05-14 02:04
WMICOOKR.dll
73
KB
-rw-rw-rw-
2024-06-13 15:20
WPDShServiceObj.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:10
WdacWmiProv.dll
109
KB
-rw-rw-rw-
2019-12-07 10:10
Win32_Tpm.dll
47.5
KB
-rw-rw-rw-
2025-07-09 07:54
WinMgmt.exe
77.5
KB
-rwxrwxrwx
2023-11-16 03:00
Winsat.mof
1.51
KB
-rw-rw-rw-
2019-12-07 10:10
WinsatUninstall.mof
487
B
-rw-rw-rw-
2019-12-07 10:10
WmiApRpl.dll
91
KB
-rw-rw-rw-
2023-11-16 03:00
WmiDcPrv.dll
138
KB
-rw-rw-rw-
2023-11-16 03:00
WmiPerfClass.dll
92
KB
-rw-rw-rw-
2019-12-07 10:10
WmiPerfClass.mof
980
B
-rw-rw-rw-
2019-12-07 10:10
WmiPerfInst.dll
46.5
KB
-rw-rw-rw-
2019-12-07 10:10
WmiPerfInst.mof
804
B
-rw-rw-rw-
2019-12-07 10:10
WmiPrvSE.exe
408.5
KB
-rwxrwxrwx
2023-11-16 03:00
WsmAgent.mof
822
B
-rw-rw-rw-
2019-12-07 10:08
WsmAgentUninstall.mof
754
B
-rw-rw-rw-
2019-12-07 10:08
WsmAuto.mof
4.42
KB
-rw-rw-rw-
2019-12-07 10:08
cli.mof
31.86
KB
-rw-rw-rw-
2019-12-07 10:08
cliegaliases.mof
2.68
MB
-rw-rw-rw-
2019-12-07 10:08
dimsjob.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
dimsroam.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
dot3.mof
5.93
KB
-rw-rw-rw-
2019-12-07 10:09
eaimeapi.mof
1.27
KB
-rw-rw-rw-
2019-12-07 10:10
esscli.dll
364.5
KB
-rw-rw-rw-
2024-06-13 15:20
fastprox.dll
786.5
KB
-rw-rw-rw-
2025-05-14 02:04
fdSSDP.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdWNet.mof
716
B
-rw-rw-rw-
2019-12-07 10:09
fdWSD.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
hbaapi.mof
471.2
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprr.dll
3.5
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprv.dll
159.5
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprv.mof
207.81
KB
-rw-rw-rw-
2019-12-07 10:08
ipsecsvc.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
iscsidsc.mof
19.41
KB
-rw-rw-rw-
2019-12-07 10:09
iscsihba.mof
111.33
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiprf.mof
44.96
KB
-rw-rw-rw-
2019-12-07 10:09
iscsirem.mof
4.4
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2.mof
36.29
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
kerberos.mof
8.55
KB
-rw-rw-rw-
2019-12-07 10:09
l2gpstore.mof
1.53
KB
-rw-rw-rw-
2019-12-07 10:09
lsasrv.mof
13.46
KB
-rw-rw-rw-
2019-12-07 10:09
mispace.mof
1.04
MB
-rw-rw-rw-
2019-12-07 10:09
mispace_uninstall.mof
9.12
KB
-rw-rw-rw-
2019-12-07 10:09
mmc.mof
698
B
-rw-rw-rw-
2019-12-07 10:10
mofcomp.exe
26
KB
-rwxrwxrwx
2024-06-13 15:20
mofd.dll
196
KB
-rw-rw-rw-
2024-06-13 15:20
msdtcwmi.dll
165
KB
-rw-rw-rw-
2025-05-14 02:05
msfeeds.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:10
msfeedsbs.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:10
msiscsi.mof
4.69
KB
-rw-rw-rw-
2019-12-07 10:09
mstsc.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
mstscax.mof
2.01
KB
-rw-rw-rw-
2019-12-07 10:10
msv1_0.mof
7.54
KB
-rw-rw-rw-
2019-12-07 10:09
mswmdm.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:10
ncsi.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
netprofm.mof
1.09
KB
-rw-rw-rw-
2019-12-07 10:09
networkitemfactory.mof
683
B
-rw-rw-rw-
2019-12-07 10:09
newdev.mof
3.59
KB
-rw-rw-rw-
2019-12-07 10:09
nlasvc.mof
3.74
KB
-rw-rw-rw-
2019-12-07 10:09
nlsvc.mof
2.81
KB
-rw-rw-rw-
2019-12-07 10:09
npivwmi.mof
31.5
KB
-rw-rw-rw-
2019-12-07 10:09
nshipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:09
onex.mof
4.7
KB
-rw-rw-rw-
2019-12-07 10:09
p2p-mesh.mof
2.32
KB
-rw-rw-rw-
2019-12-07 10:10
p2p-pnrp.mof
2.24
KB
-rw-rw-rw-
2019-12-07 10:10
polstore.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
portabledeviceapi.mof
4.2
KB
-rw-rw-rw-
2019-12-07 15:56
portabledeviceclassextension.mof
3.13
KB
-rw-rw-rw-
2019-12-07 10:10
portabledeviceconnectapi.mof
1.74
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicetypes.mof
3.41
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicewiacompat.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:10
ppcRsopCompSchema.mof
1.95
KB
-rw-rw-rw-
2019-12-07 10:09
ppcRsopUserSchema.mof
1.94
KB
-rw-rw-rw-
2019-12-07 10:09
qmgr.mof
2.25
KB
-rw-rw-rw-
2019-12-07 10:09
rawxml.xsl
623
B
-rw-rw-rw-
2019-12-07 10:08
rdpendp.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:10
regevent.mof
109.08
KB
-rw-rw-rw-
2019-12-07 10:08
samsrv.mof
61.08
KB
-rw-rw-rw-
2019-12-07 10:09
scersop.mof
8.12
KB
-rw-rw-rw-
2019-12-07 10:09
schannel.mof
1.05
KB
-rw-rw-rw-
2019-12-07 10:09
schedprov.dll
178.5
KB
-rw-rw-rw-
2023-11-16 03:00
setupapi.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
stdprov.dll
108.5
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi.mof
329.9
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru.mof
1.85
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru_uninstall.mof
1.61
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_uninstall.mof
13.16
KB
-rw-rw-rw-
2019-12-07 10:09
tcpip.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:09
texttable.xsl
6.13
KB
-rw-rw-rw-
2019-12-07 10:08
textvaluelist.xsl
2.7
KB
-rw-rw-rw-
2019-12-07 10:08
tsmf.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:10
tspkg.mof
1.04
KB
-rw-rw-rw-
2019-12-07 10:09
vds.mof
59.63
KB
-rw-rw-rw-
2019-12-07 10:08
vdswmi.dll
169.5
KB
-rw-rw-rw-
2019-12-07 10:09
viewprov.dll
158.5
KB
-rw-rw-rw-
2025-05-14 02:05
vss.mof
59.05
KB
-rw-rw-rw-
2019-12-07 10:09
vsswmi.dll
113.5
KB
-rw-rw-rw-
2019-12-07 10:10
wbemcntl.dll
294.5
KB
-rw-rw-rw-
2023-11-16 03:00
wbemdisp.dll
237.5
KB
-rw-rw-rw-
2019-12-07 10:09
wbemdisp.tlb
58.5
KB
-rw-rw-rw-
2019-12-07 10:09
wbemprox.dll
36
KB
-rw-rw-rw-
2024-06-13 15:20
wbemsvc.dll
47.5
KB
-rw-rw-rw-
2024-06-13 15:20
wdigest.mof
1.08
KB
-rw-rw-rw-
2019-12-07 10:09
wfs.mof
2.09
KB
-rw-rw-rw-
2019-12-06 19:26
whqlprov.mof
3.88
KB
-rw-rw-rw-
2019-12-07 10:09
wininit.mof
1.71
KB
-rw-rw-rw-
2019-12-07 10:09
winipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:09
wlan.mof
12.58
KB
-rw-rw-rw-
2019-12-07 10:09
wmiutils.dll
101.5
KB
-rw-rw-rw-
2024-06-13 15:20
wmp.mof
4.77
KB
-rw-rw-rw-
2019-04-18 20:43
wpdbusenum.mof
2.74
KB
-rw-rw-rw-
2019-12-07 10:10
wpdcomp.mof
2.75
KB
-rw-rw-rw-
2019-12-07 10:10
wpdfs.mof
2.68
KB
-rw-rw-rw-
2019-12-07 10:10
wpdmtp.mof
3.27
KB
-rw-rw-rw-
2019-12-07 10:10
wpdshext.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:10
wpdsp.mof
2.92
KB
-rw-rw-rw-
2019-12-07 10:10
wscenter.mof
5.81
KB
-rw-rw-rw-
2023-03-15 03:02
wsp_fs.mof
548.78
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_fs_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health.mof
554.91
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health_uninstall.mof
2.31
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr.mof
592.55
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr_uninstall.mof
3.38
KB
-rw-rw-rw-
2019-12-07 10:09
xsl-mappings.xml
2.8
KB
-rw-rw-rw-
2019-12-07 10:08
xwizards.mof
2.15
KB
-rw-rw-rw-
2019-12-07 10:10
Save
Rename
//********************************************* // *** Active Directory Service Provider: SAM //********************************************* #pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") [Dynamic, Description("Active Directory Domain Services: SAM") : amended, Guid("{8e598056-8993-11d2-819e-0000f875a064}"), locale("MS\\0x409")] class MSSAMTrace:EventTrace { }; [Dynamic, Description("SAM User Create") : amended, Guid("{39511dbe-899b-11d2-819e-0000f875a064}"), DisplayName("SamUserCreate"), locale("MS\\0x409") ] class SamUserCreate:MSSAMTrace { }; [Dynamic, Description("SAM User Create") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamUserCreate_Start:SamUserCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM User Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamUserCreate_End:SamUserCreate { }; [Dynamic, Description("SAM Computer Create") : amended, Guid("{abb14b68-899b-11d2-819e-0000f875a064}"), DisplayName("SamCompCreate"), locale("MS\\0x409") ] class SamCompCreate:MSSAMTrace { }; [Dynamic, Description("SAM Computer Create"), EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCompCreate_Start:SamCompCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Computer Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCompCreate_End:SamCompCreate { }; [Dynamic, Description("SAM Group Create") : amended, Guid("{c8eb5e5c-899c-11d2-819e-0000f875a064}"), DisplayName("SamGrpCreate"), locale("MS\\0x409") ] class SamGrpCreate:MSSAMTrace { }; [Dynamic, Description("SAM Group Create") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGrpCreate_Start:SamGrpCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Group Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGrpCreate_End:SamGrpCreate { }; [Dynamic, Description("SAM Add Member to Group") : amended, Guid("{f9d2ba6a-899c-11d2-819e-0000f875a064}"), DisplayName("SamAddMemGrp"), locale("MS\\0x409") ] class SamAddMemGrp:MSSAMTrace { }; [Dynamic, Description("SAM Add Member to Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamAddMemGrp_Start:SamAddMemGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Add Member to Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamAddMemGrp_End:SamAddMemGrp { }; [Dynamic, Description("SAM Delete Member From Group") : amended, Guid("{250959aa-899d-11d2-819e-0000f875a064}"), DisplayName("SamDelMemGrp"), locale("MS\\0x409") ] class SamDelMemGrp:MSSAMTrace { }; [Dynamic, Description("SAM Delete Member From Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDelMemGrp_Start:SamDelMemGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Member From Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDelMemGrp_End:SamDelMemGrp { }; [Dynamic, Description("SAM Password Change") : amended, Guid("{45fc997e-899d-11d2-819e-0000f875a064}"), DisplayName("SamPwdChng"), locale("MS\\0x409") ] class SamPwdChng:MSSAMTrace { }; [Dynamic, Description("SAM Password Change") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamPwdChng_Start:SamPwdChng { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Password Change") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamPwdChng_End:SamPwdChng { }; [Dynamic, Description("SAM User Password Set") : amended, Guid("{62bef71e-899d-11d2-819e-0000f875a064}"), DisplayName("SamUserPwdSet"), locale("MS\\0x409") ] class SamUserPwdSet:MSSAMTrace { }; [Dynamic, Description("SAM User Password Set") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamUserPwdSet_Start:SamUserPwdSet { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM User Password Set") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamUserPwdSet_End:SamUserPwdSet { }; [Dynamic, Description("SAM Computer Password Set") : amended, Guid("{880217b8-899d-11d2-819e-0000f875a064}"), DisplayName("SamCompPwdSet"), locale("MS\\0x409") ] class SamCompPwdSet:MSSAMTrace { }; [Dynamic, Description("SAM Computer Password Set") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCompPwdSet_Start:SamCompPwdSet { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Computer Password Set") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCompPwdSet_End:SamCompPwdSet { }; [Dynamic, Description("SAM Password Push PDC") : amended, Guid("{1f228de8-8a6c-11d2-819e-0000f875a064}"), DisplayName("SamPwdPushPdc"), locale("MS\\0x409") ] class SamPwdPushPdc:MSSAMTrace { }; [Dynamic, Description("SAM Password Push PDC") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamPwdPushPdc_Start:SamPwdPushPdc { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Password Push PDC") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamPwdPushPdc_End:SamPwdPushPdc { }; [Dynamic, Description("SAM Id By Name") : amended, Guid("{a41d90bc-899d-11d2-819e-0000f875a064}"), DisplayName("SamIdByName"), locale("MS\\0x409") ] class SamIdByName:MSSAMTrace { }; [Dynamic, Description("SAM Id By Name") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamIdByName_Start:SamIdByName { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Id By Name") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamIdByName_End:SamIdByName { }; [Dynamic, Description("SAM Name By Id") : amended, Guid("{25059476-899f-11d2-819e-0000f875a064}"), DisplayName("SamNameById"), locale("MS\\0x409") ] class SamNameById:MSSAMTrace { }; [Dynamic, Description("SAM Name By Id") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamNameById_Start:SamNameById { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Name By Id") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamNameById_End:SamNameById { }; [Dynamic, Description("SAM Connect") : amended, Guid("{8c89045c-3f5d-4289-939a-fb854000cb6b}"), DisplayName("SamConnect"), locale("MS\\0x409") ] class SamConnect:MSSAMTrace { }; [Dynamic, Description("SAM Connect") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamConnect_Start:SamConnect { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Connect") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamConnect_End:SamConnect { }; [Dynamic, Description("SAM Close Handle") : amended, Guid("{dbc0ceab-cff3-4c0f-85f2-0c2107142f36}"), DisplayName("SamCloseHandle"), locale("MS\\0x409") ] class SamCloseHandle:MSSAMTrace { }; [Dynamic, Description("SAM Close Handle") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCloseHandle_Start:SamCloseHandle { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Close Handle") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCloseHandle_End:SamCloseHandle { }; [Dynamic, Description("SAM Set Security Object") : amended, Guid("{74e10cbb-202e-4a97-871d-8547972b5141}"), DisplayName("SamSetSecurityObj"), locale("MS\\0x409") ] class SamSetSecurityObj:MSSAMTrace { }; [Dynamic, Description("SAM Set Security Object") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetSecurityObj_Start:SamSetSecurityObj { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Security Object") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetSecurityObj_End:SamSetSecurityObj { }; [Dynamic, Description("SAM Query Security Object") : amended, Guid("{676347f3-fd20-4e7d-90b1-77e35f84af9a}"), DisplayName("SamQuerySecurityObj"), locale("MS\\0x409") ] class SamQuerySecurityObj:MSSAMTrace { }; [Dynamic, Description("SAM Query Security Object") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQuerySecurityObj_Start:SamQuerySecurityObj { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Security Object") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQuerySecurityObj_End:SamQuerySecurityObj { }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, Guid("{f8012701-7e99-49c5-b832-1db8bc4a610d}"), DisplayName("SamShutdownSamSrv"), locale("MS\\0x409") ] class SamShutdownSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamShutdownSamSrv_Start:SamShutdownSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamShutdownSamSrv_End:SamShutdownSamSrv { }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, Guid("{a11e5d6b-353d-4bf6-97a8-ede4cba45524}"), DisplayName("SamLookupDomInSamSrv"), locale("MS\\0x409") ] class SamLookupDomInSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamLookupDomInSamSrv_Start:SamLookupDomInSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamLookupDomInSamSrv_End:SamLookupDomInSamSrv { }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, Guid("{7c65ceb0-75ba-46b9-884e-67e038c5b003}"), DisplayName("SamEnumDomInSamSrv"), locale("MS\\0x409") ] class SamEnumDomInSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumDomInSamSrv_Start:SamEnumDomInSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumDomInSamSrv_End:SamEnumDomInSamSrv { }; [Dynamic, Description("SAM Open Domain") : amended, Guid("{6e1f2449-f1f3-4634-b51f-46e2c6625892}"), DisplayName("SamOpenDomain"), locale("MS\\0x409") ] class SamOpenDomain:MSSAMTrace { }; [Dynamic, Description("SAM Open Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenDomain_Start:SamOpenDomain { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenDomain_End:SamOpenDomain { }; [Dynamic, Description("SAM Query Information Domain") : amended, Guid("{89399c21-4aaf-408e-ba39-ab831a1298d5}"), DisplayName("SamQueryInfoDom"), locale("MS\\0x409") ] class SamQueryInfoDom:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoDom_Start:SamQueryInfoDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoDom_End:SamQueryInfoDom { }; [Dynamic, Description("SAM Set Information Domain") : amended, Guid("{45309ef4-c59e-425e-b95b-19f1c5a3c55a}"), DisplayName("SamSetInfoDom"), locale("MS\\0x409") ] class SamSetInfoDom:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoDom_Start:SamSetInfoDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoDom_End:SamSetInfoDom { }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, Guid("{5d11e02f-0c36-4180-ad07-89062c9df9ec}"), DisplayName("SamEnumGrpsInDom"), locale("MS\\0x409") ] class SamEnumGrpsInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumGrpsInDom_Start:SamEnumGrpsInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumGrpsInDom_End:SamEnumGrpsInDom { }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, Guid("{07ffaa1d-34f6-49cd-b541-2f0d7dff15c4}"), DisplayName("SamEnumUsersInDom"), locale("MS\\0x409") ] class SamEnumUsersInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumUsersInDom_Start:SamEnumUsersInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumUsersInDom_End:SamEnumUsersInDom { }; [Dynamic, Description("SAM Create Alias In Domain") : amended, Guid("{5e612efd-c05e-4f76-bced-f5607aa3d46e}"), DisplayName("SamCreateAliasInDom"), locale("MS\\0x409") ] class SamCreateAliasInDom:MSSAMTrace { }; [Dynamic, Description("SAM Create Alias In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCreateAliasInDom_Start:SamCreateAliasInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Create Alias In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCreateAliasInDom_End:SamCreateAliasInDom { }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, Guid("{f1fea491-bfa6-436c-a178-a70d03b4fb1a}"), DisplayName("SamEnumAliasesInDom"), locale("MS\\0x409") ] class SamEnumAliasesInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumAliasesInDom_Start:SamEnumAliasesInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumAliasesInDom_End:SamEnumAliasesInDom { }; [Dynamic, Description("SAM Get Alias Membership") : amended, Guid("{1cf5fd19-1ac1-4324-84f7-970a634a91ee}"), DisplayName("SamGetAliasMem"), locale("MS\\0x409") ] class SamGetAliasMem:MSSAMTrace { }; [Dynamic, Description("SAM Get Alias Membership") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetAliasMem_Start:SamGetAliasMem { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Alias Membership") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetAliasMem_End:SamGetAliasMem { }; [Dynamic, Description("SAM Open Group") : amended, Guid("{b41d7bdf-4249-4651-ac0f-1879be0d5c0c}"), DisplayName("SamOpenGrp"), locale("MS\\0x409") ] class SamOpenGrp:MSSAMTrace { }; [Dynamic, Description("SAM Open Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenGrp_Start:SamOpenGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenGrp_End:SamOpenGrp { }; [Dynamic, Description("SAM Query Information Group") : amended, Guid("{632fcc78-6057-48f9-8d5f-4bb0f73d3cd1}"), DisplayName("SamQueryInfoGrp"), locale("MS\\0x409") ] class SamQueryInfoGrp:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoGrp_Start:SamQueryInfoGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoGrp_End:SamQueryInfoGrp { }; [Dynamic, Description("SAM Set Information Group") : amended, Guid("{26106246-4473-4295-841b-4a51c6afc3db}"), DisplayName("SamSetInfoGrp"), locale("MS\\0x409") ] class SamSetInfoGrp:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoGrp_Start:SamSetInfoGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoGrp_End:SamSetInfoGrp { }; [Dynamic, Description("SAM Delete Group") : amended, Guid("{5f7c4ba5-d6a4-4625-900e-48fa7811e06a}"), DisplayName("SamDeleteGrp"), locale("MS\\0x409") ] class SamDeleteGrp:MSSAMTrace { }; [Dynamic, Description("SAM Delete Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteGrp_Start:SamDeleteGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteGrp_End:SamDeleteGrp { }; [Dynamic, Description("SAM Get Members In Group") : amended, Guid("{5954bc51-c5ec-4aaa-831c-6f2c1b2515b6}"), DisplayName("SamGetMemInGrp"), locale("MS\\0x409") ] class SamGetMemInGrp:MSSAMTrace { }; [Dynamic, Description("SAM Get Members In Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetMemInGrp_Start:SamGetMemInGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Members In Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetMemInGrp_End:SamGetMemInGrp { }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, Guid("{0254ba6d-7ff0-4bfe-a3f9-8fd8da667641}"), DisplayName("SamSetMemAttrsOfGrp"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp:MSSAMTrace { }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp_Start:SamSetMemAttrsOfGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp_End:SamSetMemAttrsOfGrp { }; [Dynamic, Description("SAM Open Alias") : amended, Guid("{ba41c883-592f-4ab9-b2a9-c6263b011fe7}"), DisplayName("SamOpenAlias"), locale("MS\\0x409") ] class SamOpenAlias:MSSAMTrace { }; [Dynamic, Description("SAM Open Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenAlias_Start:SamOpenAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenAlias_End:SamOpenAlias { }; [Dynamic, Description("SAM Query Information Alias") : amended, Guid("{419f025a-bf06-4673-af66-d230bec2af02}"), DisplayName("SamQueryInfoAlias"), locale("MS\\0x409") ] class SamQueryInfoAlias:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoAlias_Start:SamQueryInfoAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoAlias_End:SamQueryInfoAlias { }; [Dynamic, Description("SAM Set Information Alias") : amended, Guid("{e712d39d-a3a6-4224-a1bd-4717b24e4e8c}"), DisplayName("SamSetInfoAlias"), locale("MS\\0x409") ] class SamSetInfoAlias:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoAlias_Start:SamSetInfoAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoAlias_End:SamSetInfoAlias { }; [Dynamic, Description("SAM Delete Alias") : amended, Guid("{fbfe2540-452b-41bb-9219-dfb6fd1a129b}"), DisplayName("SamDeleteAlias"), locale("MS\\0x409") ] class SamDeleteAlias:MSSAMTrace { }; [Dynamic, Description("SAM Delete Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteAlias_Start:SamDeleteAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteAlias_End:SamDeleteAlias { }; [Dynamic, Description("SAM Add Member To Alias") : amended, Guid("{3a2e63d1-5dc4-4168-85ea-3e331f88ce83}"), DisplayName("SamAddMemToAlias"), locale("MS\\0x409") ] class SamAddMemToAlias:MSSAMTrace { }; [Dynamic, Description("SAM Add Member To Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamAddMemToAlias_Start:SamAddMemToAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Add Member To Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamAddMemToAlias_End:SamAddMemToAlias { }; [Dynamic, Description("SAM Remove Member From Alias") : amended, Guid("{6ba1639c-afc4-454e-b3e0-5e8f7fc39af9}"), DisplayName("SamRemoveMemFromAlias"), locale("MS\\0x409") ] class SamRemoveMemFromAlias:MSSAMTrace { }; [Dynamic, Description("SAM Remove Member From Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamRemoveMemFromAlias_Start:SamRemoveMemFromAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Remove Member From Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamRemoveMemFromAlias_End:SamRemoveMemFromAlias { }; [Dynamic, Description("SAM Get Members In Alias") : amended, Guid("{5cec3d52-6eeb-474d-b468-58362888f1b0}"), DisplayName("SamGetMemInAlias"), locale("MS\\0x409") ] class SamGetMemInAlias:MSSAMTrace { }; [Dynamic, Description("SAM Get Members In Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetMemInAlias_Start:SamGetMemInAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Members In Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetMemInAlias_End:SamGetMemInAlias { }; [Dynamic, Description("SAM Open User") : amended, Guid("{b8d2bc4a-1525-4386-bb1c-6bb2e24eb001}"), DisplayName("SamOpenUser"), locale("MS\\0x409") ] class SamOpenUser:MSSAMTrace { }; [Dynamic, Description("SAM Open User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenUser_Start:SamOpenUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenUser_End:SamOpenUser { }; [Dynamic, Description("SAM Delete User") : amended, Guid("{c2a0e094-a178-4372-b4fe-a33e48c3585c}"), DisplayName("SamDeleteUser"), locale("MS\\0x409") ] class SamDeleteUser:MSSAMTrace { }; [Dynamic, Description("SAM Delete User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteUser_Start:SamDeleteUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteUser_End:SamDeleteUser { }; [Dynamic, Description("SAM Query Information User") : amended, Guid("{e1cb227a-6d55-4282-a5f7-6fa4a5922c0b}"), DisplayName("SamQueryInfoUser"), locale("MS\\0x409") ] class SamQueryInfoUser:MSSAMTrace { }; [Dynamic, Description("SAM Query Information User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoUser_Start:SamQueryInfoUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoUser_End:SamQueryInfoUser { }; [Dynamic, Description("SAM Set Information User") : amended, Guid("{bc80e27f-6b74-4da9-abfc-2e4e82b81000}"), DisplayName("SamSetInfoUser"), locale("MS\\0x409") ] class SamSetInfoUser:MSSAMTrace { }; [Dynamic, Description("SAM Set Information User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoUser_Start:SamSetInfoUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoUser_End:SamSetInfoUser { }; [Dynamic, Description("SAM Change Password Computer") : amended, Guid("{19b30cde-3e41-4cff-83c8-3df2779f840c}"), DisplayName("SamChangePwdComputer"), locale("MS\\0x409") ] class SamChangePwdComputer:MSSAMTrace { }; [Dynamic, Description("SAM Change Password Computer") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamChangePwdComputer_Start:SamChangePwdComputer { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Change Password Computer") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamChangePwdComputer_End:SamChangePwdComputer { }; [Dynamic, Description("SAM Get Groups For User") : amended, Guid("{0e3913c5-9760-4ced-b133-004a64e8d53c}"), DisplayName("SamGetGrpsForUser"), locale("MS\\0x409") ] class SamGetGrpsForUser:MSSAMTrace { }; [Dynamic, Description("SAM Get Groups For User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetGrpsForUser_Start:SamGetGrpsForUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Groups For User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetGrpsForUser_End:SamGetGrpsForUser { }; [Dynamic, Description("SAM Query Display Information") : amended, Guid("{eb225178-f5f0-42b7-895b-db89276f647a}"), DisplayName("SamQueryDisplayInfo"), locale("MS\\0x409") ] class SamQueryDisplayInfo:MSSAMTrace { }; [Dynamic, Description("SAM Query Display Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryDisplayInfo_Start:SamQueryDisplayInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Display Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryDisplayInfo_End:SamQueryDisplayInfo { }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, Guid("{aceb7864-9a14-4c73-8ed0-94ec53f6651c}"), DisplayName("SamGetDisplayEnumIdx"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx:MSSAMTrace { }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx_Start:SamGetDisplayEnumIdx { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx_End:SamGetDisplayEnumIdx { }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, Guid("{4ff7a7db-43ca-470a-8b64-3003e2d22042}"), DisplayName("SamGetUserDomPwdInfo"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo_Start:SamGetUserDomPwdInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo_End:SamGetUserDomPwdInfo { }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, Guid("{8919f267-a053-4669-aa69-2da0d4a20d92}"), DisplayName("SamRemoveMemFromForeignDom"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom:MSSAMTrace { }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom_Start:SamRemoveMemFromForeignDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom_End:SamRemoveMemFromForeignDom { }; [Dynamic, Description("SAM Get Domain Password Information") : amended, Guid("{ff0c6ce2-9528-4a91-b9c7-bcf834b6f79a}"), DisplayName("SamGetDomPwdInfo"), locale("MS\\0x409") ] class SamGetDomPwdInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get Domain Password Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetDomPwdInfo_Start:SamGetDomPwdInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Domain Password Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetDomPwdInfo_End:SamGetDomPwdInfo { }; [Dynamic, Description("SAM Set Boot Key Information") : amended, Guid("{2e991575-c2ed-42a7-97ff-a0d6571f1862}"), DisplayName("SamSetBootKeyInfo"), locale("MS\\0x409") ] class SamSetBootKeyInfo:MSSAMTrace { }; [Dynamic, Description("SAM Set Boot Key Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetBootKeyInfo_Start:SamSetBootKeyInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Boot Key Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetBootKeyInfo_End:SamSetBootKeyInfo { }; [Dynamic, Description("SAM Get Boot Key Information") : amended, Guid("{33be4128-d02e-4b6f-949e-ab77cc8164b1}"), DisplayName("SamGetBootKeyInfo"), locale("MS\\0x409") ] class SamGetBootKeyInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get Boot Key Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetBootKeyInfo_Start:SamGetBootKeyInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Boot Key Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetBootKeyInfo_End:SamGetBootKeyInfo { }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, Guid("{96bd320f-1e51-4c06-86f3-ee64f0a2f0cf}"), DisplayName("SampProcessMappedAttributes"), locale("MS\\0x409") ] class SamProcessMappedAttributes:MSSAMTrace { }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamProcessMappedAttributes_Start:SamProcessMappedAttributes { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamProcessMappedAttributes_End:SamProcessMappedAttributes { };