@@ -103,29 +103,32 @@ Event Viewers:
10310330 . Microsoft-Windows-AppLocker/MSI and Script
10410431 . Microsoft-Windows-AppLocker/Packaged app-Deployment
10510532 . Microsoft-Windows-AppLocker/Packaged app-Execution
106- 33 . Microsoft-Windows-Bitlocker/Bitlocker Management
107- 34 . Microsoft-Windows-HelloForBusiness/Operational
108- 35 . Microsoft-Windows-SENSE/Operational
109- 36 . Microsoft-Windows-SenseIR/Operational
110- 37 . Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
111- 38 . Setup
112- 39 . System
106+ 33 . Microsoft-Windows-AppxPackaging/Operational
107+ 34 . Microsoft-Windows-Bitlocker/Bitlocker Management
108+ 35 . Microsoft-Windows-HelloForBusiness/Operational
109+ 36 . Microsoft-Windows-SENSE/Operational
110+ 37 . Microsoft-Windows-SenseIR/Operational
111+ 38 . Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
112+ 39 . Setup
113+ 40 . System
113114
114115Files:
115116
116- 40 . %ProgramData%\Microsoft\DiagnosticLogCSP\Collectors\* .etl
117- 41 . %ProgramData%\Microsoft\IntuneManagementExtension\Logs\* .*
118- 42 . %ProgramData%\Microsoft\Windows Defender\Support\MpSupportFiles.cab
119- 43 . %ProgramData%\Microsoft\Windows\WlanReport\wlan-report-latest.html
120- 44 . %temp%\MDMDiagnostics\battery-report.html
121- 45 . %temp%\MDMDiagnostics\energy-report.html
122- 46 . %temp%\MDMDiagnostics\mdmlogs-<Date/Time>.cab
123- 47 . %temp%\MDMDiagnostics\msinfo32.log
124- 48 . %windir%\ccm\logs\* .log
125- 49 . %windir%\ccmsetup\logs\* .log
126- 50 . %windir%\logs\CBS\cbs.log
127- 51 . %windir%\logs\measuredboot\* .*
128- 52 . %windir%\Logs\WindowsUpdate\* .etl
117+ 41 . %ProgramData%\Microsoft\DiagnosticLogCSP\Collectors\* .etl
118+ 42 . %ProgramData%\Microsoft\IntuneManagementExtension\Logs\* .*
119+ 43 . %ProgramData%\Microsoft\Windows Defender\Support\MpSupportFiles.cab
120+ 44 . %ProgramData%\Microsoft\Windows\WlanReport\wlan-report-latest.html
121+ 45 . %temp%\MDMDiagnostics\battery-report.html
122+ 46 . %temp%\MDMDiagnostics\energy-report.html
123+ 47 . %temp%\MDMDiagnostics\mdmlogs-<Date/Time>.cab
124+ 48 . %temp%\MDMDiagnostics\msinfo32.log
125+ 49 . %windir%\ccm\logs\* .log
126+ 50 . %windir%\ccmsetup\logs\* .log
127+ 51 . %windir%\logs\CBS\cbs.log
128+ 52 . %windir%\logs\measuredboot\* .*
129+ 53 . %windir%\Logs\WindowsUpdate\* .etl
130+ 54 . %windir%\temp\% computername%* .log
131+ 55 . %windir%\temp\officeclicktorun* .log
129132
130133## Disable device diagnostics
131134
0 commit comments