0byt3m1n1
Path:
C:
/
Windows
/
SysWOW64
/
[
Home
]
File: NdfEventView.xml
<ViewerConfig> <QueryConfig> <QueryParams> <Simple> <Source>Microsoft-Windows-Diagnostics-Networking</Source> <Channel>System</Channel> <RelativeTimeInfo>0</RelativeTimeInfo> <EventId>6100</EventId> </Simple></QueryParams> <QueryNode> <Name ResourceId="%windir%\system32\ndfapi.dll, -40124">Network Diagnostics Events</Name> <QueryList> <Query Id="0" Path="System"><Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Diagnostics-Networking'] and (EventID=6100)]]</Select></Query> </QueryList> </QueryNode> </QueryConfig> </ViewerConfig>