47450140-ASTM-A-105

<?xml version="1.0" encoding="utf-8"?
><Rules xmlns="urn:Rules"><Rule RuleId="606"

RuleVersion="1" DataClassifications="SM"
EventName="Office.Telemetry.Event.Office.Apple"
SamplingPolicy="CriticalBusinessImpact" Target="Upload"
xmlns=""><RuleInterfaces><RuleInterface Name="Event"
/></RuleInterfaces><Sources><ULSCategorySeveritySource Token="1"
CategoryName="NexusTenantTokenApple" Severities="Medium" /></Sources><Column
OutType="WSTRING" Index="0" Nullable="false" Name="EventName"><Source Token="1"
Field="EventName" /></Column><Column OutType="WSTRING" Index="1" Nullable="true"
Name="EventContract"><Source Token="1" Field="EventContract"
MissingFieldHandling="Ignore" /></Column><Column OutType="UINT64" Index="2"
Nullable="false" Name="EventFlags"><Source Token="1" Field="EventFlags"
/></Column><Column OutType="DOUBLE" Index="3" Nullable="false"
Name="EventSampleRate"><Constant Value="1.0" OutType="DOUBLE" /></Column><Column
OutType="WSTRING" Index="4" Nullable="false" Name="EventData"><Source Token="1"
Field="EventData" /></Column><Column OutType="WSTRING" Index="5" Nullable="false"
Name="EventContractInfo"><Source Token="1" Field="EventContractInfo"
/></Column><Column OutType="WSTRING" Index="6" Nullable="false"
Name="EventTypeInfo"><Source Token="1" Field="EventTypeInfo" /></Column><Column
OutType="WSTRING" Index="7" Nullable="false"
Name="EventDataClassificationInfo"><Source Token="1"
Field="EventDataClassificationInfo" /></Column><Column OutType="WSTRING" Index="8"
Nullable="true" Name="AriaTenantToken"><Constant
Value="44c1da679ff8463c8a859e2cb25140b1-f21a5362-f2d6-46e6-a1cb-52268260a5c9-7560"
OutType="WSTRING" /></Column><Triggers><Source Token="1" /></Triggers></Rule><Rule
RuleId="615" RuleVersion="0" DataClassifications="SM"
EventName="Office.Telemetry.Event.Office.Help"
CategoryName="NexusTenantTokenHelp" Severities="Medium" /></Sources><Column
Value="f0ef8c1d59b54013a78c8cce0b75bb44-d4a21f0a-ff29-4a4c-81e7-bc7f69607cc5-7242"
EventName="Office.Telemetry.Event.Office.Android"
CategoryName="NexusTenantTokenAndroid" Severities="Medium" /></Sources><Column
Value="7e90593cb38e43c08344e14a8f21f1a7-33a221bd-23a1-4e0d-9487-eaf4c101acf3-6719"
EventName="Office.Telemetry.Event.Office.Publish"
CategoryName="NexusTenantTokenPublish" Severities="Medium" /></Sources><Column
Value="d7d902d9768547c384bde3e2e9594408-159e806d-3930-4f73-a6b9-cf9ec540f761-6863"
EventName="Office.Telemetry.Event.Office.Visio"
CategoryName="NexusTenantTokenVisio" Severities="Medium" /></Sources><Column
Value="e056f045a0e64cb0b557a5e04686cbe1-80a95768-b4c0-440d-aac7-b7b2b5d0ddbb-7628"
EventName="Office.Telemetry.Event.Office.Feedback"
CategoryName="NexusTenantTokenFeedback" Severities="Medium" /></Sources><Column
Value="d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360"
EventName="Office.Telemetry.Event.Office.DynamicCanvas"
CategoryName="NexusTenantTokenWildfire" Severities="Medium" /></Sources><Column
Value="350d24c16a934c2d9734791ed7301d8e-73bafc90-ca43-424c-815a-63b076120b49-6725"
EventName="Office.Telemetry.Event.Office.Hub"
CategoryName="NexusTenantTokenHub" Severities="Medium" /></Sources><Column
Value="728e5f24cecb4c6b996523fba41888e3-2f50983b-4d96-44f4-8ab2-bd7b608671ed-7872"
EventName="Office.Telemetry.Event.Office.Security"
CategoryName="NexusTenantTokenSecurity" Severities="Medium" /></Sources><Column
Value="05e0c2fd5fff432bac7a175220223da5-2eec7cb2-952b-4862-9fd4-16ed083da5ec-7364"
EventName="Office.Telemetry.Event.Office.Apphost"
CategoryName="NexusTenantTokenApphost" Severities="Medium" /></Sources><Column
Value="92468150dd144e02a22a7f14aeb25aec-f4369824-d924-4f31-ba9f-58bb9848c091-7527"
EventName="Office.Telemetry.Event.Office.Text"
CategoryName="NexusTenantTokenTextAndFonts" Severities="Medium" /></Sources><Column
Value="9c9dcb87a41b41bebea94330a23d828d-35611aa0-46ca-4351-98e0-5746b84e5be3-6973"
EventName="Office.Telemetry.Event.Office.Xaml"
CategoryName="NexusTenantTokenXaml" Severities="Medium" /></Sources><Column
Value="1ee2f5d6b2c94518b99911f4ba4886c5-02df2dc0-3394-4446-9267-9ca2961635c1-7151"
EventName="Office.Telemetry.Event.Office.Release"
CategoryName="NexusTenantTokenRelease" Severities="Medium" /></Sources><Column
Value="3a5d8522875d4c0cab910ff387cdbfb5-2c8b80ff-6a32-439d-9197-1ecda9fe5d2c-7140"
EventName="Office.Telemetry.Event.Office.Moxie"
CategoryName="NexusTenantTokenMoxie" Severities="Medium" /></Sources><Column
Value="b73ed6af92164ade854eb27484933ae9-dd8953ff-d42f-4c4d-927a-63fa65d0fa07-7421"
EventName="Office.Telemetry.Event.Office.ActivityFeed"
CategoryName="NexusTenantTokenActivityFeed" Severities="Medium" /></Sources><Column
Value="6ec2d1c85a3f48918f637c0d25bab63f-c72c9ec6-73bb-43d4-baa6-14c53511510b-6962"
EventName="Office.Telemetry.Event.Office.IntelligentServices"
CategoryName="NexusTenantTokenIntelligentServices" Severities="Medium"
/></Sources><Column OutType="WSTRING" Index="0" Nullable="false"
Name="EventName"><Source Token="1" Field="EventName" /></Column><Column
OutType="WSTRING" Index="1" Nullable="true" Name="EventContract"><Source Token="1"
Field="EventContract" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT64" Index="2" Nullable="false" Name="EventFlags"><Source Token="1"
Field="EventFlags" /></Column><Column OutType="DOUBLE" Index="3" Nullable="false"
Value="ca7bd155a4374d74b39a378fd265640b-88e0ec23-1ffd-4c59-86b0-53a8e0f5acd5-7115"
EventName="Office.Telemetry.Event.Office.Airspace"
CategoryName="NexusTenantTokenAirspace" Severities="Medium" /></Sources><Column
Value="da06315a64204a91b8c35628ae841a61-c2fdf120-6e99-4fdd-900e-ec9868e5e64b-7449"
EventName="Office.Telemetry.Event.Office.Resources"
CategoryName="NexusTenantTokenResources" Severities="Medium" /></Sources><Column
Value="eb24ada54785433685efe9f034687700-a7e8579a-5cbb-4ea8-9113-7299c0a610b3-6667"
EventName="Office.Telemetry.Event.Office.Canvas"
CategoryName="NexusTenantTokenCanvas" Severities="Medium" /></Sources><Column
Value="625e97e3f60f498b93f637a1326ca839-4fa1bdd2-bae5-44a3-8d8c-a510d37d8472-7128"
EventName="Office.Telemetry.Event.Office.Word" SamplingPolicy="CriticalUsage"
Target="Upload" xmlns=""><RuleInterfaces><RuleInterface Name="Event"
CategoryName="NexusTenantTokenWord" Severities="Medium" /><StringRegex Token="2"
RegEx="Office.Word.Accessibility.TextRangePattern.GetBoundingRectangles"><Source
Token="1" Field="EventName" /></StringRegex><StringRegex Token="3"
RegEx="Office.Word.Accessibility.LearningTools."><Source Token="1"
Field="EventName" /></StringRegex><UnionSource Token="4"><Source Token="2"
/><Source Token="3" /></UnionSource><Filter Token="5"><Operator
Type="NE"><Left><Source Token="4" Field="EventName" /></Left><Right><Constant
Value="" OutType="WSTRING" /></Right></Operator></Filter></Sources><Column
Value="bffd26d9e49b4b7db4cb4df3425812de-d3cf8f62-3ad9-4007-99a8-8fb5cc89fd5d-7896"
OutType="WSTRING" /></Column><Triggers><Source Token="5"
/></Triggers><Resets><Source Token="1" /></Resets></Rule><Rule RuleId="644"
EventName="Office.Telemetry.Event.Office.ExcelCriticalBusinessImpact"
CategoryName="NexusTenantTokenExcel" Severities="Medium" /><Filter
Token="2"><Operator Type="OR"><Left><Operator Type="OR"><Left><Operator
Type="EQ"><Left><Source Token="1" Field="EventName" /></Left><Right><Constant
Value="Office.Excel.Command.RefreshAll" OutType="WSTRING"
/></Right></Operator></Left><Right><Operator Type="EQ"><Left><Source Token="1"
Field="EventName" /></Left><Right><Constant Value="Office.Excel.Command.RefExtData"
OutType="WSTRING" /></Right></Operator></Right></Operator></Left><Right><Operator
Value="Office.Excel.Command.FnSave" OutType="WSTRING"
/></Right></Operator></Right></Operator></Filter></Sources><Column
Value="19eb5e37de684ce38ce5cf3d5842d3f7-e8722941-bde5-4b98-9cd5-2775ec51482c-6873"
EventName="Office.Telemetry.Event.Office.ClickToRunCritical"
CategoryName="NexusTenantTokenClickToRun" Severities="Medium" /><Filter
Token="2"><Operator Type="OR"><Left><Operator Type="EQ"><Left><Source Token="1"
Field="EventName" /></Left><Right><Constant
Value="Office.ClickToRun.TransactionalFileOperations.ApplyChangesUsingRobustFileOps
" OutType="WSTRING" /></Right></Operator></Left><Right><Operator
Value="Office.ClickToRun.TransactionalFileOperations.ApplyChangesUsingTransactional
FileOperations" OutType="WSTRING"
/></Right></Operator></Right></Operator></Filter></Sources><Column
Value="0da1917aa56040d3a011c3813ca36107-76f080d8-b37f-4635-8054-5c133fcd04c4-6587"
EventName="Office.Telemetry.Event.Office.LicensingCritical"
CategoryName="NexusTenantTokenLicensing" Severities="Medium" /><Filter
Token="2"><Operator Type="AND"><Left><Operator Type="AND"><Left><Operator
Value="Office.Licensing.QuickValidation.LoadLicense" OutType="WSTRING"
/></Right></Operator></Left><Right><Operator Type="NE"><Left><Source Token="1"
Value="Office.Licensing.FullValidation.LoadLicense" OutType="WSTRING"
/></Right></Operator></Right></Operator></Left><Right><Operator
Type="AND"><Left><Operator Type="NE"><Left><Source Token="1" Field="EventName"
/></Left><Right><Constant
Value="Office.Licensing.QuickValidation.CreateSlapiObject" OutType="WSTRING"
Value="Office.Licensing.FullValidation.CreateSlapiObject" OutType="WSTRING"
/></Right></Operator></Right></Operator></Right></Operator></Filter><StringRegex
Token="3" RegEx="Office.Licensing.Activation"><Source Token="2"
Field="EventName" /></StringRegex><StringRegex Token="4"
RegEx="Office.Licensing.ActivationWizard"><Source Token="2" Field="EventName"
/></StringRegex><StringRegex Token="5"
RegEx="Office.Licensing.AutoLoadLiveIdentityFound"><Source Token="2"
RegEx="Office.Licensing.EntitlementPickerShown"><Source
RegEx="Office.Licensing.FullValidation"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.GetEntitlement"><Source Token="2" Field="EventName"
/></StringRegex><StringRegex Token="9" RegEx="Office.Licensing.GetKey"><Source
RegEx="Office.Licensing.GetLicense"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.HrDispatchSubTaskStart"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.InClientPinRedemption"><Source Token="2"
RegEx="Office.Licensing.InGrace"><Source Token="2" Field="EventName"
/></StringRegex><StringRegex Token="14" RegEx="Office.Licensing.InRFM"><Source
RegEx="Office.Licensing.InstallKey"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.InstallKey.C2R"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.InstallKey.C2RDeferred"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.InstallKey.Catalyst"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.InstallKey.DirectInstall"><Source Token="2"
RegEx="Office.Licensing.InvokeLicenseWizard"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.IsSessionLicensing"><Source Token="2" Field="EventName"
/></StringRegex><StringRegex Token="22" RegEx="Office.Licensing.Licensed"><Source
RegEx="Office.Licensing.LicenseRepairFailure"><Source Token="2"
RegEx="Office.Licensing.LicensingBar"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.LicensingInstallationWorkflow"><Source Token="2"
RegEx="Office.Licensing.LicExitOfficeProcess"><Source Token="2"
RegEx="Office.Licensing.LoadIdentityTicket"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.OnlineRepair"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.QuickValidation"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.RepairLicensing"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.ReportActivation"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.SCASessionStart"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.SearchForSessionToken"><Source Token="2"
RegEx="Office.Licensing.SignInDialog"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.SkuToSkuConversion"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.TryGetSessionTokenFromChosenEntitlement"><Source Token="2"
RegEx="Office.Licensing.UnknownLicStatus"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.UseGraceKey"><Source Token="2" Field="EventName"
RegEx="Office.Licensing.ValidateSessionToken"><Source Token="2"
RegEx="Office.Licensing.WriteSessionTokenToCache"><Source Token="2"
RegEx="Office.Licensing.AutoLoadOrgIdentityFound"><Source Token="2"
/><Source Token="4" /><Source Token="5" /><Source Token="6" /><Source Token="7"
/><Source Token="8" /><Source Token="9" /><Source Token="10" /><Source
Token="11" /><Source Token="12" /><Source Token="13" /><Source Token="14" /><Source
Token="39" /><Source Token="40" /><Source Token="41"
/></UnionSource></Sources><Column OutType="WSTRING" Index="0" Nullable="false"
Value="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719"
EventName="Office.Telemetry.Event.Office.FileIOCritical"
CategoryName="NexusTenantTokenFileIO" Severities="Medium" /><StringRegex Token="2"
RegEx="Office.FileIO.CSI.CCachedFileCsiLoadFile"><Source Token="1"
RegEx="Office.FileIO.CSI.CCachedFileCsiSaveFile"><Source Token="1"
RegEx="Office.FileIO.CSI.DocumentFactoryCreateNewDocument"><Source Token="1"
RegEx="Office.FileIO.CSI.DocumentRenameSubmitWorkItem"><Source Token="1"
RegEx="Office.FileIO.CSI.FMapPaths"><Source Token="1" Field="EventName"
RegEx="Office.FileIO.CSI.GetShareUrlForContainerAsync"><Source Token="1"
RegEx="Office.FileIO.CSI.GetShareUrlForFileAsync"><Source Token="1"
RegEx="Office.FileIO.CSI.GetWopiUrlFromFileIdentifierAsync"><Source Token="1"
RegEx="Office.FileIO.CSI.IDocumentGetVersionList"><Source Token="1"
RegEx="Office.FileIO.CSI.IDocumentRestoreAsync"><Source Token="1" Field="EventName"
RegEx="Office.FileIO.CSI.IsDownloadedBaseValidNoHashCheck"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.CacheOptics"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.CacheOpticsPerFile"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.CentralTable.CheckSchemaVersion"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.CentralTable.ClearCache"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.CentralTable.CreateDatabaseFileUsingTemplate"><Sou
rce Token="1" Field="EventName" /></StringRegex><StringRegex Token="18"
RegEx="Office.FileIO.CSI.Storage.CentralTable.CreateDataSourceFailure"><Source
RegEx="Office.FileIO.CSI.Storage.CentralTable.DatasourceOpenFailure"><Source
RegEx="Office.FileIO.CSI.Storage.CentralTable.FileCachePropertiesRowNotFound"><Sour
ce Token="1" Field="EventName" /></StringRegex><StringRegex Token="21"
RegEx="Office.FileIO.CSI.Storage.CentralTable.MigrateFileNameFromIni"><Source
RegEx="Office.FileIO.CSI.Storage.CentralTable.RowsetUnknownFailure"><Source
RegEx="Office.FileIO.CSI.Storage.CentralTable.SchemaUpgrade"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.FaultManagement.FaultRecovery"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.FaultManagement.FaultReport"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.FileStore.FSDCorruption"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.FileStore.GarbageCollection"><Source Token="1"
RegEx="Office.FileIO.CSI.Storage.FileStore.ZeroByteFileUploadAttempted"><Source
RegEx="Office.FileIO.CSI.Storage.RuntimeProperties.IncompatibleCsiVersionDetected">
<Source Token="1" Field="EventName" /></StringRegex><StringRegex Token="30"
RegEx="Office.FileIO.CSI.Storage.StartOfficeFileCache"><Source Token="1"
RegEx="Office.FileIO.CSI.SyncBackedReconcilerTryReconcileToLatestAfterVersionNotFou
nd"><Source Token="1" Field="EventName" /></StringRegex><StringRegex Token="32"
RegEx="Office.FileIO.CSI.SyncBackedReconcilerTransitionOnline"><Source Token="1"
RegEx="Office.FileIO.CSI.TryDestroyOfficeFileCache"><Source Token="1"
RegEx="Office.FileIO.CSI.WopiBrowseBrowseToContainerAsync"><Source Token="1"
RegEx="Office.FileIO.DocumentStorage.ElasticBufferManagerCreationFileMapping"><Sour
ce Token="1" Field="EventName" /></StringRegex><StringRegex Token="36"
RegEx="Office.FileIO.DocumentStorage.ElasticBufferManagerCreationMapView"><Source
RegEx="Office.FileIO.DocumentStorage.ElasticBufferManagerExhaustion"><Source
RegEx="Office.FileIO.WXP.Storage.CacheRepair"><Source Token="1"
/></UnionSource></Sources><Column OutType="WSTRING" Index="0" Nullable="false"
Value="d2b065c5ae634beb9cec4813140e22da-eda42ada-ffd9-4e26-92a1-e3b440eaf8bf-7717"
OutType="WSTRING" /></Column><Triggers><Source Token="39"
/></Triggers><Resets><Source Token="1" /></Resets></Rule><Rule RuleId="649"
EventName="Office.Telemetry.Event.Office.DocsCritical"
CategoryName="NexusTenantTokenDocs" Severities="Medium" /><Filter
Token="2"><Operator Type="AND"><Left><Operator Type="AND"><Left><Operator
/></Left><Right><Constant Value="Office.Docs.AppDocs.AppDocsInit" OutType="WSTRING"
Value="Office.Docs.AppDocs.AppDocsPlatformSpecificInit" OutType="WSTRING"
Value="Office.Docs.AppDocs.CsiDocumentGetFutureAccessToken" OutType="WSTRING"
Value="Office.Docs.AppDocs.CsiDocumentGetLocation" OutType="WSTRING"
/></Right></Operator></Right></Operator></Right></Operator></Left><Right><Operator
Type="AND"><Left><Operator Type="AND"><Left><Operator Type="NE"><Left><Source
Token="1" Field="EventName" /></Left><Right><Constant
Value="Office.Docs.AppDocs.LastOpenedDocumentInfoOnAppInitialized"
OutType="WSTRING" /></Right></Operator></Left><Right><Operator
Value="Office.Docs.EnterpriseDataProtection.CConfigManagerIsFeatureGateEnabled"
/></Left><Right><Constant Value="Office.Docs.DesktopBackstage.OpenRecentClicked"
Value="Office.Docs.DesktopBackstage.OpenRecentDocumentsViewClicked"
OutType="WSTRING"
/></Right></Operator></Right></Operator></Right></Operator></Right></Operator></Fil
ter><Filter Token="3"><Operator Type="AND"><Left><Operator
Value="Office.Docs.DesktopBackstageNavigation.NavigationMsoSHGetFileInfoW"
Value="Office.Docs.LandingPage.LandingPageDocumentTemplateThumbnailRetrieval"
Value="Office.Docs.LandingPage.LandingPageTemplateItemGetThumbnailAsync"
Value="Office.Docs.ModernBackstage.BackstagePageControlUserCreateControlUser"
OutType="WSTRING"
/></Right></Operator></Right></Operator></Right></Operator></Left><Right><Operator
Value="Office.Docs.ModernBackstage.BackstagePageControlUserFInit" OutType="WSTRING"
Value="Office.Docs.ModernDocTemplateService.CDocumentTemplateGetImageDownloadResult
Async" OutType="WSTRING"
Value="Office.Docs.ModernDocTemplateService.DocumentTemplateRequestImageAsync"
Value="Office.Docs.DesktopBackstageNavigation.NavigationGetShellIcon"
OutType="WSTRING"
/></Right></Operator></Right></Operator></Right></Operator></Right></Operator></Fil
ter><Filter Token="4"><Operator Type="NE"><Left><Source Token="3" Field="EventName"
Value="Office.Docs.DesktopBackstageNavigation.NavigationGetShellIconForExt"
OutType="WSTRING" /></Right></Operator></Filter></Sources><Column OutType="WSTRING"
Index="0" Nullable="false" Name="EventName"><Source Token="4" Field="EventName"
/></Column><Column OutType="WSTRING" Index="1" Nullable="true"
Value="c274b3e05ac5448dae8fbb7466da6acb-fd6dc8de-18b7-409c-a696-4bd66f7a5322-7902"
EventName="Office.Telemetry.Event.Office.Insights"
CategoryName="NexusTenantTokenInsights" Severities="Medium" /></Sources><Column
Value="250a372c4a854d8fb120ef0366f9410c-dd39bcd8-3b38-4c6c-9f8d-3821e5c28b47-7487"
RuleId="120100" RuleVersion="1" DataClassifications="SM" Target="Subrule"
xmlns=""><Sources><AppEvent Token="1" Event="TelemetryStartup" /><Timer Token="2"
Interval="30s" /><RuleSource Token="3" RuleId="120100" /><Threshold
Token="4"><Operator Type="GE"><Left><Source Token="2" Field="TimeStamp100ns"
/></Left><Right><Operator Type="ADD"><Left><Operator Type="COALESCE"><Left><Source
Token="3" Field="TimeStamp100ns" /></Left><Right><Constant Value="1"
OutType="FILETIME" /></Right></Operator></Left><Right><Constant
Value="864000000000" OutType="UINT64"
/></Right></Operator></Right></Operator></Threshold></Sources><Triggers><Source
Token="1" /><Source Token="4" /></Triggers></Rule><Rule RuleId="120104"
EventName="Office.System.SystemHealthMetadataVideoCardInfo"
ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521"
SamplingPolicy="CriticalCensus" Target="Upload" StopAfter="1"
xmlns=""><RuleInterfaces><RuleInterface Name="Metadata"
/></RuleInterfaces><Sources><ULSTagSource Token="1" StringTagId="avx74"
/><ULSTagSource Token="2" StringTagId="avx79" /><ThisRule Token="3"
/></Sources><Column OutType="FILETIME" Index="0" Nullable="false"
Name="CollectionTime"><Source Token="3" Field="TimeStamp100ns" /></Column><Column
OutType="UINT32" Index="1" Nullable="false" Name="VendorId"><Operator
Type="COALESCE"><Left><Source Token="1" Field="VendorId" /></Left><Right><Source
Token="2" Field="VendorId" /></Right></Operator></Column><Column OutType="UINT32"
Index="2" Nullable="false" Name="VideoCardDeviceId"><Operator
Type="COALESCE"><Left><Source Token="1" Field="DeviceId" /></Left><Right><Source
Token="2" Field="DeviceId" /></Right></Operator></Column><Column OutType="UINT32"
Index="3" Nullable="false" Name="SubSysId"><Operator Type="COALESCE"><Left><Source
Token="1" Field="SubSysId" /></Left><Right><Source Token="2" Field="SubSysId"
/></Right></Operator></Column><Column OutType="UINT32" Index="4" Nullable="false"
Name="RevisionId"><Operator Type="COALESCE"><Left><Source Token="1"
Field="RevisionId" /></Left><Right><Source Token="2" Field="RevisionId"
/></Right></Operator></Column><Triggers><Source Token="1" /><Source Token="2"
/></Triggers></Rule><Rule RuleId="120119" RuleVersion="0" DataClassifications="SM"
EventName="Office.System.SystemHealthRollbackSessionMetadata"
SamplingPolicy="CriticalCensus" Target="Upload"
/></RuleInterfaces><Sources><RuleSource Token="1" RuleId="120100" /><ULSTagSource
Token="2" StringTagId="awjb7" /><ULSTagSource Token="3" StringTagId="a14x3"
/><RuleSource Token="4" RuleId="120119" /></Sources><Column OutType="WSTRING"
Index="0" Nullable="true" Name="PreviousBuild"><Operator
Type="COALESCE"><Left><Operator Type="COALESCE"><Left><Source Token="3"
Field="PreviousBuild" MissingFieldHandling="Ignore" /></Left><Right><Source
Token="2" Field="PreviousBuild" MissingFieldHandling="Ignore"
/></Right></Operator></Left><Right><Source Token="4" Field="0"
MissingFieldHandling="Ignore" /></Right></Operator></Column><Column
OutType="UINT32" Index="1" Nullable="true" Name="InstallMethod"><Operator
Type="COALESCE"><Left><Operator Type="COALESCE"><Left><Source Token="3"
Field="InstallMethod" MissingFieldHandling="Ignore" /></Left><Right><Source
Token="2" Field="InstallMethod" MissingFieldHandling="Ignore"
/></Right></Operator></Left><Right><Source Token="4" Field="1"
MissingFieldHandling="Ignore" /></Right></Operator></Column><Triggers><Source
Token="1" /><Source Token="2" /><Source Token="3" /></Triggers><Starts><Source
Token="2" /><Source Token="3" /><Source Token="4" /></Starts></Rule><Rule
EventName="Office.System.SystemHealthMetadataC2RApplicationStateProvider"
/></RuleInterfaces><Sources><StateSource Token="1" Provider="{68442bc6-3519-4b08-
a80c-e0a68fc8cda3}" /><AppEvent Token="2" Event="TelemetryStartup" /><RuleSource
Token="3" RuleId="120100" /><ThisRule Token="4" /></Sources><Column
OutType="UINT16" Index="0" Nullable="true" Name="AppBuild"><Source Token="1"
Field="AppVersionBuild" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="1" Nullable="true" Name="AppBuildRevision"><Source
Token="1" Field="AppVersionUpdate" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="2" Nullable="true" Name="AppMajorVer"><Source Token="1"
Field="AppVersionMajor" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="3" Nullable="true" Name="AppMinorVer"><Source Token="1"
Field="AppVersionMinor" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="4" Nullable="true"
Name="Click2RunPackageVersionBuild"><Source Token="1" Field="PackageVersionBuild"
Nullable="true" Name="Click2RunPackageVersionMajor"><Source Token="1"
Field="PackageVersionMajor" MissingFieldHandling="Ignore" /></Column><Column
Name="Click2RunPackageVersionMinor"><Source Token="1" Field="PackageVersionMinor"
Nullable="true" Name="Click2RunPackageVersionRevision"><Source Token="1"
Field="PackageVersionUpdate" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="8" Nullable="true" Name="DistributionChannel"><Source
Token="1" Field="DistributionChannel" MissingFieldHandling="Ignore"
/></Column><Column OutType="UINT64" Index="9" Nullable="true"
Name="InstallType"><Source Token="1" Field="GetInstallType"
MissingFieldHandling="Ignore" /></Column><Column OutType="BOOL" Index="10"
Nullable="true" Name="IsDebug"><Source Token="1" Field="IsDebug"
Nullable="true" Name="IsOEMInstalled"><Source Token="1" Field="IsOEMInstalled"
Nullable="true" Name="IsRunAsAdmin"><Source Token="1" Field="IsRunAsAdmin"
MissingFieldHandling="Ignore" /></Column><Column OutType="WSTRING" Index="13"
Nullable="true" Name="OfficeArchitectureText"><Source Token="1"
Field="ApplicationArchitecture" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="14" Nullable="true" Name="OfficeBuild"><Source Token="1"
Field="OfficeVersionBuild" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="15" Nullable="true" Name="OfficeBuildRevision"><Source
Token="1" Field="OfficeVersionUpdate" MissingFieldHandling="Ignore"
Name="OfficeMajorVer"><Source Token="1" Field="OfficeVersionMajor"
Nullable="true" Name="OfficeMinorVer"><Source Token="1" Field="OfficeVersionMinor"
Nullable="true" Name="ProcessFileName"><Source Token="1" Field="ProcessFileName"
MissingFieldHandling="Ignore" /></Column><Triggers><Source Token="3" /><Source
Token="2" /></Triggers></Rule><Rule RuleId="120123" RuleVersion="1"
DataClassifications="SM" EventName="Office.System.SystemHealthMetadataC2ROtherMeta"
/></RuleInterfaces><Sources><StateSource Token="1" Provider="{b1676ac3-7fee-44a9-
9a0e-dbb0b496efa5}" /><StateSource Token="2" Provider="{8e685dc2-78f7-47e1-9a99-
6a636773669a}" /><StateSource Token="3" Provider="{c3d2f3fc-0f86-43ac-b7a3-
007bf524f38f}" /><StateSource Token="4" Provider="{1f59c07e-f223-4c7f-aa23-
df28da66734b}" /><StateSource Token="5" Provider="{1a6b5bd0-2f17-420c-8ba0-
ee01132ee441}" /><AppEvent Token="6" Event="TelemetryStartup" /><RuleSource
Token="7" RuleId="120100" /><ThisRule Token="8" /></Sources><Column
OutType="WSTRING"
Index="0" Nullable="true" Name="Alias"><Source Token="5" Field="Alias"
MissingFieldHandling="Ignore" /></Column><Column OutType="BINARY" Index="1"
Nullable="true" Name="ComputerSystemProductUuidHash"><UnaryOperator
Type="OneWaySHA1HashToBinary"><Source Token="1" Field="ComputerSystemProductId"
MissingFieldHandling="Ignore" /></UnaryOperator></Column><Column OutType="WSTRING"
Index="2" Nullable="true" Name="DeviceClass"><Source Token="1" Field="DeviceClass"
Nullable="true" Name="DeviceManufacturer"><Source Token="1"
Field="DeviceManufacturer" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="4" Nullable="true" Name="DeviceModel"><Source Token="1"
Field="DeviceModel" MissingFieldHandling="Ignore" /></Column><Column OutType="BOOL"
Index="5" Nullable="true" Name="IsLabMachine"><Source Token="5"
Field="IsLabMachine" MissingFieldHandling="Ignore" /></Column><Column
OutType="BOOL" Index="6" Nullable="true" Name="IsSubscription"><Source Token="5"
Field="IsSubscription" MissingFieldHandling="Ignore" /></Column><Column
OutType="INT32" Index="7" Nullable="true" Name="MsoAppId"><Source Token="3"
Field="AppId" MissingFieldHandling="Ignore" /></Column><Column OutType="UINT32"
Index="8" Nullable="true" Name="NumProcPhysCores"><Source Token="1"
Field="NumProcPhysCores" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="9" Nullable="true" Name="OfficeUiLangTag"><Source
Token="2" Field="OfficeUiLangTag" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="10" Nullable="true" Name="Platform"><Source Token="1"
Field="Platform" MissingFieldHandling="Ignore" /></Column><Column OutType="WSTRING"
Index="11" Nullable="true" Name="ProcessorArchitecture"><Source Token="1"
Field="ProcessorArchitecture" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT32" Index="12" Nullable="true" Name="ProcessorCount"><Source Token="1"
Field="ProcessorCount" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT32" Index="13" Nullable="true" Name="ProcSpeedMHz"><Source Token="1"
Field="ProcessorFrequency" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="14" Nullable="true" Name="ProcTypeText"><Source Token="1"
Field="ProcessorArchitecture" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT32" Index="15" Nullable="true" Name="RamMB"><Source Token="1"
Field="MaxMemory" MissingFieldHandling="Ignore" /></Column><Column OutType="GUID"
Index="16" Nullable="true" Name="SqmUserId"><Source Token="4" Field="SqmUidUser"
Nullable="true" Name="SysVolFreeSpaceMB"><Source Token="1" Field="SysVolFreeSpace"
Nullable="true" Name="SysVolSizeMB"><Source Token="1" Field="SysVolSize"
DataClassifications="SM"
EventName="Office.System.SystemHealthUngracefulAppExitDesktop"
xmlns=""><RuleInterfaces><RuleInterface Name="Crash" /><RuleInterface
Name="Metadata" /></RuleInterfaces><Sources><ULSTagSource Token="1"
StringTagId="a1wld" /><StateSource Token="2" Provider="{dd5250a9-3404-43b0-9b7a-
6f4eaea6497d}" /><ThisRule Token="3" /></Sources><Column OutType="FILETIME"
Index="0" Nullable="false" Name="DetectionTime"><Source Token="3"
Field="TimeStamp100ns" /></Column><Column OutType="FILETIME" Index="1"
Nullable="false" Name="CrashedProcessSessionInitTime"><Source Token="1"
Field="PreviousSessionInitTime" /></Column><Column OutType="GUID" Index="2"
Nullable="false" Name="CrashedProcessSessionID"><Source Token="1"
Field="CrashedProcessSessionId" /></Column><Column OutType="INT32" Index="3"
Nullable="false" Name="CrashType"><Source Token="1" Field="CrashType"
Name="AffectedProcessExeMajorVersion"><Source Token="1" Field="AppMajorVersion"
Nullable="true" Name="AffectedProcessAppMinorVer"><Source Token="1"
Field="AppMinorVersion" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT16" Index="6" Nullable="true" Name="AffectedProcessAppBuild"><Source
Token="1" Field="AppBuildVersion" MissingFieldHandling="Ignore" /></Column><Column
Name="AffectedProcessAppBuildRevision"><Source Token="1" Field="AppRevisionVersion"
Nullable="true" Name="AffectedProcessIsDebug"><Source Token="1" Field="IsDebug"
Nullable="true" Name="AffectedProcessAppName"><Source Token="1" Field="AppName"
Nullable="true" Name="AffectedProcessOsEnvironment"><Source Token="1"
Field="OSEnvironment" MissingFieldHandling="Ignore" /></Column><Column
OutType="BOOL" Index="11" Nullable="true"
Name="AffectedProcessIsLabMachine"><Source Token="1" Field="IsLabMachine"
Nullable="true" Name="IsMsftInternal"><Source Token="2" Field="IsMicrosoftInternal"
Nullable="true" Name="PreviousBuild"><Source Token="1" Field="PreviousBuild"
Nullable="true" Name="InstallMethod"><Source Token="1" Field="InstallMethod"
Nullable="true" Name="CrashedAssignedFlights"><Source Token="1"
Field="CrashedAssignedFlights" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="16" Nullable="true" Name="CrashedConfigIds"><Source
Token="1" Field="CrashedConfigIds" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="17" Nullable="true" Name="FaultAppName"><Source Token="1"
Field="FaultAppName" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="18" Nullable="true" Name="ModuleName"><Source Token="1"
Field="ModuleName" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="19" Nullable="true" Name="ExceptionCode"><Source Token="1"
Field="ExceptionCode" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="20" Nullable="true" Name="ModuleOffset"><Source Token="1"
Field="ModuleOffset" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="21" Nullable="true" Name="ErrorString"><Source Token="1"
Field="ErrorString" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="22" Nullable="true" Name="ExceptionAddress"><Source
Token="1" Field="ExceptionAddress" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="23" Nullable="true" Name="ModuleBaseAddress"><Source
Token="1" Field="ModuleBaseAddress" MissingFieldHandling="Ignore"
/></Column><Column OutType="WSTRING" Index="24" Nullable="true"
Name="ModuleSize"><Source Token="1" Field="ModuleSize"
Nullable="true" Name="VerifyElseCrashTag"><Source Token="1"
Field="VerifyElseCrashTag" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT32" Index="26" Nullable="true" Name="InstallType"><Source Token="1"
Field="InstallType" MissingFieldHandling="Ignore" /></Column><Triggers><Source
DataClassifications="SM" EventName="Office.ClickToRun.C2RTaskError"
ATT="0da1917aa56040d3a011c3813ca36107-76f080d8-b37f-4635-8054-5c133fcd04c4-6587"
xmlns=""><Sources><ULSCategorySeveritySource Token="1" CategoryName="Click-To-Run
Task Error" Severities="Monitorable Unexpected Assert" /></Sources><Column
OutType="FILETIME" Index="0" Nullable="true" Name="TimeStamp"><Source Token="1"
Field="TimeStamp100ns" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="1" Nullable="true" Name="Process"><Source Token="1"
Field="ULS_Process" MissingFieldHandling="Ignore" /></Column><Column
OutType="UINT32" Index="2" Nullable="true" Name="Thread"><Source Token="1"
Field="ULS_ThreadID" MissingFieldHandling="Ignore" /></Column><Column OutType="TAG"
Index="3" Nullable="true" Name="EventID"><Source Token="1" Field="ULS_Tag"
Nullable="true" Name="Severity"><Source Token="1" Field="ULS_Severity"
Nullable="true" Name="Message"><Source Token="1" Field="ContextData"
Nullable="true" Name="SQMMachineID"><Source Token="1" Field="MachineId"
Nullable="true" Name="SUSClientID"><Source Token="1" Field="SessionID"
Nullable="true" Name="GeoID"><Source Token="1" Field="GeoID"
Nullable="true" Name="Version"><Source Token="1" Field="Ver"
Nullable="true" Name="Path"><Source Token="1" Field="Path"
Nullable="true" Name="ScenarioInstanceID"><Source Token="1"
Field="ScenarioInstanceId"
MissingFieldHandling="Ignore" /></Column><Column OutType="GUID" Index="12"
Nullable="false" Name="TaskID"><Source Token="1" Field="TaskId" /></Column><Column
OutType="WSTRING" Index="13" Nullable="false" Name="TaskType"><Source Token="1"
Field="TaskType" /></Column><Column OutType="UINT32" Index="14" Nullable="false"
Name="TaskState"><Source Token="1" Field="TaskState" /></Column><Column
OutType="WSTRING" Index="15" Nullable="false" Name="Scenario"><Source Token="1"
Field="Scenario" /></Column><Column OutType="WSTRING" Index="16" Nullable="false"
Name="InstallID"><Source Token="1" Field="InstallID" /></Column><Column
OutType="UINT64" Index="17" Nullable="false" Name="ErrorCode"><Source Token="1"
Field="ErrorCode" /></Column><Column OutType="WSTRING" Index="18" Nullable="false"
Name="ErrorType"><Source Token="1" Field="ErrorType" /></Column><Column
OutType="WSTRING" Index="19" Nullable="false" Name="ErrorSource"><Source Token="1"
Field="AppVErrorSource" /></Column><Column OutType="WSTRING" Index="20"
Nullable="false" Name="ErrorMessage"><Source Token="1" Field="ErrorMessage"
Name="ErrorDetails"><Source Token="1" Field="ErrorDetails" /></Column><Column
OutType="WSTRING" Index="22" Nullable="true" Name="ScenarioSubType"><Source
Token="1" Field="ScenarioSubType" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="23" Nullable="true" Name="C2RClientVer"><Source Token="1"
Field="C2RClientVer" MissingFieldHandling="Ignore" /></Column><Column
OutType="WSTRING" Index="24" Nullable="true" Name="SourceType"><Source Token="1"
Field="SourceType" MissingFieldHandling="Ignore" /></Column><Triggers><Source
DataClassifications="SM" EventName="Office.ClickToRun.C2RTelemetryCritical"
xmlns=""><Sources><ULSTagSource Token="1" StringTagId="bon04" /><ULSTagSource
Token="2" StringTagId="ayef5" /><ULSTagSource Token="3" StringTagId="boksi"
/><ULSTagSource Token="4" StringTagId="boksj" /><UnionSource Token="5"><Source
Token="1" /><Source Token="2" /><Source Token="3" /><Source Token="4"
/></UnionSource></Sources><Column OutType="FILETIME" Index="0" Nullable="true"
Name="TimeStamp"><Source Token="5" Field="TimeStamp100ns"
Nullable="true" Name="Process"><Source Token="5" Field="ULS_Process"
Nullable="true" Name="Thread"><Source Token="5" Field="ULS_ThreadID"
MissingFieldHandling="Ignore" /></Column><Column OutType="TAG" Index="3"
Nullable="true" Name="EventID"><Source Token="5" Field="ULS_Tag"
Nullable="true" Name="C2RClientVer"><Source Token="5" Field="C2RClientVer"
Token="2" /><Source Token="3" /><Source Token="4" /></Triggers></Rule><Rule
EventName="Office.ClickToRun.C2RTaskTelemetryCritical"
xmlns=""><Sources><ULSTagSource Token="1" StringTagId="annux" /><ULSTagSource
Token="2" StringTagId="aoici" /><ULSTagSource Token="3" StringTagId="apicg"
/><ULSTagSource Token="4" StringTagId="aoh6s" /><ULSTagSource Token="5"
StringTagId="aqzgg" /><ULSTagSource Token="6" StringTagId="bhzy7" /><ULSTagSource
Token="7" StringTagId="a1s3p" /><ULSTagSource Token="8" StringTagId="a1s2n"
/><ULSTagSource Token="9" StringTagId="a1s21" /><UnionSource Token="10"><Source
Token="9" /></UnionSource></Sources><Column OutType="FILETIME" Index="0"
Nullable="true" Name="TimeStamp"><Source Token="10" Field="TimeStamp100ns"
Nullable="true" Name="Process"><Source Token="10" Field="ULS_Process"
Nullable="true" Name="Thread"><Source Token="10" Field="ULS_ThreadID"
MissingFieldHandling="Ignore" /></Column><Column OutType="TAG" Index="3"
Nullable="true" Name="EventID"><Source Token="10" Field="ULS_Tag"
Nullable="true" Name="ScenarioInstanceID"><Source Token="10"
Field="ScenarioInstanceId" MissingFieldHandling="Ignore" /></Column><Column
OutType="GUID" Index="12" Nullable="false" Name="TaskID"><Source Token="10"
Field="TaskId" /></Column><Column OutType="WSTRING" Index="13" Nullable="false"
Name="TaskType"><Source Token="10" Field="TaskType" /></Column><Column
OutType="UINT32" Index="14" Nullable="false" Name="TaskState"><Source Token="10"
Field="TaskState" /></Column><Column OutType="WSTRING" Index="15" Nullable="false"
Name="Scenario"><Source Token="10" Field="Scenario" /></Column><Column
OutType="WSTRING" Index="16" Nullable="false" Name="InstallID"><Source Token="10"
Field="InstallID" /></Column><Column OutType="WSTRING" Index="17" Nullable="true"
Name="ScenarioSubType"><Source Token="10" Field="ScenarioSubType"
Nullable="true" Name="C2RClientVer"><Source Token="10" Field="C2RClientVer"
Nullable="true" Name="SourceType"><Source Token="10" Field="SourceType" MissingF

Limbă

Bine ați venit la Scribd!

47450140-ASTM-A-105

Încărcat de

Informații document

Descriere:

Data încărcării

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Descriere:

Drepturi de autor:

Formate disponibile

47450140-ASTM-A-105

Încărcat de

Descriere:

Drepturi de autor:

Formate disponibile

Titluri conexe

<?xml version="1.0" encoding="utf-8"?

><Rules xmlns="urn:Rules"><Rule RuleId="606"

Interese conexe

Documente similare cu 47450140-ASTM-A-105

Mai multe de la jijuikru

Populare în Technology (General)

Titluri conexe

Evaluare

Partajare