Gecko [ edgpens.lpkmn.gov.my ]

Name	Size	Permission
AutoRecover	[ DIR ]	drwxrwxrwx
Logs	[ DIR ]	drwxrwxrwx
Repository	[ DIR ]	drwxrwxrwx
en	[ DIR ]	drwxrwxrwx
en-US	[ DIR ]	drwxrwxrwx
tmf	[ DIR ]	drwxrwxrwx
xml	[ DIR ]	drwxrwxrwx
AgentWmi.mof	17.1 KB	-rw-rw-rw-
AgentWmiUninstall.mof	693 B	-rw-rw-rw-
BthMtpEnum.mof	2.56 KB	-rw-rw-rw-
DscCoreConfProv.mof	6.52 KB	-rw-rw-rw-
FolderRedirectionWMIProvider.m...	8.79 KB	-rw-rw-rw-
FunDisc.mof	702 B	-rw-rw-rw-
IMAPIv2-Base.mof	31.36 KB	-rw-rw-rw-
IMAPIv2-FileSystemSupport.mof	2.03 KB	-rw-rw-rw-
IMAPIv2-LegacyShim.mof	759 B	-rw-rw-rw-
IpmiDTrc.mof	638 B	-rw-rw-rw-
IpmiPTrc.mof	763 B	-rw-rw-rw-
L2SecHC.mof	2.28 KB	-rw-rw-rw-
Microsoft.AppV.AppVClientWmi.d...	30.27 KB	-rw-rw-rw-
Microsoft.AppV.AppVClientWmi.m...	11.42 KB	-rw-rw-rw-
Microsoft.Uev.AgentWmi.dll	1.03 MB	-rw-rw-rw-
Microsoft.Uev.ManagedAgentWmi....	3.06 KB	-rw-rw-rw-
Microsoft.Uev.ManagedAgentWmiU...	514 B	-rw-rw-rw-
MsDtcWmi.mof	21.02 KB	-rw-rw-rw-
OfflineFilesConfigurationWmiPr...	5.43 KB	-rw-rw-rw-
OfflineFilesConfigurationWmiPr...	800 B	-rw-rw-rw-
OfflineFilesWmiProvider.mof	14.25 KB	-rw-rw-rw-
OfflineFilesWmiProvider_Uninst...	14.25 KB	-rw-rw-rw-
PolicMan.dll	80 KB	-rw-rw-rw-
PolicMan.mof	11.87 KB	-rw-rw-rw-
PrintManagementProvider.dll	170 KB	-rw-rw-rw-
PrintManagementProvider.mof	32.01 KB	-rw-rw-rw-
RacWmiProv.dll	55.5 KB	-rw-rw-rw-
RacWmiProv.mof	2.96 KB	-rw-rw-rw-
Remove.Microsoft.AppV.AppvClie...	830 B	-rw-rw-rw-
SchedProv.mof	49.88 KB	-rw-rw-rw-
UserStateWMIProvider.mof	3.18 KB	-rw-rw-rw-
WMIADAP.exe	124 KB	-rwxrwxrwx
WMIC.exe	384 KB	-rwxrwxrwx
WMICOOKR.dll	74.5 KB	-rw-rw-rw-
WPDShServiceObj.mof	2.99 KB	-rw-rw-rw-
WdacWmiProv.dll	112.5 KB	-rw-rw-rw-
WgxInstalledGame.mof	3.07 KB	-rw-rw-rw-
Win32_Tpm.dll	49 KB	-rw-rw-rw-
WinMgmt.exe	78 KB	-rwxrwxrwx
Winsat.mof	1.51 KB	-rw-rw-rw-
WinsatUninstall.mof	487 B	-rw-rw-rw-
WmiApRpl.dll	92.5 KB	-rw-rw-rw-
WmiDcPrv.dll	141.5 KB	-rw-rw-rw-
WmiPerfClass.dll	91 KB	-rw-rw-rw-
WmiPerfClass.mof	980 B	-rw-rw-rw-
WmiPerfInst.dll	50.5 KB	-rw-rw-rw-
WmiPerfInst.mof	804 B	-rw-rw-rw-
WmiPrvSE.exe	407 KB	-rwxrwxrwx
WsmAgent.mof	822 B	-rw-rw-rw-
WsmAgentUninstall.mof	754 B	-rw-rw-rw-
WsmAuto.mof	4.42 KB	-rw-rw-rw-
cli.mof	31.86 KB	-rw-rw-rw-
cliegaliases.mof	2.68 MB	-rw-rw-rw-
dimsjob.mof	1.21 KB	-rw-rw-rw-
dimsroam.mof	1.25 KB	-rw-rw-rw-
eaimeapi.mof	1.27 KB	-rw-rw-rw-
esscli.dll	345 KB	-rw-rw-rw-
fastprox.dll	761.5 KB	-rw-rw-rw-
fdSSDP.mof	656 B	-rw-rw-rw-
fdWNet.mof	716 B	-rw-rw-rw-
fdWSD.mof	656 B	-rw-rw-rw-
hbaapi.mof	471.2 KB	-rw-rw-rw-
ipmiprr.dll	3.5 KB	-rw-rw-rw-
ipmiprv.dll	160 KB	-rw-rw-rw-
ipmiprv.mof	207.81 KB	-rw-rw-rw-
ipsecsvc.mof	1.25 KB	-rw-rw-rw-
iscsidsc.mof	19.41 KB	-rw-rw-rw-
iscsihba.mof	111.28 KB	-rw-rw-rw-
iscsiprf.mof	44.96 KB	-rw-rw-rw-
iscsirem.mof	4.4 KB	-rw-rw-rw-
iscsiwmiv2.mof	36.29 KB	-rw-rw-rw-
iscsiwmiv2_uninstall.mof	2.71 KB	-rw-rw-rw-
kerberos.mof	8.55 KB	-rw-rw-rw-
lsasrv.mof	13.46 KB	-rw-rw-rw-
mispace.mof	1016.97 KB	-rw-rw-rw-
mispace_uninstall.mof	8.86 KB	-rw-rw-rw-
mmc.mof	698 B	-rw-rw-rw-
mofcomp.exe	20 KB	-rwxrwxrwx
mofd.dll	197 KB	-rw-rw-rw-
msdtcwmi.dll	137.5 KB	-rw-rw-rw-
msfeeds.mof	1.48 KB	-rw-rw-rw-
msfeedsbs.mof	1.54 KB	-rw-rw-rw-
msiscsi.mof	4.69 KB	-rw-rw-rw-
mstsc.mof	1.17 KB	-rw-rw-rw-
mstscax.mof	2.01 KB	-rw-rw-rw-
msv1_0.mof	7.54 KB	-rw-rw-rw-
mswmdm.mof	1.67 KB	-rw-rw-rw-
ncsi.mof	1.1 KB	-rw-rw-rw-
netprofm.mof	1.09 KB	-rw-rw-rw-
networkitemfactory.mof	683 B	-rw-rw-rw-
newdev.mof	3.59 KB	-rw-rw-rw-
nlasvc.mof	3.82 KB	-rw-rw-rw-
nlsvc.mof	2.81 KB	-rw-rw-rw-
npivwmi.mof	31.5 KB	-rw-rw-rw-
nshipsec.mof	1.24 KB	-rw-rw-rw-
polstore.mof	1.25 KB	-rw-rw-rw-
portabledeviceapi.mof	4.2 KB	-rw-rw-rw-
portabledeviceclassextension.m...	3.13 KB	-rw-rw-rw-
portabledeviceconnectapi.mof	1.74 KB	-rw-rw-rw-
portabledevicetypes.mof	3.41 KB	-rw-rw-rw-
portabledevicewiacompat.mof	1.72 KB	-rw-rw-rw-
ppcRsopCompSchema.mof	1.95 KB	-rw-rw-rw-
ppcRsopUserSchema.mof	1.94 KB	-rw-rw-rw-
qmgr.mof	2.25 KB	-rw-rw-rw-
rawxml.xsl	623 B	-rw-rw-rw-
rdpcore.mof	1.28 KB	-rw-rw-rw-
rdpencom.mof	1.13 KB	-rw-rw-rw-
rdpendp.mof	1.1 KB	-rw-rw-rw-
rdpinit.mof	1.17 KB	-rw-rw-rw-
rdpshell.mof	1.17 KB	-rw-rw-rw-
regevent.mof	109.08 KB	-rw-rw-rw-
samsrv.mof	61.08 KB	-rw-rw-rw-
scersop.mof	4.5 KB	-rw-rw-rw-
schannel.mof	1.05 KB	-rw-rw-rw-
schedprov.dll	179.5 KB	-rw-rw-rw-
setupapi.mof	3.6 KB	-rw-rw-rw-
stdprov.dll	107.5 KB	-rw-rw-rw-
storagewmi.mof	310.63 KB	-rw-rw-rw-
storagewmi_passthru.mof	1.85 KB	-rw-rw-rw-
storagewmi_passthru_uninstall....	1.61 KB	-rw-rw-rw-
storagewmi_uninstall.mof	13.03 KB	-rw-rw-rw-
tcpip.mof	2.99 KB	-rw-rw-rw-
texttable.xsl	5.86 KB	-rw-rw-rw-
textvaluelist.xsl	2.7 KB	-rw-rw-rw-
tsallow.mof	16.67 KB	-rw-rw-rw-
tsmf.mof	1.21 KB	-rw-rw-rw-
tspkg.mof	1.04 KB	-rw-rw-rw-
vds.mof	59.63 KB	-rw-rw-rw-
vdswmi.dll	163.5 KB	-rw-rw-rw-
viewprov.dll	137.5 KB	-rw-rw-rw-
vss.mof	59.05 KB	-rw-rw-rw-
vsswmi.dll	113 KB	-rw-rw-rw-
wbemcntl.dll	294 KB	-rw-rw-rw-
wbemdisp.dll	241 KB	-rw-rw-rw-
wbemdisp.tlb	58.5 KB	-rw-rw-rw-
wbemprox.dll	34.5 KB	-rw-rw-rw-
wbemsvc.dll	47.5 KB	-rw-rw-rw-
wdigest.mof	1.08 KB	-rw-rw-rw-
whqlprov.mof	3.88 KB	-rw-rw-rw-
wininit.mof	1.71 KB	-rw-rw-rw-
winipsec.mof	1.24 KB	-rw-rw-rw-
wmiutils.dll	97.5 KB	-rw-rw-rw-
wmp.mof	4.77 KB	-rw-rw-rw-
wpdbusenum.mof	2.74 KB	-rw-rw-rw-
wpdcomp.mof	2.75 KB	-rw-rw-rw-
wpdfs.mof	2.68 KB	-rw-rw-rw-
wpdmtp.mof	3.27 KB	-rw-rw-rw-
wpdshext.mof	3.24 KB	-rw-rw-rw-
wpdsp.mof	2.92 KB	-rw-rw-rw-
wsp_fs.mof	537.9 KB	-rw-rw-rw-
wsp_fs_uninstall.mof	2.71 KB	-rw-rw-rw-
wsp_health.mof	543.05 KB	-rw-rw-rw-
wsp_health_uninstall.mof	2.31 KB	-rw-rw-rw-
wsp_sr.mof	581.34 KB	-rw-rw-rw-
wsp_sr_uninstall.mof	3.38 KB	-rw-rw-rw-
xsl-mappings.xml	2.8 KB	-rw-rw-rw-
xwizards.mof	2.15 KB	-rw-rw-rw-

Code Editor : samsrv.mof

//*********************************************
// *** Active Directory Service Provider: SAM
//*********************************************
#pragma classflags("forceupdate")
#pragma namespace ("\\\\.\\Root\\WMI")

[Dynamic, 
  Description("Active Directory Domain Services: SAM") : amended,
  Guid("{8e598056-8993-11d2-819e-0000f875a064}"),
  locale("MS\\0x409")]
class MSSAMTrace:EventTrace
{
};

[Dynamic,
 Description("SAM User Create") : amended,
 Guid("{39511dbe-899b-11d2-819e-0000f875a064}"),
 DisplayName("SamUserCreate"),
 locale("MS\\0x409")
]
class SamUserCreate:MSSAMTrace
{

};

[Dynamic,
 Description("SAM User Create") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamUserCreate_Start:SamUserCreate
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM User Create") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamUserCreate_End:SamUserCreate
{
};

[Dynamic,
 Description("SAM Computer Create") : amended,
 Guid("{abb14b68-899b-11d2-819e-0000f875a064}"),
 DisplayName("SamCompCreate"),
 locale("MS\\0x409")
]
class SamCompCreate:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Computer Create"),
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamCompCreate_Start:SamCompCreate
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Computer Create") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamCompCreate_End:SamCompCreate
{
};

[Dynamic,
 Description("SAM Group Create") : amended,       
 Guid("{c8eb5e5c-899c-11d2-819e-0000f875a064}"),
 DisplayName("SamGrpCreate"),
 locale("MS\\0x409")
]
class SamGrpCreate:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Group Create") : amended,       
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGrpCreate_Start:SamGrpCreate
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Group Create") : amended,       
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGrpCreate_End:SamGrpCreate
{
};

[Dynamic,
 Description("SAM Add Member to Group") : amended,
 Guid("{f9d2ba6a-899c-11d2-819e-0000f875a064}"),
 DisplayName("SamAddMemGrp"),
 locale("MS\\0x409")
]
class SamAddMemGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Add Member to Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamAddMemGrp_Start:SamAddMemGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Add Member to Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamAddMemGrp_End:SamAddMemGrp
{
};

[Dynamic,
 Description("SAM Delete Member From Group") : amended,
 Guid("{250959aa-899d-11d2-819e-0000f875a064}"),
 DisplayName("SamDelMemGrp"),
 locale("MS\\0x409")
]
class SamDelMemGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Delete Member From Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamDelMemGrp_Start:SamDelMemGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Delete Member From Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamDelMemGrp_End:SamDelMemGrp
{
};

[Dynamic,
 Description("SAM Password Change") : amended,
 Guid("{45fc997e-899d-11d2-819e-0000f875a064}"),
 DisplayName("SamPwdChng"),
 locale("MS\\0x409")
]
class SamPwdChng:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Password Change") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamPwdChng_Start:SamPwdChng
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Password Change") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamPwdChng_End:SamPwdChng
{
};

[Dynamic,
 Description("SAM User Password Set") : amended,
 Guid("{62bef71e-899d-11d2-819e-0000f875a064}"),
 DisplayName("SamUserPwdSet"),
 locale("MS\\0x409")
]
class SamUserPwdSet:MSSAMTrace
{

};

[Dynamic,
 Description("SAM User Password Set") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamUserPwdSet_Start:SamUserPwdSet
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM User Password Set") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamUserPwdSet_End:SamUserPwdSet
{
};

[Dynamic,
 Description("SAM Computer Password Set") : amended,
 Guid("{880217b8-899d-11d2-819e-0000f875a064}"),
 DisplayName("SamCompPwdSet"),
 locale("MS\\0x409")
]
class SamCompPwdSet:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Computer Password Set") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamCompPwdSet_Start:SamCompPwdSet
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Computer Password Set") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamCompPwdSet_End:SamCompPwdSet
{
};

[Dynamic,
 Description("SAM Password Push PDC") : amended,
 Guid("{1f228de8-8a6c-11d2-819e-0000f875a064}"),
 DisplayName("SamPwdPushPdc"),
 locale("MS\\0x409")
]
class SamPwdPushPdc:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Password Push PDC") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamPwdPushPdc_Start:SamPwdPushPdc
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Password Push PDC") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamPwdPushPdc_End:SamPwdPushPdc
{
};

[Dynamic,
 Description("SAM Id By Name") : amended,
 Guid("{a41d90bc-899d-11d2-819e-0000f875a064}"),
 DisplayName("SamIdByName"),
 locale("MS\\0x409")
]
class SamIdByName:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Id By Name") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamIdByName_Start:SamIdByName
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Id By Name") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamIdByName_End:SamIdByName
{
};

[Dynamic,
 Description("SAM Name By Id") : amended,
 Guid("{25059476-899f-11d2-819e-0000f875a064}"),
 DisplayName("SamNameById"),
 locale("MS\\0x409")
]
class SamNameById:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Name By Id") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamNameById_Start:SamNameById
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Name By Id") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamNameById_End:SamNameById
{
};

[Dynamic,
 Description("SAM Connect") : amended,
 Guid("{8c89045c-3f5d-4289-939a-fb854000cb6b}"),
 DisplayName("SamConnect"),
 locale("MS\\0x409")
]
class SamConnect:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Connect") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamConnect_Start:SamConnect
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Connect") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamConnect_End:SamConnect
{
};

[Dynamic,
 Description("SAM Close Handle") : amended,
 Guid("{dbc0ceab-cff3-4c0f-85f2-0c2107142f36}"),
 DisplayName("SamCloseHandle"),
 locale("MS\\0x409")
]
class SamCloseHandle:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Close Handle") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamCloseHandle_Start:SamCloseHandle
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Close Handle") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamCloseHandle_End:SamCloseHandle
{
};

[Dynamic,
 Description("SAM Set Security Object") : amended,
 Guid("{74e10cbb-202e-4a97-871d-8547972b5141}"),
 DisplayName("SamSetSecurityObj"),
 locale("MS\\0x409")
]
class SamSetSecurityObj:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Security Object") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetSecurityObj_Start:SamSetSecurityObj
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Security Object") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetSecurityObj_End:SamSetSecurityObj
{
};

[Dynamic,
 Description("SAM Query Security Object") : amended,
 Guid("{676347f3-fd20-4e7d-90b1-77e35f84af9a}"),
 DisplayName("SamQuerySecurityObj"),
 locale("MS\\0x409")
]
class SamQuerySecurityObj:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Security Object") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQuerySecurityObj_Start:SamQuerySecurityObj
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Security Object") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQuerySecurityObj_End:SamQuerySecurityObj
{
};

[Dynamic,
 Description("SAM Shutdown SAM Server") : amended,
 Guid("{f8012701-7e99-49c5-b832-1db8bc4a610d}"),
 DisplayName("SamShutdownSamSrv"),
 locale("MS\\0x409")
]
class SamShutdownSamSrv:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Shutdown SAM Server") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamShutdownSamSrv_Start:SamShutdownSamSrv
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Shutdown SAM Server") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamShutdownSamSrv_End:SamShutdownSamSrv
{
};

[Dynamic,
 Description("SAM Lookup Domain In SAM Server") : amended,
 Guid("{a11e5d6b-353d-4bf6-97a8-ede4cba45524}"),
 DisplayName("SamLookupDomInSamSrv"),
 locale("MS\\0x409")
]
class SamLookupDomInSamSrv:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Lookup Domain In SAM Server") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamLookupDomInSamSrv_Start:SamLookupDomInSamSrv
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Lookup Domain In SAM Server") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamLookupDomInSamSrv_End:SamLookupDomInSamSrv
{
};

[Dynamic,
 Description("SAM Enumerate Domains In SAM Server") : amended,
 Guid("{7c65ceb0-75ba-46b9-884e-67e038c5b003}"),
 DisplayName("SamEnumDomInSamSrv"),
 locale("MS\\0x409")
]
class SamEnumDomInSamSrv:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Enumerate Domains In SAM Server") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamEnumDomInSamSrv_Start:SamEnumDomInSamSrv
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Enumerate Domains In SAM Server") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamEnumDomInSamSrv_End:SamEnumDomInSamSrv
{
};

[Dynamic,
 Description("SAM Open Domain") : amended,
 Guid("{6e1f2449-f1f3-4634-b51f-46e2c6625892}"),
 DisplayName("SamOpenDomain"),
 locale("MS\\0x409")
]
class SamOpenDomain:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Open Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamOpenDomain_Start:SamOpenDomain
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Open Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamOpenDomain_End:SamOpenDomain
{
};

[Dynamic,
 Description("SAM Query Information Domain") : amended,
 Guid("{89399c21-4aaf-408e-ba39-ab831a1298d5}"),
 DisplayName("SamQueryInfoDom"),
 locale("MS\\0x409")
]
class SamQueryInfoDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Information Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQueryInfoDom_Start:SamQueryInfoDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Information Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQueryInfoDom_End:SamQueryInfoDom
{
};

[Dynamic,
 Description("SAM Set Information Domain") : amended,
 Guid("{45309ef4-c59e-425e-b95b-19f1c5a3c55a}"),
 DisplayName("SamSetInfoDom"),
 locale("MS\\0x409")
]
class SamSetInfoDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Information Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetInfoDom_Start:SamSetInfoDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Information Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetInfoDom_End:SamSetInfoDom
{
};

[Dynamic,
 Description("SAM Enumerate Groups In Domain ") : amended,
 Guid("{5d11e02f-0c36-4180-ad07-89062c9df9ec}"),
 DisplayName("SamEnumGrpsInDom"),
 locale("MS\\0x409")
]
class SamEnumGrpsInDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Enumerate Groups In Domain ") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamEnumGrpsInDom_Start:SamEnumGrpsInDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Enumerate Groups In Domain ") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamEnumGrpsInDom_End:SamEnumGrpsInDom
{
};

[Dynamic,
 Description("SAM Enumerate Users In Domain") : amended,
 Guid("{07ffaa1d-34f6-49cd-b541-2f0d7dff15c4}"),
 DisplayName("SamEnumUsersInDom"),
 locale("MS\\0x409")
]
class SamEnumUsersInDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Enumerate Users In Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamEnumUsersInDom_Start:SamEnumUsersInDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Enumerate Users In Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamEnumUsersInDom_End:SamEnumUsersInDom
{
};

[Dynamic,
 Description("SAM Create Alias In Domain") : amended,
 Guid("{5e612efd-c05e-4f76-bced-f5607aa3d46e}"),
 DisplayName("SamCreateAliasInDom"),
 locale("MS\\0x409")
]
class SamCreateAliasInDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Create Alias In Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamCreateAliasInDom_Start:SamCreateAliasInDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Create Alias In Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamCreateAliasInDom_End:SamCreateAliasInDom
{
};

[Dynamic,
 Description("SAM Enumerate Aliases In Domain") : amended,
 Guid("{f1fea491-bfa6-436c-a178-a70d03b4fb1a}"),
 DisplayName("SamEnumAliasesInDom"),
 locale("MS\\0x409")
]
class SamEnumAliasesInDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Enumerate Aliases In Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamEnumAliasesInDom_Start:SamEnumAliasesInDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Enumerate Aliases In Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamEnumAliasesInDom_End:SamEnumAliasesInDom
{
};

[Dynamic,
 Description("SAM Get Alias Membership") : amended,
 Guid("{1cf5fd19-1ac1-4324-84f7-970a634a91ee}"),
 DisplayName("SamGetAliasMem"),
 locale("MS\\0x409")
]
class SamGetAliasMem:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Alias Membership") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetAliasMem_Start:SamGetAliasMem
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Alias Membership") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetAliasMem_End:SamGetAliasMem
{
};

[Dynamic,
 Description("SAM Open Group") : amended,
 Guid("{b41d7bdf-4249-4651-ac0f-1879be0d5c0c}"),
 DisplayName("SamOpenGrp"),
 locale("MS\\0x409")
]
class SamOpenGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Open Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamOpenGrp_Start:SamOpenGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Open Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamOpenGrp_End:SamOpenGrp
{
};

[Dynamic,
 Description("SAM Query Information Group") : amended,
 Guid("{632fcc78-6057-48f9-8d5f-4bb0f73d3cd1}"),
 DisplayName("SamQueryInfoGrp"),
 locale("MS\\0x409")
]
class SamQueryInfoGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Information Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQueryInfoGrp_Start:SamQueryInfoGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Information Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQueryInfoGrp_End:SamQueryInfoGrp
{
};

[Dynamic,
 Description("SAM Set Information Group") : amended,
 Guid("{26106246-4473-4295-841b-4a51c6afc3db}"),
 DisplayName("SamSetInfoGrp"),
 locale("MS\\0x409")
]
class SamSetInfoGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Information Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetInfoGrp_Start:SamSetInfoGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Information Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetInfoGrp_End:SamSetInfoGrp
{
};

[Dynamic,
 Description("SAM Delete Group") : amended,
 Guid("{5f7c4ba5-d6a4-4625-900e-48fa7811e06a}"),
 DisplayName("SamDeleteGrp"),
 locale("MS\\0x409")
]
class SamDeleteGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Delete Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamDeleteGrp_Start:SamDeleteGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Delete Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamDeleteGrp_End:SamDeleteGrp
{
};

[Dynamic,
 Description("SAM Get Members In Group") : amended,
 Guid("{5954bc51-c5ec-4aaa-831c-6f2c1b2515b6}"),
 DisplayName("SamGetMemInGrp"),
 locale("MS\\0x409")
]
class SamGetMemInGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Members In Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetMemInGrp_Start:SamGetMemInGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Members In Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetMemInGrp_End:SamGetMemInGrp
{
};

[Dynamic,
 Description("SAM Set Member Attributes Of Group") : amended,
 Guid("{0254ba6d-7ff0-4bfe-a3f9-8fd8da667641}"),
 DisplayName("SamSetMemAttrsOfGrp"),
 locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Member Attributes Of Group") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp_Start:SamSetMemAttrsOfGrp
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Member Attributes Of Group") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetMemAttrsOfGrp_End:SamSetMemAttrsOfGrp
{
};

[Dynamic,
 Description("SAM Open Alias") : amended,
 Guid("{ba41c883-592f-4ab9-b2a9-c6263b011fe7}"),
 DisplayName("SamOpenAlias"),
 locale("MS\\0x409")
]
class SamOpenAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Open Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamOpenAlias_Start:SamOpenAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Open Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamOpenAlias_End:SamOpenAlias
{
};

[Dynamic,
 Description("SAM Query Information Alias") : amended,
 Guid("{419f025a-bf06-4673-af66-d230bec2af02}"),
 DisplayName("SamQueryInfoAlias"),
 locale("MS\\0x409")
]
class SamQueryInfoAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Information Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQueryInfoAlias_Start:SamQueryInfoAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Information Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQueryInfoAlias_End:SamQueryInfoAlias
{
};

[Dynamic,
 Description("SAM Set Information Alias") : amended,
 Guid("{e712d39d-a3a6-4224-a1bd-4717b24e4e8c}"),
 DisplayName("SamSetInfoAlias"),
 locale("MS\\0x409")
]
class SamSetInfoAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Information Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetInfoAlias_Start:SamSetInfoAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Information Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetInfoAlias_End:SamSetInfoAlias
{
};

[Dynamic,
 Description("SAM Delete Alias") : amended,
 Guid("{fbfe2540-452b-41bb-9219-dfb6fd1a129b}"),
 DisplayName("SamDeleteAlias"),
 locale("MS\\0x409")
]
class SamDeleteAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Delete Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamDeleteAlias_Start:SamDeleteAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Delete Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamDeleteAlias_End:SamDeleteAlias
{
};

[Dynamic,
 Description("SAM Add Member To Alias") : amended,
 Guid("{3a2e63d1-5dc4-4168-85ea-3e331f88ce83}"),
 DisplayName("SamAddMemToAlias"),
 locale("MS\\0x409")
]
class SamAddMemToAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Add Member To Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamAddMemToAlias_Start:SamAddMemToAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Add Member To Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamAddMemToAlias_End:SamAddMemToAlias
{
};

[Dynamic,
 Description("SAM Remove Member From Alias") : amended,
 Guid("{6ba1639c-afc4-454e-b3e0-5e8f7fc39af9}"),
 DisplayName("SamRemoveMemFromAlias"),
 locale("MS\\0x409")
]
class SamRemoveMemFromAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Remove Member From Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamRemoveMemFromAlias_Start:SamRemoveMemFromAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Remove Member From Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamRemoveMemFromAlias_End:SamRemoveMemFromAlias
{
};

[Dynamic,
 Description("SAM Get Members In Alias") : amended,
 Guid("{5cec3d52-6eeb-474d-b468-58362888f1b0}"),
 DisplayName("SamGetMemInAlias"),
 locale("MS\\0x409")
]
class SamGetMemInAlias:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Members In Alias") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetMemInAlias_Start:SamGetMemInAlias
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Members In Alias") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetMemInAlias_End:SamGetMemInAlias
{
};

[Dynamic,
 Description("SAM Open User") : amended,
 Guid("{b8d2bc4a-1525-4386-bb1c-6bb2e24eb001}"),
 DisplayName("SamOpenUser"),
 locale("MS\\0x409")
]
class SamOpenUser:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Open User") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamOpenUser_Start:SamOpenUser
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Open User") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamOpenUser_End:SamOpenUser
{
};

[Dynamic,
 Description("SAM Delete User") : amended,
 Guid("{c2a0e094-a178-4372-b4fe-a33e48c3585c}"),
 DisplayName("SamDeleteUser"),
 locale("MS\\0x409")
]
class SamDeleteUser:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Delete User") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamDeleteUser_Start:SamDeleteUser
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Delete User") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamDeleteUser_End:SamDeleteUser
{
};

[Dynamic,
 Description("SAM Query Information User") : amended,
 Guid("{e1cb227a-6d55-4282-a5f7-6fa4a5922c0b}"),
 DisplayName("SamQueryInfoUser"),
 locale("MS\\0x409")
]
class SamQueryInfoUser:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Information User") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQueryInfoUser_Start:SamQueryInfoUser
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Information User") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQueryInfoUser_End:SamQueryInfoUser
{
};

[Dynamic,
 Description("SAM Set Information User") : amended,
 Guid("{bc80e27f-6b74-4da9-abfc-2e4e82b81000}"),
 DisplayName("SamSetInfoUser"),
 locale("MS\\0x409")
]
class SamSetInfoUser:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Information User") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetInfoUser_Start:SamSetInfoUser
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Information User") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetInfoUser_End:SamSetInfoUser
{
};

[Dynamic,
 Description("SAM Change Password Computer") : amended,
 Guid("{19b30cde-3e41-4cff-83c8-3df2779f840c}"),
 DisplayName("SamChangePwdComputer"),
 locale("MS\\0x409")
]
class SamChangePwdComputer:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Change Password Computer") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamChangePwdComputer_Start:SamChangePwdComputer
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Change Password Computer") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamChangePwdComputer_End:SamChangePwdComputer
{
};

[Dynamic,
 Description("SAM Get Groups For User") : amended,
 Guid("{0e3913c5-9760-4ced-b133-004a64e8d53c}"),
 DisplayName("SamGetGrpsForUser"),
 locale("MS\\0x409")
]
class SamGetGrpsForUser:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Groups For User") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetGrpsForUser_Start:SamGetGrpsForUser
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Groups For User") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetGrpsForUser_End:SamGetGrpsForUser
{
};

[Dynamic,
 Description("SAM Query Display Information") : amended,
 Guid("{eb225178-f5f0-42b7-895b-db89276f647a}"),
 DisplayName("SamQueryDisplayInfo"),
 locale("MS\\0x409")
]
class SamQueryDisplayInfo:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Query Display Information") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamQueryDisplayInfo_Start:SamQueryDisplayInfo
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Query Display Information") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamQueryDisplayInfo_End:SamQueryDisplayInfo
{
};

[Dynamic,
 Description("SAM Get Display Enumeration Index") : amended,
 Guid("{aceb7864-9a14-4c73-8ed0-94ec53f6651c}"),
 DisplayName("SamGetDisplayEnumIdx"),
 locale("MS\\0x409")
]
class SamGetDisplayEnumIdx:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Display Enumeration Index") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetDisplayEnumIdx_Start:SamGetDisplayEnumIdx
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Display Enumeration Index") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetDisplayEnumIdx_End:SamGetDisplayEnumIdx
{
};

[Dynamic,
 Description("SAM Get User Domain Password Information") : amended,
 Guid("{4ff7a7db-43ca-470a-8b64-3003e2d22042}"),
 DisplayName("SamGetUserDomPwdInfo"),
 locale("MS\\0x409")
]
class SamGetUserDomPwdInfo:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get User Domain Password Information") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetUserDomPwdInfo_Start:SamGetUserDomPwdInfo
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get User Domain Password Information") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetUserDomPwdInfo_End:SamGetUserDomPwdInfo
{
};

[Dynamic,
 Description("SAM Remove Member From Foreign Domain") : amended,
 Guid("{8919f267-a053-4669-aa69-2da0d4a20d92}"),
 DisplayName("SamRemoveMemFromForeignDom"),
 locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Remove Member From Foreign Domain") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom_Start:SamRemoveMemFromForeignDom
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Remove Member From Foreign Domain") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamRemoveMemFromForeignDom_End:SamRemoveMemFromForeignDom
{
};

[Dynamic,
 Description("SAM Get Domain Password Information") : amended,
 Guid("{ff0c6ce2-9528-4a91-b9c7-bcf834b6f79a}"),
 DisplayName("SamGetDomPwdInfo"),
 locale("MS\\0x409")
]
class SamGetDomPwdInfo:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Domain Password Information") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetDomPwdInfo_Start:SamGetDomPwdInfo
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Domain Password Information") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetDomPwdInfo_End:SamGetDomPwdInfo
{
};

[Dynamic,
 Description("SAM Set Boot Key Information") : amended,
 Guid("{2e991575-c2ed-42a7-97ff-a0d6571f1862}"),
 DisplayName("SamSetBootKeyInfo"),
 locale("MS\\0x409")
]
class SamSetBootKeyInfo:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Set Boot Key Information") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamSetBootKeyInfo_Start:SamSetBootKeyInfo
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Set Boot Key Information") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamSetBootKeyInfo_End:SamSetBootKeyInfo
{
};

[Dynamic,
 Description("SAM Get Boot Key Information") : amended,
 Guid("{33be4128-d02e-4b6f-949e-ab77cc8164b1}"),
 DisplayName("SamGetBootKeyInfo"),
 locale("MS\\0x409")
]
class SamGetBootKeyInfo:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Get Boot Key Information") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamGetBootKeyInfo_Start:SamGetBootKeyInfo
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Get Boot Key Information") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamGetBootKeyInfo_End:SamGetBootKeyInfo
{
};

[Dynamic,
 Description("SAM Process Mapped Attributes") : amended,
 Guid("{96bd320f-1e51-4c06-86f3-ee64f0a2f0cf}"),
 DisplayName("SampProcessMappedAttributes"),
 locale("MS\\0x409")
]
class SamProcessMappedAttributes:MSSAMTrace
{

};

[Dynamic,
 Description("SAM Process Mapped Attributes") : amended,
 EventType(1),
 EventTypeName("Start"),
 locale("MS\\0x409")
]
class SamProcessMappedAttributes_Start:SamProcessMappedAttributes
{
    [WmiDataId(1),
     Description("Signature") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sam;
    [WmiDataId(2),
     Description("SamTraceVersion") : amended,
     read]
     uint32  Version;
    [WmiDataId(3),
     Description("Client SID") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Sid;
    [WmiDataId(4),
     Description("Client Network Address") : amended,
     StringTermination("NullTerminated"),
     format("w"),
     read]
     string  Client;
};

[Dynamic,
 Description("SAM Process Mapped Attributes") : amended,
 EventType(2),
 EventTypeName("End"),
 locale("MS\\0x409")
]
class SamProcessMappedAttributes_End:SamProcessMappedAttributes
{
};

${this.title}

Code Editor : samsrv.mof