home *** CD-ROM | disk | FTP | other *** search
- <?xml version="1.0"?>
- <Schema name="CeipAssistantV1" xmlns="urn:schemas-microsoft-com:xml-data" xmlns:dt="urn:schemas-microsoft-com:datatypes">
-
- <AttributeType name="Comparand" dt:type="string" />
-
- <AttributeType name="Divisor" dt:type="ui4" />
-
- <AttributeType name="Hive" dt:type="enumeration" dt:values="HKLM HKCC HKCR" required="yes" />
-
- <AttributeType name="Subkey" dt:type="string" required="yes" />
-
- <AttributeType name="Namespace" dt:type="string" required="yes" />
-
- <AttributeType name="Query" dt:type="string" required="yes" />
-
- <AttributeType name="MaxRows" dt:type="ui4" required="no" />
-
- <AttributeType name="MaxStreamRows" dt:type="ui4" required="no" />
-
- <AttributeType name="MaxErrors" dt:type="ui4" required="no" />
-
- <AttributeType name="QueryTimeout" dt:type="ui4" required="no" />
-
- <AttributeType name="Channel" dt:type="string" required="yes" />
-
- <AttributeType name="RoleId" dt:type="ui2" required="yes" />
-
- <AttributeType name="EventCount" dt:type="ui4" required="yes" />
-
- <AttributeType name="RequiredState" dt:type="enumeration" dt:values="Installed Running" />
-
- <AttributeType name="JoinOperator" dt:type="enumeration" dt:values="And Or" />
-
- <AttributeType name="Name" dt:type="string" />
-
- <AttributeType name="Value" dt:type="ui4" />
-
- <AttributeType name="DefaultValue" dt:type="ui4" />
-
- <AttributeType name="Operator" dt:type="enumeration" dt:values="Equals NotEquals GreaterThan GreaterThanOrEquals LessThan LessThanOrEquals" />
-
- <AttributeType name="PropertyName" dt:type="string" />
-
- <AttributeType name="PropertyType" dt:type="enumeration" dt:values="Boolean Double Dword Qword String" />
-
- <AttributeType name="IsArray" dt:type="boolean" />
-
- <AttributeType name="StartElement" dt:type="ui4" />
-
- <AttributeType name="MaxElements" dt:type="ui4" />
-
- <AttributeType name="DataId" dt:type="ui4" />
-
- <AttributeType name="DataType" dt:type="enumeration" dt:values="Boolean Double Dword String" />
-
- <AttributeType name="ValueName" dt:type="string" />
-
- <AttributeType name="ValueType" dt:type="enumeration" dt:values="Dword Qword String StringEx" />
-
- <AttributeType name="Function" dt:type="enumeration" dt:values="Count Exists Sum" />
-
- <AttributeType name="MSSpecificEvents" dt:type="ui4" required="no"/>
-
- <ElementType name="Author">
- <datatype dt:type="string" />
- </ElementType>
-
- <ElementType name="Version">
- <datatype dt:type="ui4" />
- </ElementType>
-
- <ElementType name="FileAttributes" model="closed" content="eltOnly">
- <element type="Author" minOccurs="0" maxOccurs="1" />
- <element type="Version" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="GlobalTimeout">
- <datatype dt:type="ui4" />
- </ElementType>
-
- <ElementType name="QueryTimeout">
- <datatype dt:type="ui4" />
- </ElementType>
-
- <ElementType name="MaxRows">
- <datatype dt:type="ui4" />
- </ElementType>
-
- <ElementType name="MaxErrors">
- <datatype dt:type="ui4" />
- </ElementType>
-
- <ElementType name="ExecutionOptions" model="closed" content="eltOnly">
- <element type="GlobalTimeout" minOccurs="0" maxOccurs="1" />
- <element type="QueryTimeout" minOccurs="0" maxOccurs="1" />
- <element type="MaxRows" minOccurs="0" maxOccurs="1" />
- <element type="MaxErrors" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="Global" content="empty" />
-
- <ElementType name="RoleTest" content="empty">
- <attribute type="RoleId" required="yes" />
- <attribute type="RequiredState" required="yes" />
- </ElementType>
-
- <ElementType name="Expression" content="eltOnly" order="many">
- <attribute type="JoinOperator" required="yes" />
- <element type="RoleTest"/>
- </ElementType>
-
- <ElementType name="Applicability" model="closed" content="eltOnly" order="one">
- <element type="Global" minOccurs="0" maxOccurs="1"/>
- <element type="Expression" minOccurs="0" maxOccurs="1"/>
- </ElementType>
-
- <ElementType name="CastTransform" model="closed" content="empty">
- <attribute type="DataType" required="yes" />
- </ElementType>
-
- <ElementType name="Enum" model="closed" content="empty">
- <attribute type="Name" required="yes" />
- <attribute type="Value" required="yes" />
- </ElementType>
-
- <ElementType name="EnumTransform" model="closed" content="eltOnly">
- <attribute type="DefaultValue" required="no" />
- <element type="Enum" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="ScaleTransform" content="empty">
- <attribute type="Divisor" required="yes" />
- </ElementType>
-
- <ElementType name="ValueTest" model="closed" content="empty">
- <attribute type="Operator" required="yes" />
- <attribute type="DataType" required="yes" />
- <attribute type="Comparand" required="yes" />
- </ElementType>
-
- <ElementType name="LogicalTransform" model="closed" content="empty">
- <attribute type="Operator" required="yes" />
- <attribute type="DataType" required="yes" />
- <attribute type="Comparand" required="yes" />
- </ElementType>
-
- <ElementType name="Transforms" model="closed" content="eltOnly" order="many">
- <element type="CastTransform" />
- <element type="EnumTransform" />
- <element type="ScaleTransform" />
- <element type="LogicalTransform" />
- </ElementType>
-
- <ElementType name="WmiPropertySelector" model="closed" content="eltOnly" order="seq">
- <attribute type="PropertyName" required="yes" />
- <attribute type="PropertyType" required="yes" />
- <attribute type="IsArray" required="no" />
- <attribute type="StartElement" required="no" />
- <attribute type="MaxElements" required="no" />
- <element type="Transforms" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
-
- <ElementType name="WmiAggregate" model="closed" content="eltOnly">
- <attribute type="DataId" required="yes" />
- <attribute type="Function" required="yes" />
- <element type="WmiPropertySelector" minOccurs="0" maxOccurs="1" />
- <element type="ValueTest" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="WmiAggregates" model="closed" content="eltOnly" order="seq">
- <element type="WmiAggregate" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="WmiDatapoint" model="closed" content="eltOnly" order="seq">
- <attribute type="DataId" required="yes" />
- <attribute type="DataType" required="yes" />
- <element type="WmiPropertySelector" minOccurs="1" maxOccurs="1"/>
- </ElementType>
-
- <ElementType name="WmiDatapoints" model="closed" content="eltOnly" order="seq">
- <element type="WmiDatapoint" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="WmiStreamColumn" model="closed" content="eltOnly" order="seq">
- <attribute type="DataType" required="yes" />
- <element type="WmiPropertySelector" minOccurs="1" maxOccurs="1"/>
- </ElementType>
-
- <ElementType name="WmiStreamColumns" model="closed" content="eltOnly" order="seq">
- <element type="WmiStreamColumn" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="WmiStream" model="closed" content="eltOnly" order="seq">
- <attribute type="DataId" required="yes" />
- <attribute type="MaxStreamRows" required="no" />
- <element type="WmiStreamColumns" minOccurs="1" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="WmiStreams" model="closed" content="eltOnly" order="seq">
- <element type="WmiStream" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="WmiQuery" model="closed" content="eltOnly" order="seq">
- <attribute type="Namespace" required="yes" />
- <attribute type="Query" required="yes" />
- <attribute type="QueryTimeout" required="no" />
- <attribute type="MaxRows" required="no" />
- <element type="WmiAggregates" minOccurs="0" maxOccurs="1" />
- <element type="WmiDatapoints" minOccurs="0" maxOccurs="1" />
- <element type="WmiStreams" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="RegistryValueSelector" model="closed" content="eltOnly" order="seq">
- <attribute type="ValueName" required="yes" />
- <attribute type="ValueType" required="yes" />
- <element type="Transforms" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="RegistryAggregate" model="closed" content="eltOnly" order="seq">
- <attribute type="DataId" required="yes" />
- <attribute type="Function" required="yes" />
- <element type="RegistryValueSelector" minOccurs="0" maxOccurs="1" />
- <element type="ValueTest" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="RegistryAggregates" model="closed" content="eltOnly" order="seq">
- <element type="RegistryAggregate" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="RegistryDatapoint" model="closed" content="eltOnly" order="seq">
- <attribute type="DataId" required="yes" />
- <attribute type="DataType" required="yes" />
- <element type="RegistryValueSelector" minOccurs="1" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="RegistryDatapoints" model="closed" content="eltOnly" order="seq">
- <element type="RegistryDatapoint" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="RegistryQuery" model="closed" content="eltOnly" order="seq">
- <attribute type="Hive" required="yes" />
- <attribute type="Subkey" required="yes" />
- <element type="RegistryAggregates" minOccurs="0" maxOccurs="1" />
- <element type="RegistryDatapoints" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="EventAggregate" model="closed" content="empty">
- <attribute type="DataId" required="yes" />
- <attribute type="Function" required="yes" />
- </ElementType>
-
- <ElementType name="EventAggregates" model="closed" content="eltOnly" order="seq">
- <element type="EventAggregate" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="TopEvents" model="closed" content="empty">
- <attribute type="EventCount" required="yes" />
- <attribute type="MSSpecificEvents" required="no" />
- </ElementType>
-
- <ElementType name="EventQuery" model="closed" content="eltOnly" order="seq">
- <attribute type="Channel" required="yes" />
- <attribute type="Query" required="yes" />
- <attribute type="QueryTimeout" required="no" />
- <element type="EventAggregates" minOccurs="0" maxOccurs="1" />
- <element type="TopEvents" minOccurs="0" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="Queries" model="closed" content="eltOnly" order="many">
- <element type="WmiQuery"/>
- <element type="RegistryQuery"/>
- <element type="EventQuery"/>
- </ElementType>
-
- <ElementType name="QueryGroup" model="closed" content="eltOnly" order="seq">
- <attribute type="MaxErrors" required="no" />
- <element type="Applicability" minOccurs="1" maxOccurs="1" />
- <element type="Queries" minOccurs="1" maxOccurs="1" />
- </ElementType>
-
- <ElementType name="QueryGroups" model="closed" content="eltOnly" order="seq">
- <element type="QueryGroup" minOccurs="1" maxOccurs="*" />
- </ElementType>
-
- <ElementType name="CeipAssistant" model="closed" content="eltOnly" order="seq">
- <element type="FileAttributes" minOccurs="1" maxOccurs="1" />
- <element type="ExecutionOptions" minOccurs="1" maxOccurs="1" />
- <element type="QueryGroups" minOccurs="1" maxOccurs="1" />
- </ElementType>
-
- </Schema>