<?xml version='1.0' encoding='utf-8' standalone='yes'?>
<?Copyright (c) Microsoft Corporation. All rights reserved.?>
<instrumentationManifest>
  <instrumentation>
    <intervals>
      <interval guid="{d8d639a0-cf4c-45fb-976a-0000DEADBEEF}" name="FastStartup" friendlyname="Fast Startup">
        <metadata>
          <ValidateInterval.PerformValidation>yes</ValidateInterval.PerformValidation>
        </metadata>

        <interval guid="{D38BE1A3-2A14-436A-9064-6D3E6CB85F88}" name="FastStartup-Suspend-Overall-Time" friendlyname="Overall Shutdown">
          <metadata>
            <FAS.TestNode>yes</FAS.TestNode>
            <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
            <ApdSummary>yes</ApdSummary>
            <fullfriendlyname>Fast Startup - Overall Suspend</fullfriendlyname>
          </metadata>

          <interval guid="{d8d639a0-cf4c-45fb-976a-000111000100}" key="$Global" name="FastStartup-Suspend-UserSession-Shutdown" friendlyname="User Session Shutdown">
            <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="301" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="22" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <fullfriendlyname>Fast Startup - User Session Shutdown</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>
          </interval>

          <interval guid="{7A7C6217-9A3E-4ecf-A2DD-E2819AF7C7A8}" key="$Global" name="FastStartup-Suspend-Winlogon-Notifications" friendlyname="Winlogon Notifications">
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.SumChildDurations>yes</FAS.TestNode.SumChildDurations>
            </metadata>

            <interval guid="{05C4C8EF-78E2-4cf9-B965-A628957D337F}" key="$ProcessId" name="FastStartup-Suspend-Winlogon-CreateSession" friendlyname="Create Session">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=0"/>
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=0"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
              </metadata>

              <interval guid="{A75D8F5D-E8F8-40b8-B453-5CC70DEAC06F}" key="Event" instance="SubscriberName" name="FastStartup-Suspend-Winlogon-CreateSession-Subscribers" friendlyname="Subscribers for Create Session">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=0"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{2E69E6FB-3924-4deb-8B71-E5198A9952EF}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-CreateSession-ConnectToSubscriber" friendlyname="Connect to Subscriber for Create Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Connect to Subscriber for Create Session</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{35F234D7-CF6D-44ae-A991-9B89BEA5FA31}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-CreateSession-CallSubscriber" friendlyname="Call Subscriber for Create Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=0"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>CallSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Call Subscriber for Create Session</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{F760BB96-7C01-4912-8643-94E7B3D59F30}" key="SubscriberName" instance="Message" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-CreateSession-NotificationPended" friendlyname="Pended Notification for Create Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=0"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>PendedNotification</InstanceSuffix>
                  </metadata>
                </interval>
              </interval>
            </interval>
            <!-- end of winlogon create session -->

            <interval guid="{FB9348A5-319C-42aa-81B3-585F305963D0}" key="$ProcessId" name="FastStartup-Suspend-Winlogon-EndShell" friendlyname="End Shell">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=13"/>
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=13"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
              </metadata>

              <interval guid="{D5C41F3D-5BAB-41bd-9E7F-70E76BCD4D2B}" key="Event" instance="SubscriberName" name="FastStartup-Suspend-Winlogon-EndShell-Subscribers" friendlyname="Subscribers for End Shell">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=13"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=13"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{BFC5A2BB-71D1-49f1-A052-3B3948A32392}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-EndShell-ConnectToSubscriber" friendlyname="Connect to Subscriber for End Shell">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Connect to Subscriber for End Shell</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{9261872F-D3A7-4d80-BDE3-8479CC920639}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-EndShell-CallSubscriber" friendlyname="Call Subscriber for End Shell">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=13"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=13"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>CallSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Call Subscriber for End Shell</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{62619109-0FDC-4143-9A33-4AFC9A0F0E4B}" key="SubscriberName" instance="Message" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-EndShell-NotificationPended" friendlyname="Pended Notification for End Shell">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=13"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=13"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>PendedNotification</InstanceSuffix>
                  </metadata>
                </interval>
              </interval>
            </interval>
            <!-- end of winlogon end shell -->

            <interval guid="{3F0622CA-4537-4419-8BCE-4FEB10AAF097}" key="$ProcessId" name="FastStartup-Suspend-Winlogon-Logoff" friendlyname="Logoff">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=3"/>
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=3"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
              </metadata>

              <interval guid="{F466EE67-192C-4772-B13D-052CCD2D70B3}" key="Event" instance="SubscriberName" name="FastStartup-Suspend-Winlogon-Logoff-Subscribers" friendlyname="Subscribers for Logoff">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=3"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=3"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{46DEFEC9-AC3F-4762-86F6-56E6B6295473}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-Logoff-ConnectToSubscriber" friendlyname="Connect to Subscriber for Logoff">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Connect to Subscriber for Logoff</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{B2891DFB-0621-45af-B55B-17A781BEEE80}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-Logoff-CallSubscriber" friendlyname="Call Subscriber for Logoff">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=3"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=3"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>CallSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Call Subscriber for Logoff</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{00F052C0-2BCD-4c4a-8BC0-252AA6F9E9C5}" key="SubscriberName" instance="Message" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-Logoff-NotificationPended" friendlyname="Pended Notification for Logoff">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=3"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=3"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>PendedNotification</InstanceSuffix>
                  </metadata>
                </interval>
              </interval>
            </interval>
            <!-- end of winlogon logoff -->

            <interval guid="{9B3F1FCE-600E-4834-80DF-6091A1D6DEB8}" key="$ProcessId" name="FastStartup-Suspend-Winlogon-TerminateSession" friendlyname="Terminate Session">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=1"/>
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=1"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
              </metadata>

              <interval guid="{405FAB48-DE52-405a-8DB1-F4E3BEFA444D}" key="Event" instance="SubscriberName" name="FastStartup-Suspend-Winlogon-TerminateSession-Subscribers" friendlyname="Subscribers for Terminate Session">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=1"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=1"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{319F254D-1696-4188-A132-B172DD85D700}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-TerminateSession-ConnectToSubscriber" friendlyname="Connect to Subscriber for Terminate Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Connect to Subscriber for Terminate Session</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{7893E580-71B0-48e0-BFD0-AE0F2BCE4AC0}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-TerminateSession-CallSubscriber" friendlyname="Call Subscriber for Terminate Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=1"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=1"/>
                  <metadata>
                    <ApdCpa>yes</ApdCpa>
                    <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                    <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>CallSubscriber</InstanceSuffix>
                    <fullfriendlyname>Fast Startup - Suspend Call Subscriber for Terminate Session</fullfriendlyname>
                  </metadata>
                </interval>

                <interval guid="{88FAA4C2-B25F-42e7-BE1B-DA98008E0CDD}" key="SubscriberName" instance="Message" matchparentkey="yes" name="FastStartup-Suspend-Winlogon-TerminateSession-NotificationPended" friendlyname="Pended Notification for Terminate Session">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=1"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=1"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                    <InstanceSuffix>PendedNotification</InstanceSuffix>
                  </metadata>
                </interval>
              </interval>
            </interval>
            <!-- end of winlogon terminate session -->

          </interval>
          <!-- End of Winlogon Notifications -->
          
          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000300}" key="$ProcessId" name="FastStartup-Suspend-ShutdownProcesses-Phase" friendlyname="Shutdown Processes">
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ApdContention>yes</ApdContention>
              <fullfriendlyname>Fast Startup - Shutdown Processes</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{d8d639a0-0000-0000-0000-000000000301}" key="ProcessId" instance="ProcessId" instancetype="Pid" name="FastStartup-Suspend-ShutdownProcesses-Process" friendlyname="Shutdown Process">
              <event provider="{9d55b53d-449b-4824-a637-24f9d69aa02f}" type="start" value="12009" version="1"/>
              <event provider="{9d55b53d-449b-4824-a637-24f9d69aa02f}" type="stop" value="12010" version="1"/>
              <metadata>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>150000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>300000000</ApdThresholdSev0CpaTimeNs>
                <FAS.TestNode>yes</FAS.TestNode>
                <fullfriendlyname>Fast Startup - Shutdown Process</fullfriendlyname>
              </metadata>
            </interval>
          </interval>
            
          <!--</interval> --> <!-- End of User Session Shutdown -->

          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000000}" key="$ProcessId" name="FastStartup-Suspend-Apps-Phase" friendlyname="Suspend Processes">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="22" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="23" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ApdContention>yes</ApdContention>
              <fullfriendlyname>Fast Startup - Suspend Processes</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{d8d639a0-0000-0000-0000-000000000001}" key="Pid" instance="Pid" instancetype="Pid" name="FastStartup-Suspend-Apps-App" friendlyname="Suspend Process">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="16" version="0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="17" version="0"/>
              <metadata>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>150000000</ApdThresholdSev0CpaTimeNs>
                <FAS.TestNode>yes</FAS.TestNode>
                <fullfriendlyname>Fast Startup - Suspend Process</fullfriendlyname>
              </metadata>
            </interval>

          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000002}" key="$ProcessId" name="FastStartup-Suspend-Services-Phase" friendlyname="Suspend Services">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="24" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="25" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ApdContention>yes</ApdContention>
              <fullfriendlyname>Fast Startup - Suspend Services</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{d8d639a0-0000-0000-0000-000000000003}" key="Name" instance="Name" name="FastStartup-Suspend-Services-Service" friendlyname="Suspend Service">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="18" version="0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="19" version="0"/>
              <metadata>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                <FAS.TestNode>yes</FAS.TestNode>
                <fullfriendlyname>Fast Startup - Suspend Service</fullfriendlyname>
              </metadata>
            </interval>
          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000005}" key="$ProcessId" name="FastStartup-Suspend-Superfetch-PageIn" friendlyname="Superfetch Prepare Memory">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="64" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="65" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>
          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000008}" key="$ProcessId" name="FastStartup-Suspend-PreSleepCallbacks" friendlyname="Pre-Sleep Callbacks">
            <ApdCpa>yes</ApdCpa>
            <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
            <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="68" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="69" version="0"/>
            <metadata>
              <fullfriendlyname>Fast Startup - Suspend Pre-Sleep Callbacks</fullfriendlyname>
            </metadata>
          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-000000000009}" key="$ProcessId" name="FastStartup-Suspend-SwapInWorkerThreads" friendlyname="Worker Threads Swap-in">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="69" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="35" version="0" filter="Query=1"/>
          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-00000000000a}" key="$ProcessId" name="FastStartup-Suspend-FlushVolumes" friendlyname="Flush Storage Volumes">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="36" version="0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="35" version="0" filter="Query=0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>
          </interval>

          <interval guid="{d8d639a0-cf4c-45fb-976a-00000000000b}" key="$ProcessId" name="FastStartup-Suspend-QueryDevices-Phase" friendlyname="Query Devices">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="35" version="0" filter="Query=1"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="36" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ApdContention>yes</ApdContention>
              <fullfriendlyname>Fast Startup - Suspend Query Devices</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{d8d639a0-0000-0000-0000-00000000000e}" key="Irp" instance="InstanceName" instancetype="device" name="FastStartup-Suspend-QueryDevices-Device" friendlyname="Query Device">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="7" version="1" filter="MinorFunction=3,PowerStateType=0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="8" version="0"/>
              <metadata>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>100000000</ApdThresholdSev0CpaTimeNs>
                <FAS.TestNode>yes</FAS.TestNode>
                <fullfriendlyname>Fast Startup - Suspend Query Device</fullfriendlyname>
              </metadata>
            </interval>

          </interval>

          <interval guid="{5E81D74C-0CCC-43f9-8119-953F827BCD12}" key="$ProcessId" name="FastStartup-Suspend-Devices-Phase" friendlyname="Suspend Devices">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="35" version="0" filter="Query=0"/>
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="36" version="0"/>
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ApdContention>yes</ApdContention>
              <fullfriendlyname>Fast Startup - Suspend Devices</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{d8d639a0-0000-0000-0000-00000000000d}" key="Irp" instance="InstanceName" instancetype="device" name="FastStartup-Suspend-Devices-Device" friendlyname="Suspend Device">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="7" version="1" filter="MinorFunction=2,PowerStateType=0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="8" version="0"/>
              <metadata>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>150000000</ApdThresholdSev0CpaTimeNs>
                <FAS.TestNode>yes</FAS.TestNode>
                <fullfriendlyname>Fast Startup - Suspend Device</fullfriendlyname>
              </metadata>
            </interval>
          </interval>

          <interval guid="{BFDF0516-CAA9-4b3a-A480-8FBA9146A34A}" name="FastStartup-Suspend-HiberFileTime" friendlyname="Total Hiberfile Write">
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>

            <interval guid="{93783B2C-A67F-49cb-89BC-BF305D7E2CEA}" key="$Global" name="FastStartup-Suspend-HiberInitTime" friendlyname="Hiberfile Initialization">
              <intlink type="start" interval="{5E81D74C-0CCC-43f9-8119-953F827BCD12}"/>
              <intlink type="stop" interval="{7D6BA3F6-BC04-4776-8A7F-93CF7F4E2B6D}"/>
            </interval>

            <interval guid="{7D6BA3F6-BC04-4776-8A7F-93CF7F4E2B6D}" key="$Global" name="FastStartup-Suspend-WriteHiberFile" friendlyname="Hiberfile Write">
              <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="HiberHiberFileTime" durationmultiplier="1000000"/>
              <intlink type="stop" interval="{EC1BB2D9-4AA8-4d82-84AA-6042FF4CFBE3}"/>
            </interval>
          </interval>

          <interval guid="{B9551085-F8D2-4131-A4B4-535FDC48E949}" key="$Global" name="FastStartup-Hibernate-Total" friendlyname="System Suspend">
            <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="1" version="0"/>
            <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="TotalHibernateTime" durationmultiplier="1000000"/>
            <metadata>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>
          </interval>

        </interval>
        <!-- End of Suspend Overall -->

        <interval guid="{EC1BB2D9-4AA8-4d82-84AA-6042FF4CFBE3}" key="$Global" name="FastStartup-Powered-Down" friendlyname="Powered Off/Sleeping">
          <intlink type="start" interval="{B9551085-F8D2-4131-A4B4-535FDC48E949}"/>
          <intlink type="stop" interval="{d8d639a0-cf4c-45fb-976a-000006002000}"/>
          <metadata>
            <ValidateInterval.ExcludeFromTimeChecks>yes</ValidateInterval.ExcludeFromTimeChecks>
            <ValidateInterval.Required>yes</ValidateInterval.Required>
        </metadata>
        </interval>

        <interval guid="{B5243DEF-E83B-450f-99EC-BFCE45D449BC}" key="$Global" name="FastStartup-Resume-BIOS" friendlyname="BIOS Initialization">
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.Sev0>4000</FAS.Sev0>
              <FAS.Sev1>2000</FAS.Sev1>
              <FAS.DurationRemediation>Delays in BIOS can be caused by PXE boot, BIOS pre-boot options, or other issues. To investigate further, please use WPA or contact your BIOS vendor.</FAS.DurationRemediation>
              <fullfriendlyname>Fast Startup - BIOS Initialization</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
            </metadata>
            <intlink type="start" interval="{EC1BB2D9-4AA8-4d82-84AA-6042FF4CFBE3}"/>
            <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="POSTTime" durationmultiplier="1000000"/>
        </interval>

        <interval guid="{6561933E-449F-4d47-9C02-87295C9632BD}" key="$Global" name="FastStartup-Resume-FwPostTime" friendlyname="Firmware POST Duration">
          <metadata>
            <FAS.TestNode>yes</FAS.TestNode>
          </metadata>
          <intlink type="start" interval="{EC1BB2D9-4AA8-4d82-84AA-6042FF4CFBE3}"/>
          <marker type="duration" provider="{15ca44ff-4d7a-4baa-bba5-0998955e531e}" value="30" version="0" duration="StartOSImageStart" durationmultiplier="1000000"/>
        </interval>

        <interval guid="{d8d639a0-cf4c-45fb-976a-000006002000}" key="$Global" name="FastStartup-Resume-PoweredOnToKernelResumeComplete" friendlyname="Powered On to Kernel Resume Complete">
          <event type="stop" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1"/>
          <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="TotalResumeTime" durationmultiplier="1000000"/>
        </interval>

        <interval guid="{3E6F217A-5C2F-4126-993F-69BC46A6A881}" name="FastStartup-Resume-Overall-Time" friendlyname="Total Boot [Excluding BIOS]">
          <metadata>
            <FAS.TestNode>yes</FAS.TestNode>
            <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
            <ApdSummary>yes</ApdSummary>
            <fullfriendlyname>Fast Startup - Overall Resume</fullfriendlyname>
          </metadata>

          <interval guid="{2E0B9837-6FE0-4873-9C89-46BCCCB8C222}" name="FastStartup-Resume-MainPath-Time" friendlyname="Boot Main Path">
            <metadata>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <fullfriendlyname>Fast Startup - Main Path Boot</fullfriendlyname>
            </metadata>

            <interval guid="{d8d639a0-cf4c-45fb-976a-000002002000}" key="$Global" name="FastStartup-Resume-BootMgr" friendlyname="Boot Manager">
              <intlink type="start" interval="{B5243DEF-E83B-450f-99EC-BFCE45D449BC}"/>
              <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="ResumeBootMgrTime" durationmultiplier="1000000"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
                <ValidateInterval.Required>yes</ValidateInterval.Required>
              </metadata>
            </interval>

            <interval guid="{40B4F094-C0AA-4d3d-B7F0-0764C005D4B8}" key="$Global" name="FastStartup-Resume-ReadHiberFile" friendlyname="Hiberfile Read">
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
                <ValidateInterval.Required>yes</ValidateInterval.Required>
              </metadata>

              <interval guid="{d8d639a0-cf4c-45fb-976a-000003002000}" key="$Global" name="FastStartup-Resume-Winresume" friendlyname="Resume Application">
                <intlink type="start" interval="{d8d639a0-cf4c-45fb-976a-000002002000}"/>
                <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="ResumeAppTime" durationmultiplier="1000000"/>
              </interval>

              <interval guid="{d8d639a0-cf4c-45fb-976a-000004002000}" key="$Global" name="FastStartup-Resume-KernelPhase" friendlyname="Kernel Hiberfile Read">
                <intlink type="start" interval="{d8d639a0-cf4c-45fb-976a-000003002000}"/>
                <marker type="duration" provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" value="117" version="1" duration="KernelResumeHiberFileTime" durationmultiplier="1000000"/>
              </interval>

            </interval>

            <interval guid="{d8d639a0-cf4c-45fb-976a-000000010000}" key="$ProcessId" name="FastStartup-Resume-Devices-Phase" friendlyname="Resume Devices">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="37" version="0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="38" version="0"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
                <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
                <ApdContention>yes</ApdContention>
                <fullfriendlyname>Fast Startup - Resume Devices</fullfriendlyname>
                <ValidateInterval.Required>yes</ValidateInterval.Required>
              </metadata> 

              <interval guid="{d8d639a0-0000-0000-0000-00000001000d}" key="Irp" instance="InstanceName" instancetype="device" name="FastStartup-Resume-Devices-Device" friendlyname="Resume Device">
                <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="7" version="1" filter="MinorFunction=2,PowerStateType=0"/>
                <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="8" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>100000000</ApdThresholdSev0CpaTimeNs>
                  <FAS.TestNode>yes</FAS.TestNode>
                  <fullfriendlyname>Fast Startup - Resume Device</fullfriendlyname>
                </metadata>
              </interval>

            </interval>

            <interval guid="{30E09274-4681-4215-B471-A1637050C8F4}" key="$Global" name="FastStartup-Resume-Components" friendlyname="Resume Components">
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="start" value="38" version="0"/>
              <event provider="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" type="stop" value="2" version="0"/>
            </interval>

            <interval guid="{67FEC554-A6CC-4b6f-A941-4CA449AA4ED3}" key="$ProcessId" name="FastStartup-Resume-OsSelectionMenu" friendlyname="Operating System Selection Menu">
              <event provider="{67d781bd-cbd2-4bd2-ad1f-6152fb891246}" type="start" value="1000" version="0"/>
              <event provider="{67d781bd-cbd2-4bd2-ad1f-6152fb891246}" type="stop" value="1001" version="0"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
              </metadata>
            </interval>

            <interval guid="{d8d639a0-cf4c-45fb-976a-000000000100}" key="$ProcessId" name="FastStartup-Resume-Winlogon-Phase" friendlyname="Winlogon Resume">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="202" version="0"/>
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="10" version="0"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
                <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
                <fullfriendlyname>Fast Startup - Winlogon Resume</fullfriendlyname>
                <ValidateInterval.Required>yes</ValidateInterval.Required>
              </metadata> 

              <interval guid="{d8d639a0-0000-0000-0000-000000000101}" key="$ProcessId"  name="FastStartup-Resume-Winlogon-Request Credentials" friendlyname="Request Credentials">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="203" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="204" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>150000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>300000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Request Credentials</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000102}" key="$ProcessId"  name="FastStartup-Resume-Winlogon-AuthenticateUser" friendlyname="Authenticate User">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="1" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="2" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Authenticate User</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000105}" key="$ProcessId" name="FastStartup-Resume-Winlogon-ThemesOnLogonPre" friendlyname="Prepare Themes">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="11" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="12" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Prepare Themes</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000106}" key="$ProcessId" name="FastStartup-Resume-Winlogon-DwmpNotifyUserLogon" friendlyname="Notify DWM">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="67" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="68" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Notify DWM</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000107}" key="$ProcessId" name="FastStartup-Resume-Winlogon-ThemesOnLogonPost" friendlyname="Notify Themes">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="13" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="14" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Notify Themes</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000108}" key="$ProcessId" name="FastStartup-Resume-Winlogon-CheckWindowsLicenseStatus" friendlyname="Check License">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="5" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="6" version="0"/>
                <metadata>
                  <fullfriendlyname>Fast Startup - Resume Check License</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{d8d639a0-0000-0000-0000-000000000109}" key="$ProcessId" name="FastStartup-Resume-Winlogon-RestoringNetConnections" friendlyname="Restore Network Connections">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="7" version="0"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="8" version="0"/>
                <metadata>
                  <ApdCpa>yes</ApdCpa>
                  <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                  <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                  <fullfriendlyname>Fast Startup - Resume Restore Network Connections</fullfriendlyname>
                </metadata>
              </interval>

              <interval guid="{B1F9921C-BD0B-42c4-962F-F4CAAA37DF84}" key="$ProcessId" name="FastStartup-Resume-Winlogon-Logon" friendlyname="Logon">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=2"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=2"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{1FBC9FDF-DA40-4fdf-8CEE-F4165B7C991A}" key="Event" instance="SubscriberName" name="FastStartup-Resume-Winlogon-Logon-Subscribers" friendlyname="Subscribers for Logon">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=2"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=2"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                  </metadata>

                  <interval guid="{B2BD458F-B29D-4379-9D4C-B7B42B3CBC92}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Resume-Winlogon-Logon-ConnectToSubscriber" friendlyname="Connect to Subscriber for Logon">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                    <metadata>
                      <ApdCpa>yes</ApdCpa>
                      <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                      <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                      <fullfriendlyname>Fast Startup - Resume Connect to Subscriber for Logon</fullfriendlyname>
                    </metadata>
                  </interval>

                  <interval guid="{A8EB4DB9-27B1-4aaf-BDCE-739BE16C85F9}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Resume-Winlogon-Logon-CallSubscriber" friendlyname="Call Subscriber for Logon">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=2"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=2"/>
                    <metadata>
                      <ApdCpa>yes</ApdCpa>
                      <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                      <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>CallSubscriber</InstanceSuffix>
                      <fullfriendlyname>Fast Startup - Resume Call Subscriber for Logon</fullfriendlyname>
                    </metadata>
                  </interval>

                  <interval guid="{3E0AED14-7021-4864-B183-66A1B14261B7}" key="SubscriberName" instance="Message" matchparentkey="yes" name="FastStartup-Resume-Winlogon-Logon-NotificationPended" friendlyname="Pended Notification for Logon">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=2"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=2"/>
                    <metadata>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>PendedNotification</InstanceSuffix>
                    </metadata>
                  </interval>
                </interval>
              </interval> <!-- end of winlogon logon -->

              <interval guid="{2C6CC266-ACB5-4e17-87C2-1F1197B421A2}" key="$ProcessId" name="FastStartup-Resume-Winlogon-StartShell" friendlyname="Start Shell">
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=12"/>
                <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=12"/>
                <metadata>
                  <FAS.TestNode>yes</FAS.TestNode>
                </metadata>

                <interval guid="{85AB4A5C-ADB3-4147-95AD-D428E758632F}" key="Event" instance="SubscriberName" name="FastStartup-Resume-Winlogon-StartShell-Subscribers" friendlyname="Subscribers for Start Shell">
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="805" version="0" filter="Event=12"/>
                  <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="806" version="0" filter="Event=12"/>
                  <metadata>
                    <FAS.TestNode>yes</FAS.TestNode>
                  </metadata>

                  <interval guid="{F6CC49BE-D647-472a-81ED-7C069B0F3E1B}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Resume-Winlogon-StartShell-ConnectToSubscriber" friendlyname="Connect to Subscriber for Start Shell">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="809" version="0"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="810" version="0"/>
                    <metadata>
                      <ApdCpa>yes</ApdCpa>
                      <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                      <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>ConnectToSubscriber</InstanceSuffix>
                      <fullfriendlyname>Fast Startup - Resume Connect to Subscriber for Start Shell</fullfriendlyname>
                    </metadata>
                  </interval>

                  <interval guid="{8B5B3845-91B2-436a-81EA-1273EA4AA359}" key="$ProcessId" instance="SubscriberName" matchparentkey="yes" name="FastStartup-Resume-Winlogon-StartShell-CallSubscriber" friendlyname="Call Subscriber for Start Shell">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="811" version="0" filter="Event=12"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=12"/>
                    <metadata>
                      <ApdCpa>yes</ApdCpa>
                      <ApdThresholdSev1CpaTimeNs>100000000</ApdThresholdSev1CpaTimeNs>
                      <ApdThresholdSev0CpaTimeNs>200000000</ApdThresholdSev0CpaTimeNs>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>CallSubscriber</InstanceSuffix>
                      <fullfriendlyname>Fast Startup - Resume Call Subscriber for Start Shell</fullfriendlyname>
                    </metadata>
                  </interval>

                  <interval guid="{20319FB0-62F6-4a08-A44D-BE660B5BC22F}" key="$ProcessId" instance="Message" matchparentkey="yes" name="FastStartup-Resume-Winlogon-StartShell-NotificationPended" friendlyname="Pended Notification for Start Shell">
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="807" version="0" filter="Event=12"/>
                    <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="812" version="0" filter="Event=12"/>
                    <metadata>
                      <FAS.TestNode>yes</FAS.TestNode>
                      <InstanceSuffix>PendedNotification</InstanceSuffix>
                    </metadata>
                  </interval>
                </interval>
              </interval> <!-- end of winlogon start shell -->

            </interval> <!-- end of FastStartup-Resume-Winlogon-Phase -->

            <interval guid="{A663FE45-C61B-4c62-B4BA-E6FE60C6F574}" key="$Global" name="FastStartup-Resume-ExplorerInit" friendlyname="Explorer Initialization">
              <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="9" version="0"/>
              <event provider="{30336ed4-e327-447c-9de0-51b652c86108}" type="stop" value="27231" version="0"/>
              <metadata>
                <FAS.TestNode>yes</FAS.TestNode>
                <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
                <ApdCpa>yes</ApdCpa>
                <ApdThresholdSev1CpaTimeNs>500000000</ApdThresholdSev1CpaTimeNs>
                <ApdThresholdSev0CpaTimeNs>1000000000</ApdThresholdSev0CpaTimeNs>
                <ApdContention>yes</ApdContention>
                <fullfriendlyname>Fast Startup - Resume Explorer Initialization</fullfriendlyname>
                <ValidateInterval.Required>yes</ValidateInterval.Required>
              </metadata> 
            </interval>

          </interval>
          <!-- end of main path resume -->

          <interval guid="{BD4C89BE-6866-4376-954A-F3F48ACE2727}" key="$ProcessId" name="FastStartup-Resume-PostOnOff" friendlyname="Post On/Off">
            <intlink type="start" interval="{A663FE45-C61B-4c62-B4BA-E6FE60C6F574}"/>
            <marker type="detectidle" idlemstoaccumulate="5000" subtractidletime="yes"/>
            <metadata>
              <ApdRcaCpu>yes</ApdRcaCpu>
              <ApdRcaDisk>yes</ApdRcaDisk>
              <ApdRegistryFlush>yes</ApdRegistryFlush>
              <FAS.TestNode>yes</FAS.TestNode>
              <FAS.TestNode.ResourceMetrics>yes</FAS.TestNode.ResourceMetrics>
              <ValidateInterval.AllowInfiniteEndTime>yes</ValidateInterval.AllowInfiniteEndTime>
              <FAS.InfinityIssueRemediation>The Post On/Off duration is the time to reach an idle state after the desktop has been initialized. A value of "Infinity" indicates that the machine never reached an idle state during the assessment. This indicates high resource utilization, impacting responsiveness. This behavior is often caused by resource consumption due to background services and startup applications and should be investigated</FAS.InfinityIssueRemediation>
              <fullfriendlyname>Fast Startup - Resume Post On/Off</fullfriendlyname>
              <ValidateInterval.Required>yes</ValidateInterval.Required>
              <DetectIdle.Exclude.IO.Filename>NT Kernel Logger.etl:WPR_initiated_WPR OnOff Event Collector.etl:WPR_initiated_WPR_DEFAULT_WPR System Collector.etl:WPR_initiated_WPR_DEFAULT_WPR OnOff Event Collector.etl</DetectIdle.Exclude.IO.Filename>
            </metadata>
          </interval>

        </interval> <!-- end of total boot -->

        <interval guid="{AB719FB1-D863-4305-AE8E-F21281899A85}" key="$ProcessId" name="FastStartup-ConsoleSessionDisconnect" friendlyname="Console Session Disconnect">
          <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="start" value="801" version="0" filter="Event=8"/>
          <event provider="{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}" type="stop" value="802" version="0" filter="Event=8"/>
          <metadata>
            <ValidateInterval.InvalidIfPresent>yes</ValidateInterval.InvalidIfPresent>
          </metadata>
        </interval>
        
      </interval>

    </intervals>
  </instrumentation>
</instrumentationManifest>
