| Microsoft-Windows-DeviceHealthAttestation/Operational | 100 | Info | DHA service started successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 101 | Medium | DHA service stopped |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 102 | Info | DHA server configuration loaded successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 103 | High | Failed to load DHA configuration |
| System | 7031 | High | Device Health Attestation service terminated unexpectedly |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 200 | Info | Attestation request received from client |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 201 | Info | Attestation request validated successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 202 | High | Attestation failed — missing TPM measurement |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 203 | High | Attestation failed — invalid boot measurement |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 204 | Critical | Attestation failed — signature mismatch |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 205 | Info | Attestation skipped due to policy exclusion |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 206 | Info | Attestation retry scheduled |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 300 | Info | DHA connected to certificate authority successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 301 | High | Failed to connect to certificate authority |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 302 | Critical | Certificate chain validation failed |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 303 | High | DHA certificate expired or invalid |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 304 | Info | New attestation certificate issued |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 305 | Info | DHA TLS session established with client |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 306 | Medium | DHA TLS handshake failed |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 400 | Info | Device health report successfully stored |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 401 | Medium | Failed to store device health report |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 402 | Info | Report sent to MDM server successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 403 | High | Failed to forward report to MDM server |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 404 | High | Health attestation result flagged as non-compliant |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 405 | Info | Health attestation marked compliant |
| Security | 4624 | Info | Successful DHA administrative logon |
| Security | 4625 | High | Failed DHA admin logon attempt |
| Security | 4719 | High | System audit policy modified |
| Security | 4732 | High | User added to DHA Administrators group |
| Security | 4733 | Info | User removed from DHA Administrators group |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 500 | High | Policy configuration modified |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 501 | Info | Policy configuration reverted to default |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 600 | Info | DHA database cleanup completed successfully |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 601 | Medium | DHA database space below threshold |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 602 | Medium | Service response time exceeded threshold |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 603 | Medium | Service memory usage high |
| Microsoft-Windows-DeviceHealthAttestation/Operational | 604 | High | Network connectivity lost |