BufferType In WMI_BUFFER_HEADER

In versions 5.2 and higher, the WMI_BUFFER_HEADER has a USHORT member named BufferType at offset 0x36. Microsoft’s names for the possible values (which are defined by macros and thus do not pass into symbol files as type information) are known from the NTWMI.H that Microsoft pubilshed, possibly by accident, with the original and Version 1511 editions of the Windows Driver Kit (WDK) for Windows 10:

Value Name
0x0000 ETW_BUFFER_TYPE_GENERIC
0x0001 ETW_BUFFER_TYPE_RUNDOWN
0x0002 ETW_BUFFER_TYPE_CTX_SWAP
0x0003 ETW_BUFFER_TYPE_REFTIME
0x0004 ETW_BUFFER_TYPE_HEADER
0x0005 ETW_BUFFER_TYPE_BATCHED
0x0006 ETW_BUFFER_TYPE_EMPTY_MARKER
0x0007 ETW_BUFFER_TYPE_DBG_INFO
0x0008 ETW_BUFFER_TYPE_MAXIMUM