FWIW here are the details on the NTFS event that occurs daily at 12:00:13 PM give or take a second or two (I still don't have a clue as to what is causing this to happen):
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 9/10/2026 12:00:13 PM
Event ID: 98
Task Category: None
Level: Information
Keywords: (2)
User: SYSTEM
Computer: HERMES
Description:
Volume OS (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed.
Event Xml:
<System>
<Provider Name="Microsoft-Windows-Ntfs" Guid="{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}" />
<EventID>98</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2026-09-10T19:00:13.5989133Z" />
<EventRecordID>124283</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="7056" />
<Channel>System</Channel>
<Computer>HERMES</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriveName">OS</Data>
<Data Name="DeviceName">\Device\HarddiskVolumeShadowCopy2</Data>
<Data Name="CorruptionActionState">0</Data>
</EventData>
</Event>
