Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the KERNEL-PNP-EVENTS.H header at
and draws from it the following type definition:
The header KERNEL-PNP-EVENTS.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK). Presumably, it is generated by the Message Compiler from an instrumentation manifest written as XML.