KB3016656 : 6.4.9879.2 / 6.4.1.0 Microsoft-Windows-DFSClient Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base Microsoft-Windows-Mup Microsoft-Windows-NFS-ClientCore Microsoft-Windows-OfflineFiles-Server-Core Microsoft-Windows-OfflineFiles-Core Microsoft-Windows-OS-Kernel Microsoft-Windows-RDBSS Microsoft-Windows-SMB10-MiniRdr Microsoft-Windows-SMB20-MiniRdr Microsoft-Windows-SMBMiniRdr Microsoft-Windows-TerminalServices-Rdpdr Microsoft-Windows-WebDAVRedir-MrxDAV Microsoft-Windows-GroupPolicy-Base Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources Microsoft-Windows-GroupPolicy-Base.Resources - KB3016725 : 6.4.9879.2 / 6.4.1.0 Microsoft-Windows-Authentication-AuthUI-Component Microsoft-Windows-ActiveXProxy Microsoft-Windows-Authentication-LogonUI Microsoft-Windows-AuthExt Microsoft-Windows-LogonController-Library Microsoft-Windows-PDC Microsoft-Windows-SHCore Microsoft-Windows-TwinUI Microsoft-Windows-usercpl Microsoft-Windows-WininitExt Microsoft-Windows-Wininit Microsoft-Windows-Winlogon Microsoft-Windows-TwinUI Microsoft-Windows-Wininit Microsoft-Windows-Authentication-AuthUI-Component Microsoft-Windows-ActiveXProxy Microsoft-Windows-AuthExt Microsoft-Windows-LogonController-Library Microsoft-Windows-SHCore Microsoft-Windows-usercpl Microsoft-Windows-WininitExt
The only entries I see there are service entries, predownload notifications, update download statuses without urls, update identifiers, and operations log carried over from a previous system (9860) as migration carries the log over. Actual post-upgrade update checks still evidently logged to the etl, backed to %systemroot%\logs\windowsupdate\
Missed that log directory, thanks however, can't get useful info of the etl files, tried perfview, wpt, event viewer, tracerpt all lead to "Unknown( 36): GUID=... (No Format Information found)" i guess we need symbols check or something