detection.wiki

Microsoft-Windows-Bluetooth-MTPEnum

EventTitleChannelSampleRule
100MTP Bluetooth enumerator driver is operational with status code (StatusCode).OperationalNN
101MTP Bluetooth enumerator driver has failed to operate with error code …OperationalNN
102MTP Bluetooth enumerator driver has created a device object with status code …OperationalNN
103MTP Bluetooth enumerator driver has failed to create a device object with error …OperationalNN
200An MTP Bluetooth Link between PC and an MTP Bluetooth device has been …OperationalNN
201An MTP Bluetooth Link between PC and an MTP Bluetooth device has been …OperationalNN
202An MTP Bluetooth Link connection is being initiated by (Name).OperationalNN
203An MTP Bluetooth Link connection is being disassociated by (Name).OperationalNN
204An MTP Bluetooth Link between PC and an MTP Bluetooth device has been …OperationalNN

Event ID 100: MTP Bluetooth enumerator driver is operational with status code (StatusCode).

#
Channel
Operational
Task
DriverHealth

Message #

MTP Bluetooth enumerator driver is operational with status code (%1).

Fields #

NameDescription
StatusCode UInt32NTSTATUS reference

Event ID 101: MTP Bluetooth enumerator driver has failed to operate with error code (StatusCode).

#
Channel
Operational
Task
DriverHealth

Message #

MTP Bluetooth enumerator driver has failed to operate with error code (%1).

Fields #

NameDescription
StatusCode UInt32NTSTATUS reference

Event ID 102: MTP Bluetooth enumerator driver has created a device object with status code (StatusCode).

#
Channel
Operational
Task
DriverHealth

Message #

MTP Bluetooth enumerator driver has created a device object with status code (%1).

Fields #

NameDescription
StatusCode UInt32NTSTATUS reference

Event ID 103: MTP Bluetooth enumerator driver has failed to create a device object with error code (StatusCode).

#
Channel
Operational
Task
DriverHealth

Message #

MTP Bluetooth enumerator driver has failed to create a device object with error code (%1).

Fields #

NameDescription
StatusCode UInt32NTSTATUS reference

Event ID 200: An MTP Bluetooth Link between PC and an MTP Bluetooth device has been established (ResultCode).

#
Channel
Operational
Task
LinkState

Message #

An MTP Bluetooth Link between PC and an MTP Bluetooth device has been established (%1).

Fields #

NameDescription
ResultCode UInt32

Event ID 201: An MTP Bluetooth Link between PC and an MTP Bluetooth device has been disassociated (ResultCode).

#
Channel
Operational
Task
LinkState

Message #

An MTP Bluetooth Link between PC and an MTP Bluetooth device has been disassociated (%1).

Fields #

NameDescription
ResultCode UInt32

Event ID 202: An MTP Bluetooth Link connection is being initiated by (Name).

#
Channel
Operational
Task
LinkState

Message #

An MTP Bluetooth Link connection is being initiated by (%1).

Fields #

NameDescription
Name UnicodeString

Event ID 203: An MTP Bluetooth Link connection is being disassociated by (Name).

#
Channel
Operational
Task
LinkState

Message #

An MTP Bluetooth Link connection is being disassociated by (%1).

Fields #

NameDescription
Name UnicodeString

Event ID 204: An MTP Bluetooth Link between PC and an MTP Bluetooth device has been disassociated (ResultCode).

#
Channel
Operational
Task
LinkState

Message #

An MTP Bluetooth Link between PC and an MTP Bluetooth device has been disassociated (%1).

Fields #

NameDescription
ResultCode UInt32

Provenance

ETW provider GUID 04268430-d489-424d-b914-0cff741d6684

Defined in wpd_ci.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB