detection.wiki

Microsoft-Windows-DeviceSync

EventTitleChannelSampleRule
100SI_CreateStartAnalyticNN
101SI_CreateStopAnalyticNN
102SI_Request_Start_SyncStartAnalyticNN
103SI_Request_Start_SyncStopAnalyticNN
104SI_Request_Stop_SyncStartAnalyticNN
105SI_Request_Stop_SyncStopAnalyticNN
106SI_Device_ConnectionStartAnalyticNN
107SI_Device_ConnectionStopAnalyticNN
108SI_Query_StatusStartAnalyticNN
109SI_Query_StatusStopAnalyticNN
110SI_Query_ServiceStartAnalyticNN
111SI_Query_ServiceStopAnalyticNN
112SI_State_ChangeStartAnalyticNN
113SI_State_ChangeStopAnalyticNN
114SI_SyncStartAnalyticNN
115SI_SyncStopAnalyticNN
116SI_Subscribe_EventsStartAnalyticNN
117SI_Subscribe_EventsStopAnalyticNN
118SI_Unsubscribe_EventsStartAnalyticNN
119SI_Unsubscribe_EventsStopAnalyticNN
200MediaSync_StartSyncStartAnalyticNN
201MediaSync_StartSyncStopAnalyticNN
202MediaSync_StopSyncStartAnalyticNN
203MediaSync_StopSyncStopAnalyticNN
204MediaSync_SyncStateStartAnalyticNN
205MediaSync_SyncStateStopAnalyticNN
206MediaSync_CreateOCXStartAnalyticNN
207MediaSync_CreateOCXStopAnalyticNN
208MediaSync_SupportedContentStartAnalyticNN
209MediaSync_SupportedContentStopAnalyticNN
210MediaSync_RemovePartnershipStartAnalyticNN
211MediaSync_RemovePartnershipStopAnalyticNN
212MediaSync_GetSyncRulesStartAnalyticNN
213MediaSync_GetSyncRulesStopAnalyticNN
214MediaSync_SyncRulesTypeStartAnalyticNN
215MediaSync_SyncRulesTypeStopAnalyticNN
216MediaSync_EstimateSyncStartAnalyticNN
217MediaSync_EstimateSyncStopAnalyticNN
218MediaSync_CancelEstimationStartAnalyticNN
219MediaSync_CancelEstimationStopAnalyticNN
220MediaSync_GetStorageInfoStartAnalyticNN
221MediaSync_GetStorageInfoStopAnalyticNN
222MediaSync_GetDeletesFlagStartAnalyticNN
223MediaSync_GetDeletesFlagStopAnalyticNN
224MediaSync_ResetDeleteFlagStartAnalyticNN
225MediaSync_ResetDeleteFlagStopAnalyticNN
226MediaSync_InitializeDevicesStartAnalyticNN
227MediaSync_InitializeDevicesStopAnalyticNN
300PartnershipStore_LoadStoreStartAnalyticNN
301PartnershipStore_LoadStoreStopAnalyticNN
302PartnershipStore_CreateStartAnalyticNN
303PartnershipStore_CreateStopAnalyticNN
304PartnershipStore_DestroyStartAnalyticNN
305PartnershipStore_DestroyStopAnalyticNN
306PartnershipStore_FindByIdStartAnalyticNN
307PartnershipStore_FindByIdStopAnalyticNN
308PartnershipStore_EnumStartAnalyticNN
309PartnershipStore_EnumStopAnalyticNN
310PartnershipStore_CommitStartAnalyticNN
311PartnershipStore_CommitStopAnalyticNN
312PartnershipStore_RemoveOwnershipStartAnalyticNN
313PartnershipStore_RemoveOwnershipStopAnalyticNN
1001task_0OperationalNN
1002task_01002OperationalNN

Event ID 100: SI_CreateStart

#
Channel
Analytic
Task
SI_Create
Opcode
Start

Event ID 101: SI_CreateStop

#
Channel
Analytic
Task
SI_Create
Opcode
Stop

Event ID 102: SI_Request_Start_SyncStart

#
Channel
Analytic
Task
SI_Request_Start_Sync
Opcode
Start

Event ID 103: SI_Request_Start_SyncStop

#
Channel
Analytic
Task
SI_Request_Start_Sync
Opcode
Stop

Event ID 104: SI_Request_Stop_SyncStart

#
Channel
Analytic
Task
SI_Request_Stop_Sync
Opcode
Start

Event ID 105: SI_Request_Stop_SyncStop

#
Channel
Analytic
Task
SI_Request_Stop_Sync
Opcode
Stop

Event ID 106: SI_Device_ConnectionStart

#
Channel
Analytic
Task
SI_Device_Connection
Opcode
Start

Event ID 107: SI_Device_ConnectionStop

#
Channel
Analytic
Task
SI_Device_Connection
Opcode
Stop

Event ID 108: SI_Query_StatusStart

#
Channel
Analytic
Task
SI_Query_Status
Opcode
Start

Event ID 109: SI_Query_StatusStop

#
Channel
Analytic
Task
SI_Query_Status
Opcode
Stop

Event ID 110: SI_Query_ServiceStart

#
Channel
Analytic
Task
SI_Query_Service
Opcode
Start

Event ID 111: SI_Query_ServiceStop

#
Channel
Analytic
Task
SI_Query_Service
Opcode
Stop

Event ID 112: SI_State_ChangeStart

#
Channel
Analytic
Task
SI_State_Change
Opcode
Start

Event ID 113: SI_State_ChangeStop

#
Channel
Analytic
Task
SI_State_Change
Opcode
Stop

Event ID 114: SI_SyncStart

#
Channel
Analytic
Task
SI_Sync
Opcode
Start

Event ID 115: SI_SyncStop

#
Channel
Analytic
Task
SI_Sync
Opcode
Stop

Event ID 116: SI_Subscribe_EventsStart

#
Channel
Analytic
Task
SI_Subscribe_Events
Opcode
Start

Event ID 117: SI_Subscribe_EventsStop

#
Channel
Analytic
Task
SI_Subscribe_Events
Opcode
Stop

Event ID 118: SI_Unsubscribe_EventsStart

#
Channel
Analytic
Task
SI_Unsubscribe_Events
Opcode
Start

Event ID 119: SI_Unsubscribe_EventsStop

#
Channel
Analytic
Task
SI_Unsubscribe_Events
Opcode
Stop

Event ID 200: MediaSync_StartSyncStart

#
Channel
Analytic
Task
MediaSync_StartSync
Opcode
Start

Event ID 201: MediaSync_StartSyncStop

#
Channel
Analytic
Task
MediaSync_StartSync
Opcode
Stop

Event ID 202: MediaSync_StopSyncStart

#
Channel
Analytic
Task
MediaSync_StopSync
Opcode
Start

Event ID 203: MediaSync_StopSyncStop

#
Channel
Analytic
Task
MediaSync_StopSync
Opcode
Stop

Event ID 204: MediaSync_SyncStateStart

#
Channel
Analytic
Task
MediaSync_SyncState
Opcode
Start

Event ID 205: MediaSync_SyncStateStop

#
Channel
Analytic
Task
MediaSync_SyncState
Opcode
Stop

Event ID 206: MediaSync_CreateOCXStart

#
Channel
Analytic
Task
MediaSync_CreateOCX
Opcode
Start

Event ID 207: MediaSync_CreateOCXStop

#
Channel
Analytic
Task
MediaSync_CreateOCX
Opcode
Stop

Event ID 208: MediaSync_SupportedContentStart

#
Channel
Analytic
Task
MediaSync_SupportedContent
Opcode
Start

Event ID 209: MediaSync_SupportedContentStop

#
Channel
Analytic
Task
MediaSync_SupportedContent
Opcode
Stop

Event ID 210: MediaSync_RemovePartnershipStart

#
Channel
Analytic
Task
MediaSync_RemovePartnership
Opcode
Start

Event ID 211: MediaSync_RemovePartnershipStop

#
Channel
Analytic
Task
MediaSync_RemovePartnership
Opcode
Stop

Event ID 212: MediaSync_GetSyncRulesStart

#
Channel
Analytic
Task
MediaSync_GetSyncRules
Opcode
Start

Event ID 213: MediaSync_GetSyncRulesStop

#
Channel
Analytic
Task
MediaSync_GetSyncRules
Opcode
Stop

Event ID 214: MediaSync_SyncRulesTypeStart

#
Channel
Analytic
Task
MediaSync_SyncRulesType
Opcode
Start

Event ID 215: MediaSync_SyncRulesTypeStop

#
Channel
Analytic
Task
MediaSync_SyncRulesType
Opcode
Stop

Event ID 216: MediaSync_EstimateSyncStart

#
Channel
Analytic
Task
MediaSync_EstimateSync
Opcode
Start

Event ID 217: MediaSync_EstimateSyncStop

#
Channel
Analytic
Task
MediaSync_EstimateSync
Opcode
Stop

Event ID 218: MediaSync_CancelEstimationStart

#
Channel
Analytic
Task
MediaSync_CancelEstimation
Opcode
Start

Event ID 219: MediaSync_CancelEstimationStop

#
Channel
Analytic
Task
MediaSync_CancelEstimation
Opcode
Stop

Event ID 220: MediaSync_GetStorageInfoStart

#
Channel
Analytic
Task
MediaSync_GetStorageInfo
Opcode
Start

Event ID 221: MediaSync_GetStorageInfoStop

#
Channel
Analytic
Task
MediaSync_GetStorageInfo
Opcode
Stop

Event ID 222: MediaSync_GetDeletesFlagStart

#
Channel
Analytic
Task
MediaSync_GetDeletesFlag
Opcode
Start

Event ID 223: MediaSync_GetDeletesFlagStop

#
Channel
Analytic
Task
MediaSync_GetDeletesFlag
Opcode
Stop

Event ID 224: MediaSync_ResetDeleteFlagStart

#
Channel
Analytic
Task
MediaSync_ResetDeleteFlag
Opcode
Start

Event ID 225: MediaSync_ResetDeleteFlagStop

#
Channel
Analytic
Task
MediaSync_ResetDeleteFlag
Opcode
Stop

Event ID 226: MediaSync_InitializeDevicesStart

#
Channel
Analytic
Task
MediaSync_InitializeDevices
Opcode
Start

Event ID 227: MediaSync_InitializeDevicesStop

#
Channel
Analytic
Task
MediaSync_InitializeDevices
Opcode
Stop

Event ID 300: PartnershipStore_LoadStoreStart

#
Channel
Analytic
Task
PartnershipStore_LoadStore
Opcode
Start

Event ID 301: PartnershipStore_LoadStoreStop

#
Channel
Analytic
Task
PartnershipStore_LoadStore
Opcode
Stop

Event ID 302: PartnershipStore_CreateStart

#
Channel
Analytic
Task
PartnershipStore_Create
Opcode
Start

Event ID 303: PartnershipStore_CreateStop

#
Channel
Analytic
Task
PartnershipStore_Create
Opcode
Stop

Event ID 304: PartnershipStore_DestroyStart

#
Channel
Analytic
Task
PartnershipStore_Destroy
Opcode
Start

Event ID 305: PartnershipStore_DestroyStop

#
Channel
Analytic
Task
PartnershipStore_Destroy
Opcode
Stop

Event ID 306: PartnershipStore_FindByIdStart

#
Channel
Analytic
Task
PartnershipStore_FindById
Opcode
Start

Event ID 307: PartnershipStore_FindByIdStop

#
Channel
Analytic
Task
PartnershipStore_FindById
Opcode
Stop

Event ID 308: PartnershipStore_EnumStart

#
Channel
Analytic
Task
PartnershipStore_Enum
Opcode
Start

Event ID 309: PartnershipStore_EnumStop

#
Channel
Analytic
Task
PartnershipStore_Enum
Opcode
Stop

Event ID 310: PartnershipStore_CommitStart

#
Channel
Analytic
Task
PartnershipStore_Commit
Opcode
Start

Event ID 311: PartnershipStore_CommitStop

#
Channel
Analytic
Task
PartnershipStore_Commit
Opcode
Stop

Event ID 312: PartnershipStore_RemoveOwnershipStart

#
Channel
Analytic
Task
PartnershipStore_RemoveOwnership
Opcode
Start

Event ID 313: PartnershipStore_RemoveOwnershipStop

#
Channel
Analytic
Task
PartnershipStore_RemoveOwnership
Opcode
Stop

Event ID 1001: task_0

#
Channel
Operational
Opcode
Info

Fields #

NameDescription
Error_DUID GUID
Error_Partnership GUID
Error_Type UInt8
Error_HResult Int32
Error_Time FILETIME
nameLen UInt32
dataName Binary
descLen UInt32
dataDesc Binary
detailLen UInt32
dataDetail Binary
Error_Link UnicodeString

Event ID 1002: task_01002

#
Channel
Operational
Opcode
Info

Fields #

NameDescription
Event_DUID GUID
Event_Partnership GUID
Event_Code UInt8
Event_Time FILETIME

Provenance

ETW provider GUID 09ec9687-d7ad-40ca-9c5e-78a04a5ae993

Defined in syncinfrastructure.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB