detection.wiki

Microsoft-Windows-MPS-CLNT

124 events across 1 channel

EventTitleChannelSample
200MPS_CLNT_API_RestoreDefaultsStartDiagnosticN
201MPS_CLNT_API_RestoreDefaultsStopDiagnosticN
202MPS_CLNT_API_EnumFirewallRulesStartDiagnosticN
203MPS_CLNT_API_EnumFirewallRulesStopDiagnosticN
204MPS_CLNT_API_DeleteFirewallRuleStartDiagnosticN
205MPS_CLNT_API_DeleteFirewallRuleStopDiagnosticN
206MPS_CLNT_API_DeleteAllFirewallRulesStartDiagnosticN
207MPS_CLNT_API_DeleteAllFirewallRulesStopDiagnosticN
208MPS_CLNT_API_AddFirewallRuleStartDiagnosticN
209MPS_CLNT_API_AddFirewallRuleStopDiagnosticN
210MPS_CLNT_API_SetFirewallRuleStartDiagnosticN
211MPS_CLNT_API_SetFirewallRuleStopDiagnosticN
212MPS_CLNT_API_GetConfigStartDiagnosticN
213MPS_CLNT_API_GetConfigStopDiagnosticN
214MPS_CLNT_API_SetConfigStartDiagnosticN
215MPS_CLNT_API_SetConfigStopDiagnosticN
216MPS_CLNT_API_GetGlobalConfigStartDiagnosticN
217MPS_CLNT_API_GetGlobalConfigStopDiagnosticN
218MPS_CLNT_API_SetGlobalConfigStartDiagnosticN
219MPS_CLNT_API_SetGlobalConfigStopDiagnosticN
220MPS_CLNT_API_OpenPolicyStoreStartDiagnosticN
221MPS_CLNT_API_OpenPolicyStoreStopDiagnosticN
222MPS_CLNT_API_ClosePolicyStoreStartDiagnosticN
223MPS_CLNT_API_ClosePolicyStoreStopDiagnosticN
224MPS_CLNT_API_AddConnectionSecurityRuleStartDiagnosticN
225MPS_CLNT_API_AddConnectionSecurityRuleStopDiagnosticN
226MPS_CLNT_API_SetConnectionSecurityRuleStartDiagnosticN
227MPS_CLNT_API_SetConnectionSecurityRuleStopDiagnosticN
228MPS_CLNT_API_DeleteConnectionSecurityRuleStartDiagnosticN
229MPS_CLNT_API_DeleteConnectionSecurityRuleStopDiagnosticN
230MPS_CLNT_API_DeleteAllConnectionSecurityRulesStartDiagnosticN
231MPS_CLNT_API_DeleteAllConnectionSecurityRulesStopDiagnosticN
232MPS_CLNT_API_EnumConnectionSecurityRulesStartDiagnosticN
233MPS_CLNT_API_EnumConnectionSecurityRulesStopDiagnosticN
234MPS_CLNT_API_AddAuthenticationSetStartDiagnosticN
235MPS_CLNT_API_AddAuthenticationSetStopDiagnosticN
236MPS_CLNT_API_DeleteAuthenticationSetStartDiagnosticN
237MPS_CLNT_API_DeleteAuthenticationSetStopDiagnosticN
238MPS_CLNT_API_SetAuthenticationSetStartDiagnosticN
239MPS_CLNT_API_SetAuthenticationSetStopDiagnosticN
240MPS_CLNT_API_DeleteAllAuthenticationSetsStartDiagnosticN
241MPS_CLNT_API_DeleteAllAuthenticationSetsStopDiagnosticN
242MPS_CLNT_API_EnumAuthenticationSetsStartDiagnosticN
243MPS_CLNT_API_EnumAuthenticationSetsStopDiagnosticN
244MPS_CLNT_API_AddCryptoSetStartDiagnosticN
245MPS_CLNT_API_AddCryptoSetStopDiagnosticN
246MPS_CLNT_API_SetCryptoSetStartDiagnosticN
247MPS_CLNT_API_SetCryptoSetStopDiagnosticN
248MPS_CLNT_API_DeleteCryptoSetStartDiagnosticN
249MPS_CLNT_API_DeleteCryptoSetStopDiagnosticN
250MPS_CLNT_API_DeleteAllCryptoSetsStartDiagnosticN
251MPS_CLNT_API_DeleteAllCryptoSetsStopDiagnosticN
252MPS_CLNT_API_EnumCryptoSetsStartDiagnosticN
253MPS_CLNT_API_EnumCryptoSetsStopDiagnosticN
254MPS_CLNT_API_EnumPhase1SAsStartDiagnosticN
255MPS_CLNT_API_EnumPhase1SAsStopDiagnosticN
256MPS_CLNT_API_DeletePhase1SAsStartDiagnosticN
257MPS_CLNT_API_DeletePhase1SAsStopDiagnosticN
258MPS_CLNT_API_EnumPhase2SAsStartDiagnosticN
259MPS_CLNT_API_EnumPhase2SAsStopDiagnosticN
260MPS_CLNT_API_VerifyFirewallRuleStartDiagnosticN
261MPS_CLNT_API_VerifyFirewallRuleStopDiagnosticN
262MPS_CLNT_API_VerifyConnectionSecurityRuleStartDiagnosticN
263MPS_CLNT_API_VerifyConnectionSecurityRuleStopDiagnosticN
264MPS_CLNT_API_VerifyAuthenticationSetStartDiagnosticN
265MPS_CLNT_API_VerifyAuthenticationSetStopDiagnosticN
266MPS_CLNT_API_VerifyCryptoSetStartDiagnosticN
267MPS_CLNT_API_VerifyCryptoSetStopDiagnosticN
268MPS_CLNT_API_ImportPolicyStartDiagnosticN
269MPS_CLNT_API_ImportPolicyStopDiagnosticN
270MPS_CLNT_API_ExportPolicyStartDiagnosticN
271MPS_CLNT_API_ExportPolicyStopDiagnosticN
272MPS_CLNT_API_DeletePhase2SAsStartDiagnosticN
273MPS_CLNT_API_DeletePhase2SAsStopDiagnosticN
274MPS_CLNT_API_FreeFirewallRulesStartDiagnosticN
275MPS_CLNT_API_FreeFirewallRulesStopDiagnosticN
276MPS_CLNT_API_FreeConnectionSecurityRulesStartDiagnosticN
277MPS_CLNT_API_FreeConnectionSecurityRulesStopDiagnosticN
278MPS_CLNT_API_FreeAuthenticationSetsStartDiagnosticN
279MPS_CLNT_API_FreeAuthenticationSetsStopDiagnosticN
280MPS_CLNT_API_FreeCryptoSetsStartDiagnosticN
281MPS_CLNT_API_FreeCryptoSetsStopDiagnosticN
282MPS_CLNT_API_FreePhase1SAsStartDiagnosticN
283MPS_CLNT_API_FreePhase1SAsStopDiagnosticN
284MPS_CLNT_API_FreePhase2SAsStartDiagnosticN
285MPS_CLNT_API_FreePhase2SAsStopDiagnosticN
286MPS_CLNT_API_StatusMessageFromStatusCodeStartDiagnosticN
287MPS_CLNT_API_StatusMessageFromStatusCodeStopDiagnosticN
288MPS_CLNT_API_FreeMainModeRulesStartDiagnosticN
289MPS_CLNT_API_FreeMainModeRulesStopDiagnosticN
290MPS_CLNT_API_EnumMainModeRulesStartDiagnosticN
291MPS_CLNT_API_EnumMainModeRulesStopDiagnosticN
292MPS_CLNT_API_DeleteMainModeRuleStartDiagnosticN
293MPS_CLNT_API_DeleteMainModeRuleStopDiagnosticN
294MPS_CLNT_API_DeleteAllMainModeRulesStartDiagnosticN
295MPS_CLNT_API_DeleteAllMainModeRulesStopDiagnosticN
296MPS_CLNT_API_AddMainModeRuleStartDiagnosticN
297MPS_CLNT_API_AddMainModeRuleStopDiagnosticN
298MPS_CLNT_API_SetMainModeRuleStartDiagnosticN
299MPS_CLNT_API_SetMainModeRuleStopDiagnosticN
300MPS_CLNT_API_VerifyMainModeRuleStartDiagnosticN
301MPS_CLNT_API_VerifyMainModeRuleStopDiagnosticN
302MPS_CLNT_API_QueryFirewallRulesStartDiagnosticN
303MPS_CLNT_API_QueryFirewallRulesStopDiagnosticN
304MPS_CLNT_API_QueryConnectionSecurityRulesStartDiagnosticN
305MPS_CLNT_API_QueryConnectionSecurityRulesStopDiagnosticN
306MPS_CLNT_API_QueryMainModeRulesStartDiagnosticN
307MPS_CLNT_API_QueryMainModeRulesStopDiagnosticN
308MPS_CLNT_API_QueryAuthenticationSetsStartDiagnosticN
309MPS_CLNT_API_QueryAuthenticationSetsStopDiagnosticN
310MPS_CLNT_API_QueryCryptoSetsStartDiagnosticN
311MPS_CLNT_API_QueryCryptoSetsStopDiagnosticN
312MPS_CLNT_API_VerifyFirewallRuleQueryStartDiagnosticN
313MPS_CLNT_API_VerifyFirewallRuleQueryStopDiagnosticN
314MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStartDiagnosticN
315MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStopDiagnosticN
316MPS_CLNT_API_VerifyMainModeRuleQueryStartDiagnosticN
317MPS_CLNT_API_VerifyMainModeRuleQueryStopDiagnosticN
318MPS_CLNT_API_VerifyAuthenticationSetQueryStartDiagnosticN
319MPS_CLNT_API_VerifyAuthenticationSetQueryStopDiagnosticN
320MPS_CLNT_API_VerifyCryptoSetQueryStartDiagnosticN
321MPS_CLNT_API_VerifyCryptoSetQueryStopDiagnosticN
322MPS_CLNT_API_FreeQueryStartDiagnosticN
323MPS_CLNT_API_FreeQueryStopDiagnosticN

Event ID 200: MPS_CLNT_API_RestoreDefaultsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_RestoreDefaults
Opcode
Start

Event ID 201: MPS_CLNT_API_RestoreDefaultsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_RestoreDefaults
Opcode
Stop

Event ID 202: MPS_CLNT_API_EnumFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumFirewallRules
Opcode
Start

Event ID 203: MPS_CLNT_API_EnumFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumFirewallRules
Opcode
Stop

Event ID 204: MPS_CLNT_API_DeleteFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteFirewallRule
Opcode
Start

Event ID 205: MPS_CLNT_API_DeleteFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteFirewallRule
Opcode
Stop

Event ID 206: MPS_CLNT_API_DeleteAllFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllFirewallRules
Opcode
Start

Event ID 207: MPS_CLNT_API_DeleteAllFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllFirewallRules
Opcode
Stop

Event ID 208: MPS_CLNT_API_AddFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddFirewallRule
Opcode
Start

Event ID 209: MPS_CLNT_API_AddFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddFirewallRule
Opcode
Stop

Event ID 210: MPS_CLNT_API_SetFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetFirewallRule
Opcode
Start

Event ID 211: MPS_CLNT_API_SetFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetFirewallRule
Opcode
Stop

Event ID 212: MPS_CLNT_API_GetConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetConfig
Opcode
Start

Event ID 213: MPS_CLNT_API_GetConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetConfig
Opcode
Stop

Event ID 214: MPS_CLNT_API_SetConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConfig
Opcode
Start

Event ID 215: MPS_CLNT_API_SetConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConfig
Opcode
Stop

Event ID 216: MPS_CLNT_API_GetGlobalConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetGlobalConfig
Opcode
Start

Event ID 217: MPS_CLNT_API_GetGlobalConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetGlobalConfig
Opcode
Stop

Event ID 218: MPS_CLNT_API_SetGlobalConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetGlobalConfig
Opcode
Start

Event ID 219: MPS_CLNT_API_SetGlobalConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetGlobalConfig
Opcode
Stop

Event ID 220: MPS_CLNT_API_OpenPolicyStoreStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_OpenPolicyStore
Opcode
Start

Event ID 221: MPS_CLNT_API_OpenPolicyStoreStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_OpenPolicyStore
Opcode
Stop

Event ID 222: MPS_CLNT_API_ClosePolicyStoreStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ClosePolicyStore
Opcode
Start

Event ID 223: MPS_CLNT_API_ClosePolicyStoreStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ClosePolicyStore
Opcode
Stop

Event ID 224: MPS_CLNT_API_AddConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddConnectionSecurityRule
Opcode
Start

Event ID 225: MPS_CLNT_API_AddConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddConnectionSecurityRule
Opcode
Stop

Event ID 226: MPS_CLNT_API_SetConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConnectionSecurityRule
Opcode
Start

Event ID 227: MPS_CLNT_API_SetConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConnectionSecurityRule
Opcode
Stop

Event ID 228: MPS_CLNT_API_DeleteConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteConnectionSecurityRule
Opcode
Start

Event ID 229: MPS_CLNT_API_DeleteConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteConnectionSecurityRule
Opcode
Stop

Event ID 230: MPS_CLNT_API_DeleteAllConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllConnectionSecurityRules
Opcode
Start

Event ID 231: MPS_CLNT_API_DeleteAllConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllConnectionSecurityRules
Opcode
Stop

Event ID 232: MPS_CLNT_API_EnumConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumConnectionSecurityRules
Opcode
Start

Event ID 233: MPS_CLNT_API_EnumConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumConnectionSecurityRules
Opcode
Stop

Event ID 234: MPS_CLNT_API_AddAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddAuthenticationSet
Opcode
Start

Event ID 235: MPS_CLNT_API_AddAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddAuthenticationSet
Opcode
Stop

Event ID 236: MPS_CLNT_API_DeleteAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAuthenticationSet
Opcode
Start

Event ID 237: MPS_CLNT_API_DeleteAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAuthenticationSet
Opcode
Stop

Event ID 238: MPS_CLNT_API_SetAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetAuthenticationSet
Opcode
Start

Event ID 239: MPS_CLNT_API_SetAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetAuthenticationSet
Opcode
Stop

Event ID 240: MPS_CLNT_API_DeleteAllAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllAuthenticationSets
Opcode
Start

Event ID 241: MPS_CLNT_API_DeleteAllAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllAuthenticationSets
Opcode
Stop

Event ID 242: MPS_CLNT_API_EnumAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumAuthenticationSets
Opcode
Start

Event ID 243: MPS_CLNT_API_EnumAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumAuthenticationSets
Opcode
Stop

Event ID 244: MPS_CLNT_API_AddCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddCryptoSet
Opcode
Start

Event ID 245: MPS_CLNT_API_AddCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddCryptoSet
Opcode
Stop

Event ID 246: MPS_CLNT_API_SetCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetCryptoSet
Opcode
Start

Event ID 247: MPS_CLNT_API_SetCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetCryptoSet
Opcode
Stop

Event ID 248: MPS_CLNT_API_DeleteCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteCryptoSet
Opcode
Start

Event ID 249: MPS_CLNT_API_DeleteCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteCryptoSet
Opcode
Stop

Event ID 250: MPS_CLNT_API_DeleteAllCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllCryptoSets
Opcode
Start

Event ID 251: MPS_CLNT_API_DeleteAllCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllCryptoSets
Opcode
Stop

Event ID 252: MPS_CLNT_API_EnumCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumCryptoSets
Opcode
Start

Event ID 253: MPS_CLNT_API_EnumCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumCryptoSets
Opcode
Stop

Event ID 254: MPS_CLNT_API_EnumPhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase1SAs
Opcode
Start

Event ID 255: MPS_CLNT_API_EnumPhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase1SAs
Opcode
Stop

Event ID 256: MPS_CLNT_API_DeletePhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase1SAs
Opcode
Start

Event ID 257: MPS_CLNT_API_DeletePhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase1SAs
Opcode
Stop

Event ID 258: MPS_CLNT_API_EnumPhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase2SAs
Opcode
Start

Event ID 259: MPS_CLNT_API_EnumPhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase2SAs
Opcode
Stop

Event ID 260: MPS_CLNT_API_VerifyFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRule
Opcode
Start

Event ID 261: MPS_CLNT_API_VerifyFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRule
Opcode
Stop

Event ID 262: MPS_CLNT_API_VerifyConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRule
Opcode
Start

Event ID 263: MPS_CLNT_API_VerifyConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRule
Opcode
Stop

Event ID 264: MPS_CLNT_API_VerifyAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSet
Opcode
Start

Event ID 265: MPS_CLNT_API_VerifyAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSet
Opcode
Stop

Event ID 266: MPS_CLNT_API_VerifyCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSet
Opcode
Start

Event ID 267: MPS_CLNT_API_VerifyCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSet
Opcode
Stop

Event ID 268: MPS_CLNT_API_ImportPolicyStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ImportPolicy
Opcode
Start

Event ID 269: MPS_CLNT_API_ImportPolicyStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ImportPolicy
Opcode
Stop

Event ID 270: MPS_CLNT_API_ExportPolicyStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ExportPolicy
Opcode
Start

Event ID 271: MPS_CLNT_API_ExportPolicyStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ExportPolicy
Opcode
Stop

Event ID 272: MPS_CLNT_API_DeletePhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase2SAs
Opcode
Start

Event ID 273: MPS_CLNT_API_DeletePhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase2SAs
Opcode
Stop

Event ID 274: MPS_CLNT_API_FreeFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeFirewallRules
Opcode
Start

Event ID 275: MPS_CLNT_API_FreeFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeFirewallRules
Opcode
Stop

Event ID 276: MPS_CLNT_API_FreeConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeConnectionSecurityRules
Opcode
Start

Event ID 277: MPS_CLNT_API_FreeConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeConnectionSecurityRules
Opcode
Stop

Event ID 278: MPS_CLNT_API_FreeAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeAuthenticationSets
Opcode
Start

Event ID 279: MPS_CLNT_API_FreeAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeAuthenticationSets
Opcode
Stop

Event ID 280: MPS_CLNT_API_FreeCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeCryptoSets
Opcode
Start

Event ID 281: MPS_CLNT_API_FreeCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeCryptoSets
Opcode
Stop

Event ID 282: MPS_CLNT_API_FreePhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase1SAs
Opcode
Start

Event ID 283: MPS_CLNT_API_FreePhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase1SAs
Opcode
Stop

Event ID 284: MPS_CLNT_API_FreePhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase2SAs
Opcode
Start

Event ID 285: MPS_CLNT_API_FreePhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase2SAs
Opcode
Stop

Event ID 286: MPS_CLNT_API_StatusMessageFromStatusCodeStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_StatusMessageFromStatusCode
Opcode
Start

Event ID 287: MPS_CLNT_API_StatusMessageFromStatusCodeStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_StatusMessageFromStatusCode
Opcode
Stop

Event ID 288: MPS_CLNT_API_FreeMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeMainModeRules
Opcode
Start

Event ID 289: MPS_CLNT_API_FreeMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeMainModeRules
Opcode
Stop

Event ID 290: MPS_CLNT_API_EnumMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumMainModeRules
Opcode
Start

Event ID 291: MPS_CLNT_API_EnumMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumMainModeRules
Opcode
Stop

Event ID 292: MPS_CLNT_API_DeleteMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteMainModeRule
Opcode
Start

Event ID 293: MPS_CLNT_API_DeleteMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteMainModeRule
Opcode
Stop

Event ID 294: MPS_CLNT_API_DeleteAllMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllMainModeRules
Opcode
Start

Event ID 295: MPS_CLNT_API_DeleteAllMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllMainModeRules
Opcode
Stop

Event ID 296: MPS_CLNT_API_AddMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddMainModeRule
Opcode
Start

Event ID 297: MPS_CLNT_API_AddMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddMainModeRule
Opcode
Stop

Event ID 298: MPS_CLNT_API_SetMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetMainModeRule
Opcode
Start

Event ID 299: MPS_CLNT_API_SetMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetMainModeRule
Opcode
Stop

Event ID 300: MPS_CLNT_API_VerifyMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRule
Opcode
Start

Event ID 301: MPS_CLNT_API_VerifyMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRule
Opcode
Stop

Event ID 302: MPS_CLNT_API_QueryFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryFirewallRules
Opcode
Start

Event ID 303: MPS_CLNT_API_QueryFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryFirewallRules
Opcode
Stop

Event ID 304: MPS_CLNT_API_QueryConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryConnectionSecurityRules
Opcode
Start

Event ID 305: MPS_CLNT_API_QueryConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryConnectionSecurityRules
Opcode
Stop

Event ID 306: MPS_CLNT_API_QueryMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryMainModeRules
Opcode
Start

Event ID 307: MPS_CLNT_API_QueryMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryMainModeRules
Opcode
Stop

Event ID 308: MPS_CLNT_API_QueryAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryAuthenticationSets
Opcode
Start

Event ID 309: MPS_CLNT_API_QueryAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryAuthenticationSets
Opcode
Stop

Event ID 310: MPS_CLNT_API_QueryCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryCryptoSets
Opcode
Start

Event ID 311: MPS_CLNT_API_QueryCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryCryptoSets
Opcode
Stop

Event ID 312: MPS_CLNT_API_VerifyFirewallRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRuleQuery
Opcode
Start

Event ID 313: MPS_CLNT_API_VerifyFirewallRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRuleQuery
Opcode
Stop

Event ID 314: MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRuleQuery
Opcode
Start

Event ID 315: MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRuleQuery
Opcode
Stop

Event ID 316: MPS_CLNT_API_VerifyMainModeRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRuleQuery
Opcode
Start

Event ID 317: MPS_CLNT_API_VerifyMainModeRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRuleQuery
Opcode
Stop

Event ID 318: MPS_CLNT_API_VerifyAuthenticationSetQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSetQuery
Opcode
Start

Event ID 319: MPS_CLNT_API_VerifyAuthenticationSetQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSetQuery
Opcode
Stop

Event ID 320: MPS_CLNT_API_VerifyCryptoSetQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSetQuery
Opcode
Start

Event ID 321: MPS_CLNT_API_VerifyCryptoSetQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSetQuery
Opcode
Stop

Event ID 322: MPS_CLNT_API_FreeQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeQuery
Opcode
Start

Event ID 323: MPS_CLNT_API_FreeQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeQuery
Opcode
Stop

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 37945dc2-899b-44d1-b79c-dd4a9e57ff98

Defined in mpssvc.dll, which carries the event manifest.

Observed on:

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3328, captured 2026-06-02
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.4768, captured 2026-06-02

Downloads