Microsoft-Windows-Tethering-Manager

Event	Title	Channel	Sample	Rule
1000	task_0	Analytic	N	N
1001	task_0Start	Analytic	N	N
1002	task_0Stop	Analytic	N	N
1003	task_0Stop1003	Analytic	N	N
1004	task_01004	Analytic	N	N
1005	task_01005	Analytic	N	N
1006	task_01006	Analytic	N	N
1007	task_01007	Analytic	N	N

Event ID 1000: task_0

Channel: Analytic

Fields #

Name	Description
`Result` UInt32

Event ID 1001: task_0Start

Channel: Analytic
Opcode: Start

Event ID 1002: task_0Stop

Channel: Analytic
Opcode: Stop

Fields #

Name	Description
`TetheringStartResult` UInt32
`EntitlementCheckCompletionTime` UInt32
`MbConnectCompletionTime` UInt32
`ApStartCompletionTime` UInt32
`IcsStartCompletionTime` UInt32

Event ID 1003: task_0Stop1003

Channel: Analytic
Opcode: Stop

Event ID 1004: task_01004

Channel: Analytic

Fields #

Name	Description
`Result` UInt32
`CompletedTime` UInt32

Event ID 1005: task_01005

Channel: Analytic

Fields #

Name	Description
`Result` UInt32
`CompletedTime` UInt32

Event ID 1006: task_01006

Channel: Analytic

Fields #

Name	Description
`Result` UInt32
`CompletedTime` UInt32

Event ID 1007: task_01007

Channel: Analytic

Fields #

Name	Description
`Result` UInt32
`CompletedTime` UInt32

Provenance

ETW provider GUID cc311f1f-623c-4ca4-ba44-a458016555e8

Defined in TetheringMgr.dll, which carries the event manifest.

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB