detection.wiki

Microsoft-Windows-MPS-CLNT

124 events across 1 channel

EventTitleChannel
200MPS_CLNT_API_RestoreDefaultsStartDiagnostic
201MPS_CLNT_API_RestoreDefaultsStopDiagnostic
202MPS_CLNT_API_EnumFirewallRulesStartDiagnostic
203MPS_CLNT_API_EnumFirewallRulesStopDiagnostic
204MPS_CLNT_API_DeleteFirewallRuleStartDiagnostic
205MPS_CLNT_API_DeleteFirewallRuleStopDiagnostic
206MPS_CLNT_API_DeleteAllFirewallRulesStartDiagnostic
207MPS_CLNT_API_DeleteAllFirewallRulesStopDiagnostic
208MPS_CLNT_API_AddFirewallRuleStartDiagnostic
209MPS_CLNT_API_AddFirewallRuleStopDiagnostic
210MPS_CLNT_API_SetFirewallRuleStartDiagnostic
211MPS_CLNT_API_SetFirewallRuleStopDiagnostic
212MPS_CLNT_API_GetConfigStartDiagnostic
213MPS_CLNT_API_GetConfigStopDiagnostic
214MPS_CLNT_API_SetConfigStartDiagnostic
215MPS_CLNT_API_SetConfigStopDiagnostic
216MPS_CLNT_API_GetGlobalConfigStartDiagnostic
217MPS_CLNT_API_GetGlobalConfigStopDiagnostic
218MPS_CLNT_API_SetGlobalConfigStartDiagnostic
219MPS_CLNT_API_SetGlobalConfigStopDiagnostic
220MPS_CLNT_API_OpenPolicyStoreStartDiagnostic
221MPS_CLNT_API_OpenPolicyStoreStopDiagnostic
222MPS_CLNT_API_ClosePolicyStoreStartDiagnostic
223MPS_CLNT_API_ClosePolicyStoreStopDiagnostic
224MPS_CLNT_API_AddConnectionSecurityRuleStartDiagnostic
225MPS_CLNT_API_AddConnectionSecurityRuleStopDiagnostic
226MPS_CLNT_API_SetConnectionSecurityRuleStartDiagnostic
227MPS_CLNT_API_SetConnectionSecurityRuleStopDiagnostic
228MPS_CLNT_API_DeleteConnectionSecurityRuleStartDiagnostic
229MPS_CLNT_API_DeleteConnectionSecurityRuleStopDiagnostic
230MPS_CLNT_API_DeleteAllConnectionSecurityRulesStartDiagnostic
231MPS_CLNT_API_DeleteAllConnectionSecurityRulesStopDiagnostic
232MPS_CLNT_API_EnumConnectionSecurityRulesStartDiagnostic
233MPS_CLNT_API_EnumConnectionSecurityRulesStopDiagnostic
234MPS_CLNT_API_AddAuthenticationSetStartDiagnostic
235MPS_CLNT_API_AddAuthenticationSetStopDiagnostic
236MPS_CLNT_API_DeleteAuthenticationSetStartDiagnostic
237MPS_CLNT_API_DeleteAuthenticationSetStopDiagnostic
238MPS_CLNT_API_SetAuthenticationSetStartDiagnostic
239MPS_CLNT_API_SetAuthenticationSetStopDiagnostic
240MPS_CLNT_API_DeleteAllAuthenticationSetsStartDiagnostic
241MPS_CLNT_API_DeleteAllAuthenticationSetsStopDiagnostic
242MPS_CLNT_API_EnumAuthenticationSetsStartDiagnostic
243MPS_CLNT_API_EnumAuthenticationSetsStopDiagnostic
244MPS_CLNT_API_AddCryptoSetStartDiagnostic
245MPS_CLNT_API_AddCryptoSetStopDiagnostic
246MPS_CLNT_API_SetCryptoSetStartDiagnostic
247MPS_CLNT_API_SetCryptoSetStopDiagnostic
248MPS_CLNT_API_DeleteCryptoSetStartDiagnostic
249MPS_CLNT_API_DeleteCryptoSetStopDiagnostic
250MPS_CLNT_API_DeleteAllCryptoSetsStartDiagnostic
251MPS_CLNT_API_DeleteAllCryptoSetsStopDiagnostic
252MPS_CLNT_API_EnumCryptoSetsStartDiagnostic
253MPS_CLNT_API_EnumCryptoSetsStopDiagnostic
254MPS_CLNT_API_EnumPhase1SAsStartDiagnostic
255MPS_CLNT_API_EnumPhase1SAsStopDiagnostic
256MPS_CLNT_API_DeletePhase1SAsStartDiagnostic
257MPS_CLNT_API_DeletePhase1SAsStopDiagnostic
258MPS_CLNT_API_EnumPhase2SAsStartDiagnostic
259MPS_CLNT_API_EnumPhase2SAsStopDiagnostic
260MPS_CLNT_API_VerifyFirewallRuleStartDiagnostic
261MPS_CLNT_API_VerifyFirewallRuleStopDiagnostic
262MPS_CLNT_API_VerifyConnectionSecurityRuleStartDiagnostic
263MPS_CLNT_API_VerifyConnectionSecurityRuleStopDiagnostic
264MPS_CLNT_API_VerifyAuthenticationSetStartDiagnostic
265MPS_CLNT_API_VerifyAuthenticationSetStopDiagnostic
266MPS_CLNT_API_VerifyCryptoSetStartDiagnostic
267MPS_CLNT_API_VerifyCryptoSetStopDiagnostic
268MPS_CLNT_API_ImportPolicyStartDiagnostic
269MPS_CLNT_API_ImportPolicyStopDiagnostic
270MPS_CLNT_API_ExportPolicyStartDiagnostic
271MPS_CLNT_API_ExportPolicyStopDiagnostic
272MPS_CLNT_API_DeletePhase2SAsStartDiagnostic
273MPS_CLNT_API_DeletePhase2SAsStopDiagnostic
274MPS_CLNT_API_FreeFirewallRulesStartDiagnostic
275MPS_CLNT_API_FreeFirewallRulesStopDiagnostic
276MPS_CLNT_API_FreeConnectionSecurityRulesStartDiagnostic
277MPS_CLNT_API_FreeConnectionSecurityRulesStopDiagnostic
278MPS_CLNT_API_FreeAuthenticationSetsStartDiagnostic
279MPS_CLNT_API_FreeAuthenticationSetsStopDiagnostic
280MPS_CLNT_API_FreeCryptoSetsStartDiagnostic
281MPS_CLNT_API_FreeCryptoSetsStopDiagnostic
282MPS_CLNT_API_FreePhase1SAsStartDiagnostic
283MPS_CLNT_API_FreePhase1SAsStopDiagnostic
284MPS_CLNT_API_FreePhase2SAsStartDiagnostic
285MPS_CLNT_API_FreePhase2SAsStopDiagnostic
286MPS_CLNT_API_StatusMessageFromStatusCodeStartDiagnostic
287MPS_CLNT_API_StatusMessageFromStatusCodeStopDiagnostic
288MPS_CLNT_API_FreeMainModeRulesStartDiagnostic
289MPS_CLNT_API_FreeMainModeRulesStopDiagnostic
290MPS_CLNT_API_EnumMainModeRulesStartDiagnostic
291MPS_CLNT_API_EnumMainModeRulesStopDiagnostic
292MPS_CLNT_API_DeleteMainModeRuleStartDiagnostic
293MPS_CLNT_API_DeleteMainModeRuleStopDiagnostic
294MPS_CLNT_API_DeleteAllMainModeRulesStartDiagnostic
295MPS_CLNT_API_DeleteAllMainModeRulesStopDiagnostic
296MPS_CLNT_API_AddMainModeRuleStartDiagnostic
297MPS_CLNT_API_AddMainModeRuleStopDiagnostic
298MPS_CLNT_API_SetMainModeRuleStartDiagnostic
299MPS_CLNT_API_SetMainModeRuleStopDiagnostic
300MPS_CLNT_API_VerifyMainModeRuleStartDiagnostic
301MPS_CLNT_API_VerifyMainModeRuleStopDiagnostic
302MPS_CLNT_API_QueryFirewallRulesStartDiagnostic
303MPS_CLNT_API_QueryFirewallRulesStopDiagnostic
304MPS_CLNT_API_QueryConnectionSecurityRulesStartDiagnostic
305MPS_CLNT_API_QueryConnectionSecurityRulesStopDiagnostic
306MPS_CLNT_API_QueryMainModeRulesStartDiagnostic
307MPS_CLNT_API_QueryMainModeRulesStopDiagnostic
308MPS_CLNT_API_QueryAuthenticationSetsStartDiagnostic
309MPS_CLNT_API_QueryAuthenticationSetsStopDiagnostic
310MPS_CLNT_API_QueryCryptoSetsStartDiagnostic
311MPS_CLNT_API_QueryCryptoSetsStopDiagnostic
312MPS_CLNT_API_VerifyFirewallRuleQueryStartDiagnostic
313MPS_CLNT_API_VerifyFirewallRuleQueryStopDiagnostic
314MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStartDiagnostic
315MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStopDiagnostic
316MPS_CLNT_API_VerifyMainModeRuleQueryStartDiagnostic
317MPS_CLNT_API_VerifyMainModeRuleQueryStopDiagnostic
318MPS_CLNT_API_VerifyAuthenticationSetQueryStartDiagnostic
319MPS_CLNT_API_VerifyAuthenticationSetQueryStopDiagnostic
320MPS_CLNT_API_VerifyCryptoSetQueryStartDiagnostic
321MPS_CLNT_API_VerifyCryptoSetQueryStopDiagnostic
322MPS_CLNT_API_FreeQueryStartDiagnostic
323MPS_CLNT_API_FreeQueryStopDiagnostic

Event ID 200: MPS_CLNT_API_RestoreDefaultsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_RestoreDefaults
Opcode
Start

Event ID 201: MPS_CLNT_API_RestoreDefaultsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_RestoreDefaults
Opcode
Stop

Event ID 202: MPS_CLNT_API_EnumFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumFirewallRules
Opcode
Start

Event ID 203: MPS_CLNT_API_EnumFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumFirewallRules
Opcode
Stop

Event ID 204: MPS_CLNT_API_DeleteFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteFirewallRule
Opcode
Start

Event ID 205: MPS_CLNT_API_DeleteFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteFirewallRule
Opcode
Stop

Event ID 206: MPS_CLNT_API_DeleteAllFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllFirewallRules
Opcode
Start

Event ID 207: MPS_CLNT_API_DeleteAllFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllFirewallRules
Opcode
Stop

Event ID 208: MPS_CLNT_API_AddFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddFirewallRule
Opcode
Start

Event ID 209: MPS_CLNT_API_AddFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddFirewallRule
Opcode
Stop

Event ID 210: MPS_CLNT_API_SetFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetFirewallRule
Opcode
Start

Event ID 211: MPS_CLNT_API_SetFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetFirewallRule
Opcode
Stop

Event ID 212: MPS_CLNT_API_GetConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetConfig
Opcode
Start

Event ID 213: MPS_CLNT_API_GetConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetConfig
Opcode
Stop

Event ID 214: MPS_CLNT_API_SetConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConfig
Opcode
Start

Event ID 215: MPS_CLNT_API_SetConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConfig
Opcode
Stop

Event ID 216: MPS_CLNT_API_GetGlobalConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetGlobalConfig
Opcode
Start

Event ID 217: MPS_CLNT_API_GetGlobalConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_GetGlobalConfig
Opcode
Stop

Event ID 218: MPS_CLNT_API_SetGlobalConfigStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetGlobalConfig
Opcode
Start

Event ID 219: MPS_CLNT_API_SetGlobalConfigStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetGlobalConfig
Opcode
Stop

Event ID 220: MPS_CLNT_API_OpenPolicyStoreStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_OpenPolicyStore
Opcode
Start

Event ID 221: MPS_CLNT_API_OpenPolicyStoreStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_OpenPolicyStore
Opcode
Stop

Event ID 222: MPS_CLNT_API_ClosePolicyStoreStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ClosePolicyStore
Opcode
Start

Event ID 223: MPS_CLNT_API_ClosePolicyStoreStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ClosePolicyStore
Opcode
Stop

Event ID 224: MPS_CLNT_API_AddConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddConnectionSecurityRule
Opcode
Start

Event ID 225: MPS_CLNT_API_AddConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddConnectionSecurityRule
Opcode
Stop

Event ID 226: MPS_CLNT_API_SetConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConnectionSecurityRule
Opcode
Start

Event ID 227: MPS_CLNT_API_SetConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetConnectionSecurityRule
Opcode
Stop

Event ID 228: MPS_CLNT_API_DeleteConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteConnectionSecurityRule
Opcode
Start

Event ID 229: MPS_CLNT_API_DeleteConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteConnectionSecurityRule
Opcode
Stop

Event ID 230: MPS_CLNT_API_DeleteAllConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllConnectionSecurityRules
Opcode
Start

Event ID 231: MPS_CLNT_API_DeleteAllConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllConnectionSecurityRules
Opcode
Stop

Event ID 232: MPS_CLNT_API_EnumConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumConnectionSecurityRules
Opcode
Start

Event ID 233: MPS_CLNT_API_EnumConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumConnectionSecurityRules
Opcode
Stop

Event ID 234: MPS_CLNT_API_AddAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddAuthenticationSet
Opcode
Start

Event ID 235: MPS_CLNT_API_AddAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddAuthenticationSet
Opcode
Stop

Event ID 236: MPS_CLNT_API_DeleteAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAuthenticationSet
Opcode
Start

Event ID 237: MPS_CLNT_API_DeleteAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAuthenticationSet
Opcode
Stop

Event ID 238: MPS_CLNT_API_SetAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetAuthenticationSet
Opcode
Start

Event ID 239: MPS_CLNT_API_SetAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetAuthenticationSet
Opcode
Stop

Event ID 240: MPS_CLNT_API_DeleteAllAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllAuthenticationSets
Opcode
Start

Event ID 241: MPS_CLNT_API_DeleteAllAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllAuthenticationSets
Opcode
Stop

Event ID 242: MPS_CLNT_API_EnumAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumAuthenticationSets
Opcode
Start

Event ID 243: MPS_CLNT_API_EnumAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumAuthenticationSets
Opcode
Stop

Event ID 244: MPS_CLNT_API_AddCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddCryptoSet
Opcode
Start

Event ID 245: MPS_CLNT_API_AddCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddCryptoSet
Opcode
Stop

Event ID 246: MPS_CLNT_API_SetCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetCryptoSet
Opcode
Start

Event ID 247: MPS_CLNT_API_SetCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetCryptoSet
Opcode
Stop

Event ID 248: MPS_CLNT_API_DeleteCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteCryptoSet
Opcode
Start

Event ID 249: MPS_CLNT_API_DeleteCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteCryptoSet
Opcode
Stop

Event ID 250: MPS_CLNT_API_DeleteAllCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllCryptoSets
Opcode
Start

Event ID 251: MPS_CLNT_API_DeleteAllCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllCryptoSets
Opcode
Stop

Event ID 252: MPS_CLNT_API_EnumCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumCryptoSets
Opcode
Start

Event ID 253: MPS_CLNT_API_EnumCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumCryptoSets
Opcode
Stop

Event ID 254: MPS_CLNT_API_EnumPhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase1SAs
Opcode
Start

Event ID 255: MPS_CLNT_API_EnumPhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase1SAs
Opcode
Stop

Event ID 256: MPS_CLNT_API_DeletePhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase1SAs
Opcode
Start

Event ID 257: MPS_CLNT_API_DeletePhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase1SAs
Opcode
Stop

Event ID 258: MPS_CLNT_API_EnumPhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase2SAs
Opcode
Start

Event ID 259: MPS_CLNT_API_EnumPhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumPhase2SAs
Opcode
Stop

Event ID 260: MPS_CLNT_API_VerifyFirewallRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRule
Opcode
Start

Event ID 261: MPS_CLNT_API_VerifyFirewallRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRule
Opcode
Stop

Event ID 262: MPS_CLNT_API_VerifyConnectionSecurityRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRule
Opcode
Start

Event ID 263: MPS_CLNT_API_VerifyConnectionSecurityRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRule
Opcode
Stop

Event ID 264: MPS_CLNT_API_VerifyAuthenticationSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSet
Opcode
Start

Event ID 265: MPS_CLNT_API_VerifyAuthenticationSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSet
Opcode
Stop

Event ID 266: MPS_CLNT_API_VerifyCryptoSetStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSet
Opcode
Start

Event ID 267: MPS_CLNT_API_VerifyCryptoSetStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSet
Opcode
Stop

Event ID 268: MPS_CLNT_API_ImportPolicyStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ImportPolicy
Opcode
Start

Event ID 269: MPS_CLNT_API_ImportPolicyStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ImportPolicy
Opcode
Stop

Event ID 270: MPS_CLNT_API_ExportPolicyStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ExportPolicy
Opcode
Start

Event ID 271: MPS_CLNT_API_ExportPolicyStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_ExportPolicy
Opcode
Stop

Event ID 272: MPS_CLNT_API_DeletePhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase2SAs
Opcode
Start

Event ID 273: MPS_CLNT_API_DeletePhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeletePhase2SAs
Opcode
Stop

Event ID 274: MPS_CLNT_API_FreeFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeFirewallRules
Opcode
Start

Event ID 275: MPS_CLNT_API_FreeFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeFirewallRules
Opcode
Stop

Event ID 276: MPS_CLNT_API_FreeConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeConnectionSecurityRules
Opcode
Start

Event ID 277: MPS_CLNT_API_FreeConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeConnectionSecurityRules
Opcode
Stop

Event ID 278: MPS_CLNT_API_FreeAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeAuthenticationSets
Opcode
Start

Event ID 279: MPS_CLNT_API_FreeAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeAuthenticationSets
Opcode
Stop

Event ID 280: MPS_CLNT_API_FreeCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeCryptoSets
Opcode
Start

Event ID 281: MPS_CLNT_API_FreeCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeCryptoSets
Opcode
Stop

Event ID 282: MPS_CLNT_API_FreePhase1SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase1SAs
Opcode
Start

Event ID 283: MPS_CLNT_API_FreePhase1SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase1SAs
Opcode
Stop

Event ID 284: MPS_CLNT_API_FreePhase2SAsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase2SAs
Opcode
Start

Event ID 285: MPS_CLNT_API_FreePhase2SAsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreePhase2SAs
Opcode
Stop

Event ID 286: MPS_CLNT_API_StatusMessageFromStatusCodeStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_StatusMessageFromStatusCode
Opcode
Start

Event ID 287: MPS_CLNT_API_StatusMessageFromStatusCodeStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_StatusMessageFromStatusCode
Opcode
Stop

Event ID 288: MPS_CLNT_API_FreeMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeMainModeRules
Opcode
Start

Event ID 289: MPS_CLNT_API_FreeMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeMainModeRules
Opcode
Stop

Event ID 290: MPS_CLNT_API_EnumMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumMainModeRules
Opcode
Start

Event ID 291: MPS_CLNT_API_EnumMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_EnumMainModeRules
Opcode
Stop

Event ID 292: MPS_CLNT_API_DeleteMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteMainModeRule
Opcode
Start

Event ID 293: MPS_CLNT_API_DeleteMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteMainModeRule
Opcode
Stop

Event ID 294: MPS_CLNT_API_DeleteAllMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllMainModeRules
Opcode
Start

Event ID 295: MPS_CLNT_API_DeleteAllMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_DeleteAllMainModeRules
Opcode
Stop

Event ID 296: MPS_CLNT_API_AddMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddMainModeRule
Opcode
Start

Event ID 297: MPS_CLNT_API_AddMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_AddMainModeRule
Opcode
Stop

Event ID 298: MPS_CLNT_API_SetMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetMainModeRule
Opcode
Start

Event ID 299: MPS_CLNT_API_SetMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_SetMainModeRule
Opcode
Stop

Event ID 300: MPS_CLNT_API_VerifyMainModeRuleStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRule
Opcode
Start

Event ID 301: MPS_CLNT_API_VerifyMainModeRuleStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRule
Opcode
Stop

Event ID 302: MPS_CLNT_API_QueryFirewallRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryFirewallRules
Opcode
Start

Event ID 303: MPS_CLNT_API_QueryFirewallRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryFirewallRules
Opcode
Stop

Event ID 304: MPS_CLNT_API_QueryConnectionSecurityRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryConnectionSecurityRules
Opcode
Start

Event ID 305: MPS_CLNT_API_QueryConnectionSecurityRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryConnectionSecurityRules
Opcode
Stop

Event ID 306: MPS_CLNT_API_QueryMainModeRulesStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryMainModeRules
Opcode
Start

Event ID 307: MPS_CLNT_API_QueryMainModeRulesStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryMainModeRules
Opcode
Stop

Event ID 308: MPS_CLNT_API_QueryAuthenticationSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryAuthenticationSets
Opcode
Start

Event ID 309: MPS_CLNT_API_QueryAuthenticationSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryAuthenticationSets
Opcode
Stop

Event ID 310: MPS_CLNT_API_QueryCryptoSetsStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryCryptoSets
Opcode
Start

Event ID 311: MPS_CLNT_API_QueryCryptoSetsStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_QueryCryptoSets
Opcode
Stop

Event ID 312: MPS_CLNT_API_VerifyFirewallRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRuleQuery
Opcode
Start

Event ID 313: MPS_CLNT_API_VerifyFirewallRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyFirewallRuleQuery
Opcode
Stop

Event ID 314: MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRuleQuery
Opcode
Start

Event ID 315: MPS_CLNT_API_VerifyConnectionSecurityRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyConnectionSecurityRuleQuery
Opcode
Stop

Event ID 316: MPS_CLNT_API_VerifyMainModeRuleQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRuleQuery
Opcode
Start

Event ID 317: MPS_CLNT_API_VerifyMainModeRuleQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyMainModeRuleQuery
Opcode
Stop

Event ID 318: MPS_CLNT_API_VerifyAuthenticationSetQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSetQuery
Opcode
Start

Event ID 319: MPS_CLNT_API_VerifyAuthenticationSetQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyAuthenticationSetQuery
Opcode
Stop

Event ID 320: MPS_CLNT_API_VerifyCryptoSetQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSetQuery
Opcode
Start

Event ID 321: MPS_CLNT_API_VerifyCryptoSetQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_VerifyCryptoSetQuery
Opcode
Stop

Event ID 322: MPS_CLNT_API_FreeQueryStart

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeQuery
Opcode
Start

Event ID 323: MPS_CLNT_API_FreeQueryStop

#
Provider
Microsoft-Windows-MPS-CLNT
Channel
Diagnostic
Task
MPS_CLNT_API_FreeQuery
Opcode
Stop

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 37945dc2-899b-44d1-b79c-dd4a9e57ff98

Defined in mpssvc.dll, which carries the event manifest.

Observed on:

  • WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.3328 · captured 2026-06-02
  • Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.4768 · captured 2026-06-02

Downloads

Credits

  • Microsoft - authored the ETW manifests and PDBs the schema comes from
  • jdu2600 - the event-schema TSV format this catalog adopted
  • nasbench - the tool that dumps registered providers and manifests