Event ID:
5450
Category:
Policy Change
Subcategory:
Filtering Platform Policy Change
Supported on:
Windows Vista, Windows Server 2008
A Windows Filtering Platform sub-layer has been changed.
Subject:
Security ID: %2
Account Name: %3
Process Information:
Process ID: %1
Provider Information:
Provider ID: %4
Provider Name: %5
Change Information:
Change Type: %6
Sub-layer Information:
Sub-layer ID: %7
Sub-layer Name: %8
Sub-layer Type: %9
Additional Information:
Weight: %10