Event ID 5154
The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections.The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections.
Application Information:
Process ID: %1
Application Name: %2
Network Information:
Source Address: %3
Source Port: %4
Protocol: %5
Filter Information:
Filter Run-Time ID: %6
Layer Name: %7
Layer Run-Time ID: %8
Microsoft Documentation
| Name | Field | Insertion String | OS | Example | ||
|---|---|---|---|---|---|---|
| Protocol | Protocol | %5 | Any | View Codes | ||
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Filtering Platform Connection"
LEFT/RIGHT arrow keys for navigation
Back to List