Event ID: 5448

A Windows Filtering Platform provider has been changed.

A Windows Filtering Platform provider has been changed.

Subject:
    Security ID:        %2
    Account Name:       %3

Process Information:
    Process ID: %1

Change Information:
    Change Type:    %4

Provider Information:
    ID:     %5
    Name:       %6
    Type:       %7



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Filtering Platform Policy Change"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List