Event ID: 5450

A Windows Filtering Platform sub-layer has been changed.

A Windows Filtering Platform sub-layer has been changed.

Subject:
    Security ID:        %2
    Account Name:       %3

Process Information:
    Process ID: %1

Provider Information:
    Provider ID:    %4
    Provider Name:  %5

Change Information:
    Change Type:    %6

Sub-layer Information:
    Sub-layer ID:   %7
    Sub-layer Name: %8
    Sub-layer Type: %9

Additional Information:
    Weight: %10



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Filtering Platform Policy Change"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List