Event Log Security - Windows Event Search

ID	Event Description
5031	Windows Firewall blocked an application from accepting incoming connections on the network. Audit Failure
5150	The Windows Filtering Platform has blocked a packet.
5151	A more restrictive Windows Filtering Platform filter has blocked a packet.
5154	The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections. Audit Success
5155	The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections. Audit Failure
5156	The Windows Filtering Platform has allowed a connection. Audit Success
5157	The Windows Filtering Platform has blocked a connection. Audit Failure
5158	The Windows Filtering Platform has permitted a bind to a local port. Audit Success