Windows Security Log Event ID 5148

5148: The Windows Filtering Platform has detected a DoS attack and entered a defensive mode; packets associated with this attack will be discarded.

On this page

• Description of this event
• Field level details
• Examples
• Discuss this event
• Mini-seminars on this event

The Windows Filtering Platform has detected a DoS attack and entered a defensive mode; packets associated with this attack will be discarded.

This event is new to Windows 2008 Release 2 and Windows 7. It does not appear in earlier versions of Windows.

Free Security Log Resources by Randy

• Free Security Log Quick Reference Chart
• Windows Event Collection: Supercharger Free Edtion
• Free Active Directory Change Auditing Solution
• Free Course: Security Log Secrets

Description Fields in 5148

Network Information:
 Type:  %1

Supercharger Free Edition

Centrally manage WEC subscriptions.

Free.

 

Discussions on Event ID 5148 Ask a question about this event

 

Upcoming Webinars QRadar WinCollect and Native Windows Event Collection: How to Do It Right, Filter the Noise and Simplify your Infrastructure Correlating Vulnerability Scans with Network Path Analysis to Find and Remediate the Biggest Risks to Your Network and Avoid Wasting Time on the Little Ones Getting all Your Security Information Into One Place and Searching It Like Google Regulating Privileged Access: When to Require Human Approval Workflows WSUS vs. SCCM: Which is the best way to go for security patching? Top 5 Ways for Analyzing Entitlements and Identifying High-Risk

Additional Resources Security Log Quick Reference Chart

•	All Event IDs
•	Audit Policy