5450: A Windows Filtering Platform sub-layer has been changed
On this page
I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
Your entire Windows Event Collection environment on a single pane of glass.
Free.
The following callout was present when the Windows Filtering Platform Base Filtering Engine started.
Provider Information:
ID: %1 Name: %2
Callout Information:
ID: %3 Name: %4 Type: %5 Run-Time ID: %6
Layer Information:
ID: %7 Name: %8 Run-Time ID: %9
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID: Must be a 1-5 digit number No such event ID
Security Log Quick Reference Chart Download now!