| Event Id | 2005 |
| Source | Microsoft-Windows-Windows Firewall with Advanced Security |
| Description | A rule has been modified in the Windows Firewall exception list. Added Rule: %tRule ID:%t%1 %tRuleName:%t%2 %tOrigin:%t%3 %tActive:%t%18 %tDirection:%t%6 %tProfiles:%t%11 %tAction:%t%10 %tApplication Path:%t%4 %tService Name:%t%5 %tProtocol:%t%7 %tSecurity Options:%t%21 %tEdge Traversal:%t%19 %tModifying User:%t%22 %tModifying Application:%t%23 |
| Event Information | According to Microsoft : Cause : This event is logged when a rule has been modified in the Windows Firewall exception list. Resolution : This is a normal condition. No further action is required. |
| Reference Links | Event ID 2005 from Microsoft-Windows-Windows Firewall with Advanced Security |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.