| Event Id | 4948 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A change has been made to Windows Firewall exception list. A rule was deleted.
%t Profile Changed:%t%1 Deleted Rule: %tRule ID:%t%2 %tRule Name:%t%3 |
| Event Information | According to Microsoft : Cause : This event is logged when a change has been made to Windows Firewall exception list. Resolution : This is a normal condition. No further action is required. |
| Reference Links | Event ID 4948 from Microsoft-Windows-Security-Auditing |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.