| Event Id | 5159 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The Windows Filtering Platform has blocked a bind to a local port. Application Information: Process ID: < Process ID > Application Name: < Application Name > Network Information: Source Address: < Source Address > Source Port: < Source Port > Protocol: Filter Information: Filter Run-Time ID: < Filter Run-Time ID> Layer Name: < Layer Name> Layer Run-Time ID: < Layer Run-Time ID> |
| Event Information | Cause : This event is logged every time WFP prevents a client or server application binds to a port. Binding is the first step in TCP or UDP communications. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.