| Event Id | 5448 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A Windows Filtering Platform provider has been changed. Subject: Security ID: Account Name: Process Information: Process ID: < Process ID > Change Information: Change Type: < Change Type > Provider Information: ID: < ID > Name: < Name > Type: < Type > |
| Event Information | Cause : This event is logged when a WFP provider is added or there is a change to an existing provider. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.