| Event Id | 5449 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A Windows Filtering Platform provider context has been changed |
| Event Information | Cause : This event is logged whenever a provider context is added or deleted. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.