Windows event ID 5446 - A Windows Filtering Platform callout has been changed

Event ID: 

5446

Category: 

Policy Change

Subcategory: 

Filtering Platform Policy Change

Supported on: 

Windows Vista, Windows Server 2008

A Windows Filtering Platform callout has been changed.

Subject:
Security ID: %2
Account Name: %3

Process Information:
Process ID: %1

Provider Information:
ID: %4
Name: %5

Change Information:
Change Type: %6

Callout Information:
ID: %7
Name: %8
Type: %9
Run-Time ID: %10

Layer Information:
ID: %11
Name: %12
Run-Time ID: %13

Related content