Windows event ID 5450 - A Windows Filtering Platform sub-layer has been changed

Event ID: 

5450

Category: 

Policy Change

Subcategory: 

Filtering Platform Policy Change

Supported on: 

Windows Vista, Windows Server 2008

A Windows Filtering Platform sub-layer has been changed.

Subject:
Security ID: %2
Account Name: %3

Process Information:
Process ID: %1

Provider Information:
Provider ID: %4
Provider Name: %5

Change Information:
Change Type: %6

Sub-layer Information:
Sub-layer ID: %7
Sub-layer Name: %8
Sub-layer Type: %9

Additional Information:
Weight: %10