Windows EventInformation
Windows Event ID 5156 – Microsoft-Windows-Security-Auditing: Network Connection Allowed by Windows Filtering Platform
Event ID 5156 logs when Windows Filtering Platform allows a network connection. This security audit event tracks permitted inbound and outbound connections for compliance and network monitoring.
