2h 51min, aug 3, 2019 y - 新增防火牆例外名單(遠端協助)
Description:
\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
A rule has been modified in the Windows Defender Firewall exception list.
Modified Rule:
Rule ID: RemoteAssistance-PnrpSvc-UDP-OUT-Active
Rule Name: 遠端協助 (PNRP-Out)
Origin: 1
Active: 0
Direction: 2
Profiles: 3
Action: 3
Application Path: C:\Windows\system32\svchost.exe
Service Name: pnrpsvc
Protocol: 17
Security Options: 0
Edge Traversal: 0
Modifying User: S-1-5-21-2758806276-1324171330-2527353699-500
Modifying Application: C:\Windows\System32\SystemPropertiesAdvanced.exe
Added to timeline:
1081121-離職員工破壞伺服器案
Date:
