From 7aee40c961b6c58303a9cebc810a734bd68ee359 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 8 Oct 2019 09:38:34 +0500 Subject: [PATCH 1/5] Update event-5156.md --- windows/security/threat-protection/auditing/event-5156.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index 613f28d976..a86cedf37d 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -102,7 +102,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - Outbound – for unbound connections. -- **Source Address** \[Type = UnicodeString\]**:** local IP address on which application received the connection. +- **Source Address** \[Type = UnicodeString\]**:** IP address from which connection was initiated. - IPv4 Address @@ -114,9 +114,9 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Source Port** \[Type = UnicodeString\]**:** port number on which application received the connection. +- **Source Port** \[Type = UnicodeString\]**:** port number on which connection was initiated. -- **Destination Address** \[Type = UnicodeString\]**:** IP address ***from*** which connection was received or initiated. +- **Destination Address** \[Type = UnicodeString\]**:** IP address to which connection was attempted. - IPv4 Address @@ -128,7 +128,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Destination Port** \[Type = UnicodeString\]**:** port number which was used from remote machine to initiate connection. +- **Destination Port** \[Type = UnicodeString\]**:** port number on which connection was attempted. - **Protocol** \[Type = UInt32\]: number of protocol which was used. From 605187176a3ba3ba3d4c91e0f4fd75c68e78fb78 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 9 Oct 2019 15:31:06 +0500 Subject: [PATCH 2/5] Update event-5156.md --- windows/security/threat-protection/auditing/event-5156.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index a86cedf37d..e3881d0ecb 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -102,7 +102,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - Outbound – for unbound connections. -- **Source Address** \[Type = UnicodeString\]**:** IP address from which connection was initiated. +- **Source Address** \[Type = UnicodeString\]**:** IP address from which the connection was initiated. - IPv4 Address @@ -114,9 +114,9 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Source Port** \[Type = UnicodeString\]**:** port number on which connection was initiated. +- **Source Port** \[Type = UnicodeString\]**:** port number on which the connection was initiated. -- **Destination Address** \[Type = UnicodeString\]**:** IP address to which connection was attempted. +- **Destination Address** \[Type = UnicodeString\]**:** IP address to which the connection was initiated. - IPv4 Address @@ -128,7 +128,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Destination Port** \[Type = UnicodeString\]**:** port number on which connection was attempted. +- **Destination Port** \[Type = UnicodeString\]**:** port number on which the connection was initiated. - **Protocol** \[Type = UInt32\]: number of protocol which was used. From ddf58250ac8c01398c5153f8b14890712d6433e3 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 10 Oct 2019 16:45:51 +0500 Subject: [PATCH 3/5] Update windows/security/threat-protection/auditing/event-5156.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/security/threat-protection/auditing/event-5156.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index e3881d0ecb..953804c16b 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -114,7 +114,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Source Port** \[Type = UnicodeString\]**:** port number on which the connection was initiated. +- **Source Port** \[Type = UnicodeString\]**:** port number from which the connection was initiated. - **Destination Address** \[Type = UnicodeString\]**:** IP address to which the connection was initiated. From 3db50e79130c197fac7455f545d23b36666335c2 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 10 Oct 2019 16:45:58 +0500 Subject: [PATCH 4/5] Update windows/security/threat-protection/auditing/event-5156.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/security/threat-protection/auditing/event-5156.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index 953804c16b..27ab53971a 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -116,7 +116,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - **Source Port** \[Type = UnicodeString\]**:** port number from which the connection was initiated. -- **Destination Address** \[Type = UnicodeString\]**:** IP address to which the connection was initiated. +- **Destination Address** \[Type = UnicodeString\]**:** IP address where the connection was received. - IPv4 Address From f0e3c42402da1a046e76ff4f7b3b7d947d2e7d0b Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 10 Oct 2019 16:46:09 +0500 Subject: [PATCH 5/5] Update windows/security/threat-protection/auditing/event-5156.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/security/threat-protection/auditing/event-5156.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-5156.md b/windows/security/threat-protection/auditing/event-5156.md index 27ab53971a..a5aaae535b 100644 --- a/windows/security/threat-protection/auditing/event-5156.md +++ b/windows/security/threat-protection/auditing/event-5156.md @@ -128,7 +128,7 @@ This event generates when [Windows Filtering Platform](https://msdn.microsoft.co - 127.0.0.1 , ::1 - localhost -- **Destination Port** \[Type = UnicodeString\]**:** port number on which the connection was initiated. +- **Destination Port** \[Type = UnicodeString\]**:** port number where the connection was received. - **Protocol** \[Type = UInt32\]: number of protocol which was used.