Some relationships in OSSEM-DM use events such as 2004 (Firewall rule added), 2006 (Firewall rule deleted) Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security
Some relationships in OSSEM-DM use events such as 2004 (Firewall rule added), 2006 (Firewall rule deleted)
Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/windows-firewall-with-advanced-security