Windows Firewall policy changes like new program exceptions enabling/disabling/deleting policies can be monitored and detected with EventSentry along to detection when firewall is disabled. Enabling Policies Changes Audit In order to monitor Microsoft Windows Firewall policy changes the subcategory MPSSVC rulelevel Policy Chang...
