Detection rules › By eventMicrosoft-Windows-Security-Auditing event 49481 detection rule reference this event. View event page.Splunk (1)Windows Firewall Rule Deletion T1562.004