Skip to content

Instantly share code, notes, and snippets.

@jsecurity101

jsecurity101/Get-FwFilterFilterKey.txt

Created October 28, 2024 14:21
Show Gist options
  • Save jsecurity101/09b15d17b3bb2e6d2c59edf041c90fa6 to your computer and use it in GitHub Desktop.
Save jsecurity101/09b15d17b3bb2e6d2c59edf041c90fa6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Get-FwFilterFilterKey.txt
PS > Get-FwFilter -Key 8560068a-cb5a-4521-84cf-e1c0072dc359 | Format-FwFilter
Name : Custom Outbound Filter
Action Type: Block
Key : 8560068a-cb5a-4521-84cf-e1c0072dc359
Id : 68421
Description:
Layer : FWPM_LAYER_ALE_AUTH_CONNECT_V4
Sub Layer : FWPM_SUBLAYER_UNIVERSAL
Flags : Persistent, Indexed
Weight : 274877906944
Conditions :
FieldKeyName MatchType Value
------------ --------- -----
FWPM_CONDITION_ALE_APP_ID Equal \device\harddiskvolume3\windows\jonmon-service.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment