Skip to content

Instantly share code, notes, and snippets.

@jsecurity101

jsecurity101/Get-FwFilterFilterId.txt

Last active October 28, 2024 14:21
Show Gist options
  • Save jsecurity101/09e20f56911c26893be74b9bb53244db to your computer and use it in GitHub Desktop.
Save jsecurity101/09e20f56911c26893be74b9bb53244db to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Get-FwFilterFilterId.txt
PS > Get-FwFilter -Id 68421 | Format-FwFilter
Name : Custom Outbound Filter
Action Type: Block
Key : 8560068a-cb5a-4521-84cf-e1c0072dc359
Id : 68421
Description:
Layer : FWPM_LAYER_ALE_AUTH_CONNECT_V4
Sub Layer : FWPM_SUBLAYER_UNIVERSAL
Flags : Persistent, Indexed
Weight : 274877906944
Conditions :
FieldKeyName MatchType Value
------------ --------- -----
FWPM_CONDITION_ALE_APP_ID Equal \device\harddiskvolume3\windows\jonmon-service.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment