firewall_as | Detection.FYI

The Windows Defender Firewall Service Failed To Load Group Policy

Dec 1, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects activity when The Windows Defender Firewall service failed to load Group Policy

Read More
New Firewall Rule Added In Windows Firewall Exception List

Oct 18, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects when a rule has been added to the Windows Firewall exception list

Read More
A Rule Has Been Deleted From The Windows Firewall Exception List

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects when a single rules or all of the rules have been deleted from the Windows Defender Firewall

Read More
All Rules Have Been Deleted From The Windows Firewall Configuration

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects when a all the rules have been deleted from the Windows Defender Firewall configuration

Read More
Firewall Rule Modified In The Windows Firewall Exception List

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects when a rule has been modified in the Windows firewall exception list

Read More
New Firewall Exception Rule Added For A Suspicious Folder

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects the addition of a rule to the Windows Firewall exception list where the application resides in a suspicious folder

Read More
Windows Defender Firewall Has Been Reset To Its Default Configuration

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects activity when Windows Defender Firewall has been reset to its default configuration

Read More
Windows Firewall Settings Have Been Changed

Aug 28, 2023 · attack.defense_evasion attack.t1562.004 ·
Share on:

Detects activity when the settings of the Windows firewall have been changed

Read More