Zweasta
07/25/2020, 7:14 PMiptables
table for linux, is there any plan to build a table for windows systems ?seph
07/25/2020, 7:28 PMiptables
?Zweasta
07/25/2020, 7:34 PMseph
07/25/2020, 8:39 PMZweasta
07/25/2020, 10:25 PMnetsh advfirewall
, maybe this can be a good API to use for osquery to develop a table in this regard..vaar
07/26/2020, 10:28 AMseph
07/26/2020, 11:08 AMZweasta
07/26/2020, 4:52 PMPortBlacklist
only allows us to know if a port is blocked, and also I am not willing to manage port blocking or unblocking. I just need to know the open ports. That's it.sundsta
07/26/2020, 9:36 PMZweasta
07/26/2020, 10:02 PM$fw = New-Object -ComObject HNetCfg.FWPolicy2
$fw.Rules | where {$_.Enabled -like $true} | Format-Table LocalPorts
Will this be able to find all the rules that are held in registry ?sundsta
07/27/2020, 3:59 PMHKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
but I don’t have a Windows machine to verify with at the momentZweasta
07/27/2020, 10:02 PM