Just like using "iptables" table to find the open ...
# windows
z
Just like using "iptables" table to find the open ports and firewall rules for linux, is there a way to find out firewall rules and open ports for windows using osquery?
s
Not easily at the moment. You’d have to parse the registry keys
z
Can you give some screenshots of how to do that ?
s
Docs are here for pulling info from the Windows registry: https://osquery.io/schema/4.3.0#registry
z
Thanks