All Rules Have Been Deleted From The Windows Firewall Configuration

Rule Info

Name
All Rules Have Been Deleted From The Windows Firewall Configuration
Description
Detects when a all the rules have been deleted from the Windows Defender Firewall configuration
Reference
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/dd364427(v=ws.10)
Modified
None
Date
2023-01-17 00:00:00
Author
frack113, Nasreddine Bencherchali
Tags
DEMO
Id
79609c82-a488-426e-abcf-9f341a39365d
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=79609c82-a488-426e-abcf-9f341a39365d

Rule History

Author
Commit
Title
Date
Nasreddine Bencherchali
8f46f2f06
fix: fp in firewall rule
2023-01-17
Nasreddine Bencherchali
1c0bf6e26
feat: update windows firewall rules
2023-01-17
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022