Netsh Advfirewall Isolate Network

X__Junior

Detects execution of netsh.exe commands that modify Windows Advanced Firewall settings to block both inbound and outbound traffic, effectively isolating the system from network communication. This technique may be used by attackers to evade detection, prevent remediation, or disrupt incident response activities.

2026-02-20 00:00:00

None

cddaba5d-182c-41ff-94e5-65a5a0519c3b

attack.defense-evasion attack.t1562.004 attack.s0108

Nextron Sigma feed only (private)