Skip to content

Instantly share code, notes, and snippets.

@JustinChristensen

JustinChristensen/firewall-filtering-platform-events.ps1

Created January 21, 2022 05:05
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JustinChristensen/bb6d15cee90da4e38db9f73161152308 to your computer and use it in GitHub Desktop.
Save JustinChristensen/bb6d15cee90da4e38db9f73161152308 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
firewall-filtering-platform-events.ps1
# start tracing filtering platform events
auditpol /set /subcategory:"Filtering Platform Packet Drop" /success:enable /failure:enable
auditpol /set /subcategory:"Filtering Platform Connection" /success:enable /failure:enable
# do the thing
# capture the filter state
netsh wfp show state
# stop tracing
auditpol /set /subcategory:"Filtering Platform Packet Drop" /success:disable /failure:disable
auditpol /set /subcategory:"Filtering Platform Connection" /success:disable /failure:disable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment