Firewall Rule Deleted Via Netsh.EXE

SigmaHQ Detections@sigmaHQ

•updated Oct 7, 2025•0•0•3

Detects the removal of a port or application rule in the Windows Firewall configuration using netsh