CmdID / PowerShell / Cmdlets / New
New-NetFirewallRule
Creates a new inbound or outbound firewall rule and adds the rule to the target computer. Windows Server PowerShell reference
From the Windows Server PowerShell reference 39 parameters 1 Sigma rule looks for it Its page in the reference
Parameters
Show its 39 parameters
-ActionSpecifies that matching firewall rules of the indicated action are created.-AsJobRuns the cmdlet as a background job.-AuthenticationSpecifies that authentication is required on firewall rules.-CimSession, -SessionRuns the cmdlet in a remote session or on a remote computer.-Confirm, -cfPrompts you for confirmation before running the cmdlet.-DescriptionSpecifies that matching firewall rules of the indicated description are created.-DirectionSpecifies that matching firewall rules of the indicated direction are created.-DisplayNameSpecifies that only matching firewall rules of the indicated display name are created.-DynamicTarget, -DynamicTransportSpecifies a dynamic transport.-EdgeTraversalPolicySpecifies that matching firewall rules of the indicated edge traversal policy are created.-EnabledSpecifies that matching firewall rules of the indicated state are created.-EncryptionSpecifies that encryption in authentication is required on firewall rules.-GPOSessionSpecifies the network GPO from which to retrieve the rules to be created.-GroupSpecifies that only matching firewall rules of the indicated group association are copied.-IcmpTypeSpecifies the ICMP type codes.-InterfaceAliasSpecifies the alias of the interface that applies to the traffic.-InterfaceTypeSpecifies that only network connections made through the indicated interface types are subject to the requirements of this rule.-LocalAddressSpecifies that network packets with matching IP addresses match this rule.-LocalOnlyMappingIndicates that matching firewall rules of the indicated value are created.-LocalPortSpecifies that network packets with matching IP local port numbers match this rule.-LocalUserSpecifies the principals to which network traffic this firewall rule applies.-LooseSourceMapping, -LSMIndicates that matching firewall rules of the indicated value are created.-Name, -IDSpecifies that only matching firewall rules of the indicated name are created.-OverrideBlockRulesIndicates that matching network traffic that would otherwise be blocked are allowed.-OwnerSpecifies that matching firewall rules of the indicated owner are created.-PackageSpecifies the Windows Store application to which the firewall rule applies.-PlatformSpecifies which version of Windows the associated rule applies.-PolicyStoreSpecifies the policy store from which to retrieve the rules to be created.-ProfileSpecifies one or more profiles to which the rule is assigned.-ProgramSpecifies the path and file name of the program for which the rule allows traffic.-ProtocolSpecifies that network packets with matching IP addresses match this rule.-RemoteAddressSpecifies that network packets with matching IP addresses match this rule.-RemoteDynamicKeywordAddressesSpecifies the dynamic keyword address IDs to be used for the remote host of the traffic matched by this rule.-RemoteMachineSpecifies that matching IPsec rules of the indicated computer accounts are created.-RemotePortSpecifies that network packets with matching IP port numbers match this rule.-RemoteUserSpecifies that matching IPsec rules of the indicated user accounts are created.-ServiceSpecifies the short name of a Windows Server 2012 service to which the firewall rule applies.-ThrottleLimitSpecifies the maximum number of concurrent operations that can be established to run the cmdlet.-WhatIf, -wiShows what would happen if the cmdlet runs.