CmdID / PowerShell / Cmdlets / Set
Set-NetFirewallProfile
Configures settings that apply to the per-profile configurations of the Windows Firewall with Advanced Security. Windows Server PowerShell reference
From the Windows Server PowerShell reference 28 parameters 1 Sigma rule looks for it Its page in the reference
Parameters
Show its 28 parameters
-AllIndicates that all of the firewall profiles within the specified policy store are modified.-AllowInboundRulesSpecifies that the firewall blocks inbound traffic.-AllowLocalFirewallRulesSpecifies that the local firewall rules should be merged into the effective policy along with Group Policy settings.-AllowLocalIPsecRulesSpecifies that the local IPsec rules should be merged into the effective policy along with Group Policy settings.-AllowUnicastResponseToMulticastAllows unicast responses to multi-cast traffic.-AllowUserAppsDetermines how the Windows XP policy is applied to the newer Windows Firewall.-AllowUserPortsDetermines how the Windows XP policy is applied to the newer Windows Firewall.-AsJobRuns the cmdlet as a background job.-CimSession, -SessionRuns the cmdlet in a remote session or on a remote computer.-Confirm, -cfPrompts you for confirmation before running the cmdlet.-DefaultInboundActionSpecifies how to filter inbound traffic.-DefaultOutboundActionSpecifies how to filter outbound traffic.-DisabledInterfaceAliasesSpecifies a list of interfaces on which firewall settings are excluded.-EnableStealthModeForIPsecEnables stealth mode for IPsec traffic.-EnabledAllows unicast responses to multi-cast traffic.-GPOSessionSpecifies the network GPO from which to retrieve the rules to be modified.-InputObjectSpecifies the input object that is used in a pipeline command.-LogAllowedSpecifies how to log the allowed packets in the location specified by the *LogFileName* parameter.-LogBlockedSpecifies how to log the dropped packets in the location specified by the *LogFileName* parameter.-LogFileNameSpecifies the path and filename of the file to which Windows Server 2012 writes log entries.-LogIgnoredSpecifies how to log the ignored packets in the location specified by the *LogFileName* parameter.-LogMaxSizeKilobytesSpecifies the maximum file size of the log, in kilobytes.-Name, -ProfileSpecifies the network firewall profile objects by profile type to modify.-NotifyOnListenAllows the notification of listening for inbound connections by a service.-PassThruReturns an object representing the item with which you are working.-PolicyStoreSpecifies the policy store from which to retrieve the rules to be modified.-ThrottleLimitSpecifies the maximum number of concurrent operations that can be established to run the cmdlet.-WhatIf, -wiShows what would happen if the cmdlet runs.