.. /
netsh.exe
Display or modify the network configuration
Resources
Network
Show firewall rule
netsh.exe -r W10.ad.bitsadmin.com advfirewall firewall show rule name="Remote Desktop - Shadow (TCP-In)"
Usecases
- Determine the configuration of a certain firewall rule and whether it is active
- For example usage, see the Spying on users using RDP shadowing blog post (see resources)
Mitre Att&ck
T1562.004
Enable firewall rule
netsh.exe -r W10.ad.bitsadmin.com advfirewall firewall set rule name="Remote Desktop - Shadow (TCP-In)" new enable=yes
Usecases
- Enable firewall rule
- For example usage, see the Spying on users using RDP shadowing blog post (see resources)
Mitre Att&ck
T1562.004