---

Get-NetFirewallRule -PolicyStore ActiveStore | Where-Object { $_.Enabled -eq "True" -and $_.Direction -eq "Outbound" -and $_.Action -eq "Block" } | Format-Table DisplayName,PolicyStoreSource,PolicyStoreSourceType -AutoSize

netsh wfp set options netevents=on

ping -n 1 1.1.1

netsh wfp show netevents file=C:\Users\user\netevents.xml remoteaddr=1.1.1.1 timewindow=60

Select-String -Path C:\Users\user\netevents.xml -Pattern "filterId|subLayer|actionType"

netsh wfp set options netevents=off