---

Get-NetFirewallProfile > "C:\Users\Nikis\Documents\soc-lab\firewall_audit.txt"

Get-NetFirewallRule -Enabled True -Direction Inbound | Select-Object -First 5 DisplayName >> "C:\Users\Nikis\Documents\soc-lab\firewall_audit.txt"

New-NetFirewallRule -DisplayName "LAB Block Notepad Outbound" -Direction Outbound -Program "C:\Windows\System32\notepad.exe" -Action Block

Get-NetFirewallRule -DisplayName "LAB Block Notepad Outbound" >> "C:\Users\Nikis\Documents\soc-lab\firewall_audit.txt"

Remove-NetFirewallRule -DisplayName "LAB Block Notepad Outbound"