Windows Firewall
Named by 2 kept items in this workspace.
1 items name it under affected products and 1 under tools.
Search every workspace for Windows Firewall. It matches the name as written, so it can find other things that share it.
The items that name it 2
Each NJRAT instance creates firewall rules for itself to enable its network connections.
abused via direct rule creation or Windows Filtering Platform (WFP) to block EDR agent communications
All technologies in this workspace.