Modify Windows Firewall Rules

Adversaries may disable or modify the Windows host firewall to bypass network controls, including changing profiles or adding, deleting, or modifying rules. This record identifies ATT&CK T1686.003. Its operator steps are limited to read-only inspection of active profile settings and enabled inbound allow rules; they do not alter firewall configuration.