{"id":28236613,"url":"https://github.com/tester1010101/inboundpopup","last_synced_at":"2025-06-10T13:32:03.375Z","repository":{"id":290244496,"uuid":"445265394","full_name":"tester1010101/InboundPopup","owner":"tester1010101","description":":mag_right: Windows Defender Firewall Scanner to find \"Inbound\" rules. If a rule is found, an alert/pop-up is immediately sent to the user for further analysis. No downloads required! :saxophone:","archived":false,"fork":false,"pushed_at":"2022-12-28T21:09:09.000Z","size":9,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-19T00:16:35.246Z","etag":null,"topics":["inbound","popup","real","rule","scanner","time"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tester1010101.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-01-06T18:06:05.000Z","updated_at":"2022-12-29T19:45:41.000Z","dependencies_parsed_at":"2025-04-27T19:57:26.625Z","dependency_job_id":null,"html_url":"https://github.com/tester1010101/InboundPopup","commit_stats":null,"previous_names":["tester1010101/inboundpopup"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tester1010101%2FInboundPopup","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tester1010101%2FInboundPopup/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tester1010101%2FInboundPopup/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tester1010101%2FInboundPopup/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tester1010101","download_url":"https://codeload.github.com/tester1010101/InboundPopup/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tester1010101%2FInboundPopup/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259085174,"owners_count":22803153,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["inbound","popup","real","rule","scanner","time"],"created_at":"2025-05-19T00:15:37.975Z","updated_at":"2025-06-10T13:32:03.359Z","avatar_url":"https://github.com/tester1010101.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# InboundPopup :bell: :headphones:\n* :loudspeaker: Scan Windows Firewall Rules to find \"Inbound\" rules.\n* :musical_note: If an \"inbound\" rule is found, an alert/pop-up is sent to the user.\n* :microphone: Best used in scenarios for Group Policy login/out scripts or with the Task Scheduler.\n* :saxophone: Task Scheduler: On Event (Microsoft-Windows-Windows Firewall With Advanced Security/Firewall/2004-2005-2006)\n\n# Pictures #\n\n![image](https://user-images.githubusercontent.com/91343617/148432069-19c0dde2-24d0-4b47-ba4a-36097ba25396.png) ![image](https://user-images.githubusercontent.com/91343617/148431571-e2b48a5f-b76d-4969-88c8-0242a5112ce7.png)\n\n* \u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp; 2004 - A rule has been added to the Windows Defender Firewall exception list.\n* \u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp; 2005 - A rule has been modified in the Windows Defender Firewall exception list.\n* \u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp; 2006 - A rule has been deleted in the Windows Defender Firewall exception list.\n* \u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;    If any of these events happens, the above script can be used to send the user a pop-up.\n* \u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;    Requires no external programs and the pop-up can pop instantly when a change is made.\n\n![image](https://user-images.githubusercontent.com/91343617/148432563-e4f5b23f-cbd3-4d4b-9ae6-8060068117ff.png)\n\n![image](https://user-images.githubusercontent.com/91343617/148431419-0e7065d1-6d8c-4d78-be01-4404eb4c837e.png)\n\n![image](https://user-images.githubusercontent.com/91343617/148433379-31221f2b-738d-4b13-a56f-101f2cb2fa7f.png)\n\n* I added the batch script to make it work under \"Task Scheduler\", thanks to [Stack Overflow](https://stackoverflow.com/questions/665014/my-script-wont-run-under-the-task-scheduler-why).\n\n* Edit the .batch_script to run the \\Path\\Popup.ps1 then you can add it (run.bat) in Task Scheduler.\n* Anytime a rule is found in the inbound section, you'll get a pop-up to verify it, if it's ok, don't make any changes to it.\n* Message me for any question/features that you may want me to add-in!\n\n# Instructions :: \n1) Place the Popup.ps1 script somewhere you can access \u0026 copy the path.\n2) Right-click on \"run-ps-startup.bat\", Edit.\n* Use the path you copied earlier.\n* Paste the path to Popup.ps1 inside the batch file \n* (replace the line after -File) \"\"%SYSTEMROOT%\\System32\\GroupPolicy\\User\\Scripts\\Logon\\Popup.ps1\"\"\n3) Schedule a task OR a login/out job for the Policy \u0026 test the magic!\n\n![image](https://user-images.githubusercontent.com/91343617/148437665-fb12d211-5193-4f30-9d92-6565f859b229.png)\n\n# Purpose\n* I kept getting inbound rules added/modified silently in the background and found that annoying. Here's a simple, no download, fix to it. *You can copy/paste the code if that's more convenient.*\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftester1010101%2Finboundpopup","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftester1010101%2Finboundpopup","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftester1010101%2Finboundpopup/lists"}