ghostpsalm

ghostpsalm/Firebreak

Observe first, enforce with confidence. An on-demand Windows tool (no service or driver) that correlates WFP connection-audit events (5156/5157) with your firewall rules to show which rules are actually being matched, by which apps, and how often — so unused rules can be disabled and over-broad ones tightened.

0 stars 0 forks 0 watchers Rust Other
attack-surface audit egui event-log firewall firewall-rules hardening infosec least-privilege network-security rust security-tools sysadmin wfp windows windows-filtering-platform windows-firewall windows-security
View on GitHub
1 Open Issue Need Help Last updated: Jul 31, 2026

Open Issues Need Help

View All on GitHub
5156/5157 Direction token mapping (%%14592/%%14593) is unverified on real hardware about 4 hours ago
bug help wanted accuracy
ghostpsalm/Firebreak
0

Observe first, enforce with confidence. An on-demand Windows tool (no service or driver) that correlates WFP connection-audit events (5156/5157) with your firewall rules to show which rules are actually being matched, by which apps, and how often — so unused rules can be disabled and over-broad ones tightened.

Rust
#attack-surface#audit#egui#event-log#firewall#firewall-rules#hardening#infosec#least-privilege#network-security#rust#security-tools#sysadmin#wfp#windows#windows-filtering-platform#windows-firewall#windows-security