((Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\powershell_ise.exe) OR (OriginalFileName:PowerShell.EXE OR OriginalFileName:pwsh.dll)) (CommandLine:Set\-NetFirewallProfile\ * CommandLine:\ \-Enabled\ * CommandLine:\ False*) (CommandLine:\ \-All\ * OR CommandLine:Public* OR CommandLine:Domain* OR CommandLine:Private*)