(Payload:Get\-NetFirewallRule* OR Payload:Show\-NetFirewallRule*) OR (ContextInfo:Get\-NetFirewallRule* OR ContextInfo:Show\-NetFirewallRule*)