Get status of Microsoft Defender Firewall (osquery)

Description: This osquery command will list the status of the Microsoft Defender Firewall.

SQL:

SELECT display_name, status, start_type
FROM services
WHERE LOWER(name) = "mpssvc";

Operating Systems: Windows only

Reference:

• https://osquery.io/schema/current/#services
• https://github.com/osquery/osquery/blob/master/specs/windows/services.table