Abstract: A method of establishing a programming interlink, then monitoring, managing, controlling and reporting the Microsoft Windows Defender Firewall Rules subsystem. Specifically, after establishing a Component Object Module (COM) binary interface program directly into the Firewall Rules subsystem, and then executing a series of parallel threads that perform a query gathering firewall rules data, establishing a configuration baseline, then continuously running 24×7/365, which monitors the current state of all Windows Defender Firewall Rules. Moreover, creating (starting) another series of text-based console utility programs, which run 24×7/365 that also includes a text-based piped shell utility program interface into the Windows Powershell.exe, which can receive instructions from the COM binary interface program, and process any information that includes transmitting data, regarding any unauthorized change to the established baseline.