Used Sysinternals, procexp, and tcpview to figure out what connection is being deleted by firewall


# Go Pro Firewall Info
## UDP Rule
GoPro Webcam
Allow inbound traffic from GoPro Webcam on UDP port 8554
`C:\Program Files (x86)\GoPro\GoPro Webcam\GoPro Webcam.exe`
Private and Public
# What's Going On
- It looks like the computer is trying to communicate with the GoPro using HTTP ([OpenGoPro HTTP API](https://gopro.github.io/OpenGoPro/http#section/Overview))
- However, this isn't working because we have firewall whitelists for certain applications I'm guessing especially maybe with port 5002
- The outbound HTTP traffic to the GoPro is likely being blocked because my computer is not supposed to be a web server in a way
- Also, we have 127 to 127 traffic which may count as inbound and necessitate firewall rules
# Testing and Solution
- Inbound rule for ports 5002, 8080, 80, and 443
- Outbound for ports 5002, 8080, 80, 443
# Looking at Firewall Logs
- Install Sysmon
- Use default Sysmon modular config.xml file from GitHub
- Use Wireshark and TCP view
- Look at Event Viewer under Applications -> Windows/Microsoft
- [Configure Windows Firewall logging - Windows Security | Microsoft Learn](https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/configure-logging?tabs=gpo)
- Checking firewall logs for dropped packets


# Looking at Networking
- I used TCPview and Wireshark