Systemwide "process restriction" can be achieved by alertprocess. @DavidXanatos Is there a way to achieve a "Block All" systemwide Network restriction (in WFP or usermode)? Such a feature could be useful to use in an emergency) (much like the "panic" button).
