admin/olafhartong-sysmon-modular
1
0
Fork 0
mirror of https://github.com/olafhartong/sysmon-modular synced 2026-06-08 16:29:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

exclude_desktop_central

Browse Source 
Excluding desktop central processes such as dcpatchscan.exe
This commit is contained in:
Ali Alwashali
2022-07-24 16:26:45 +03:00
committed by GitHub
parent 4153d4c989
commit 4533bc20d4
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
exclude_desktop_central.xml
+10
View File
@@ -0,0 +1,10 @@
<Sysmon schemaversion="4.30">
<EventFiltering>
<RuleGroup name="" groupRelation="or">
<ProcessCreate onmatch="exclude">
<Image condition="begin with">C:\program files (x86)\desktopcentral_agent\bin\</Image>
<Image condition="begin with">C:\program files\desktopcentral_server\bin\</Image>
</ProcessCreate>
</RuleGroup>
</EventFiltering>
</Sysmon>