mirror of
https://github.com/olafhartong/sysmon-modular
synced 2026-06-08 16:29:39 +00:00
Update exclude_microsoft_domains.xml
This commit is contained in:
@@ -25,9 +25,10 @@
|
||||
<QueryName condition="end with">.xboxlive.com</QueryName> <!--Microsoft-->
|
||||
<QueryName condition="is">login.windows.net</QueryName> <!--Microsoft-->
|
||||
<QueryName condition="is">outlook.office.com</QueryName> <!--Outlook-->
|
||||
<QueryName condition="is">static.teams.cdn.office.net</QueryName> <!--Teams-->
|
||||
<QueryName condition="is">statics.teams.cdn.office.net</QueryName> <!--Teams-->
|
||||
<QueryName condition="is">acdc-direct.office.com</QueryName> <!--Microsoft-->
|
||||
<QueryName condition="end with">.fp.measure.office.com</QueryName> <!--Office-->
|
||||
<QueryName condition="end with">office365.com</QueryName>
|
||||
</DnsQuery>
|
||||
</RuleGroup>
|
||||
</EventFiltering>
|
||||
|
||||
Reference in New Issue
Block a user