Files
splunk-security_content/lookups/is_windows_system_file.yml
2024-05-08 16:05:40 +00:00

6 lines
291 B
YAML

default_match: 'false'
description: A full baseline of executable files in Windows\System32 and Windows\Syswow64, including sub-directories from Server 2016 and Windows 10.
filename: is_windows_system_file20231221.csv
min_matches: 1
name: is_windows_system_file
case_sensitive_match: 'false'