splunk-security_content/lookups/csv/windows_protocol_handlers.csv

1	handler	ishandler
2	*bingmaps:*	TRUE
3	*calculator:*	TRUE
4	*callto:*	TRUE
5	*conf:*	TRUE
6	*DLNA-PLAYSINGLE:*	TRUE
7	*Explorer.AssocActionId.BurnSelection:*	TRUE
8	*Explorer.AssocActionId.EraseDisc:*	TRUE
9	*Explorer.AssocActionId.ZipSelection:*	TRUE
10	*Explorer.AssocProtocol.search-ms:*	TRUE
11	*Explorer.BurnSelection:*	TRUE
12	*Explorer.EraseDisc:*	TRUE
13	*Explorer.ZipSelection:*	TRUE
14	*feed:*	TRUE
15	*feeds:*	TRUE
16	*file:*	TRUE
17	*FirefoxURL-308046B0AF4A39CB:*	TRUE
18	*ftp:*	TRUE
19	*grvopen:*	TRUE
20	*http:*	TRUE
21	*https:*	TRUE
22	*iehistory:*	TRUE
23	*ierss:*	TRUE
24	*im:*	TRUE
25	*LDAP:*	TRUE
26	*Lync15:*	TRUE
27	*Lync15classic:*	TRUE
28	*ma-chan:*	TRUE
29	*ma-filelink:*	TRUE
30	*mailto:*	TRUE
31	*mapi:*	TRUE
32	*mapi15:*	TRUE
33	*mapi16:*	TRUE
34	*mk:*	TRUE
35	*MMS:*	TRUE
36	*ms-access:*	TRUE
37	*ms-actioncenter:*	TRUE
38	*ms-apprep:*	TRUE
39	*ms-availablenetworks:*	TRUE
40	*ms-cortana:*	TRUE
41	*ms-cxh:*	TRUE
42	*ms-device-enrollment:*	TRUE
43	*ms-excel:*	TRUE
44	*ms-msdt:*	TRUE
45	*ms-penworkspace:*	TRUE
46	*ms-powerpoint:*	TRUE
47	*ms-publisher:*	TRUE
48	*ms-settings:*	TRUE
49	*ms-settings-airplanemode:*	TRUE
50	*ms-settings-bluetooth:*	TRUE
51	*ms-settings-cellular:*	TRUE
52	*ms-settings-connectabledevices:*	TRUE
53	*ms-settings-displays-topology:*	TRUE
54	*ms-settings-emailandaccounts:*	TRUE
55	*ms-settings-language:*	TRUE
56	*ms-settings-location:*	TRUE
57	*ms-settings-lock:*	TRUE
58	*ms-settings-mobilehotspot:*	TRUE
59	*ms-settings-notifications:*	TRUE
60	*ms-settings-power:*	TRUE
61	*ms-settings-privacy:*	TRUE
62	*ms-settings-proximity:*	TRUE
63	*ms-settings-screenrotation:*	TRUE
64	*ms-settings-wifi:*	TRUE
65	*ms-settings-workplace:*	TRUE
66	*ms-teams:*	TRUE
67	*ms-windows-search:*	TRUE
68	*ms-word:*	TRUE
69	*mssharepointclient:*	TRUE
70	*msteams:*	TRUE
71	*mswindowsmusic:*	TRUE
72	*mswindowsvideo:*	TRUE
73	*odopen:*	TRUE
74	*OneIndex16:*	TRUE
75	*OneNote:*	TRUE
76	*OneNote.URL.16:*	TRUE
77	*OneNoteDesktop:*	TRUE
78	*OneNoteDesktop.URL.16:*	TRUE
79	*Outlook.URL.feed.15:*	TRUE
80	*Outlook.URL.mailto.15:*	TRUE
81	*Outlook.URL.stssync.15:*	TRUE
82	*Outlook.URL.webcal.15:*	TRUE
83	*res:*	TRUE
84	*rlogin:*	TRUE
85	*search:*	TRUE
86	*search-ms:*	TRUE
87	*sip:*	TRUE
88	*sips:*	TRUE
89	*skypecast15:*	TRUE
90	*stssync:*	TRUE
91	*tbauth:*	TRUE
92	*tel:*	TRUE
93	*telnet:*	TRUE
94	*tn3270:*	TRUE
95	*webcal:*	TRUE
96	*webcals:*	TRUE
97	*windows.tbauth:*	TRUE
98	*WMP11.AssocProtocol.DLNA-PLAYSINGLE:*	TRUE
99	*WMP11.AssocProtocol.MMS:*	TRUE
100	*Word:*	TRUE
101	*xbox-tcui:*	TRUE
102	*appinstaller.oauth2:*	TRUE
103	*bingnews:*	TRUE
104	*bingweather:*	TRUE
105	*feedback-hub:*	TRUE
106	*git-client:*	TRUE
107	*IE.HTTP:*	TRUE
108	*insiderhub:*	TRUE
109	*microsoft-edge:*	TRUE
110	*microsoft-edge-holographic:*	TRUE
111	*microsoft.windows.camera:*	TRUE
112	*microsoft.windows.camera.multipicker:*	TRUE
113	*microsoft.windows.camera.picker:*	TRUE
114	*microsoft.windows.photos.crop:*	TRUE
115	*microsoft.windows.photos.picker:*	TRUE
116	*microsoft.windows.photos.videoedit:*	TRUE
117	*Microsoft.Workfolders:*	TRUE
118	*microsoftvideo:*	TRUE
119	*ms-aad-brokerplugin:*	TRUE
120	*ms-appinstaller:*	TRUE
121	*ms-calculator:*	TRUE
122	*ms-clock:*	TRUE
123	*ms-contact-support:*	TRUE
124	*ms-cortana2:*	TRUE
125	*ms-cxh-full:*	TRUE
126	*ms-default-location:*	TRUE
127	*ms-device-enrollment2:*	TRUE
128	*ms-drive-to:*	TRUE
129	*ms-edu-secureassessment:*	TRUE
130	*ms-eyecontrolspeech:*	TRUE
131	*ms-gamebar:*	TRUE
132	*ms-gamebarservices:*	TRUE
133	*ms-gamingoverlay:*	TRUE
134	*ms-get-started:*	TRUE
135	*ms-getoffice:*	TRUE
136	*ms-inputapp:*	TRUE
137	*ms-insights:*	TRUE
138	*ms-meetnow:*	TRUE
139	*ms-meetnowflyout:*	TRUE
140	*ms-mmsys:*	TRUE
141	*ms-msime-imepad:*	TRUE
142	*ms-msime-imjpdct:*	TRUE
143	*ms-officeapp:*	TRUE
144	*ms-officecmd:*	TRUE
145	*ms-oobenetwork:*	TRUE
146	*ms-people:*	TRUE
147	*ms-perception-simulation:*	TRUE
148	*ms-phone:*	TRUE
149	*ms-photos:*	TRUE
150	*ms-powerautomate:*	TRUE
151	*ms-print-addprinter:*	TRUE
152	*ms-print-printjobs:*	TRUE
153	*ms-quick-assist:*	TRUE
154	*ms-rdx-document:*	TRUE
155	*ms-retaildemo-launchbioenrollment:*	TRUE
156	*ms-retaildemo-launchstart:*	TRUE
157	*ms-screenclip:*	TRUE
158	*ms-screensketch:*	TRUE
159	*ms-search:*	TRUE
160	*ms-sttoverlay:*	TRUE
161	*ms-taskswitcher:*	TRUE
162	*ms-to-do:*	TRUE
163	*ms-todo:*	TRUE
164	*ms-unistore-email:*	TRUE
165	*ms-virtualtouchpad:*	TRUE
166	*ms-walk-to:*	TRUE
167	*ms-wcrv:*	TRUE
168	*ms-windows-store:*	TRUE
169	*ms-windows-store-deskext:*	TRUE
170	*ms-windows-store2:*	TRUE
171	*ms-wpc:*	TRUE
172	*ms-wpdrmv:*	TRUE
173	*ms-wxh:*	TRUE
174	*ms-xbet-survey:*	TRUE
175	*ms-xbl-3d8b930f:*	TRUE
176	*ms-xgpueject:*	TRUE
177	*msgamepass:*	TRUE
178	*msgamingapp:*	TRUE
179	*msnews:*	TRUE
180	*msnnews:*	TRUE
181	*msnweather:*	TRUE
182	*msxbox:*	TRUE
183	*outlookaccounts:*	TRUE
184	*outlookcal:*	TRUE
185	*outlookmail:*	TRUE
186	*read:*	TRUE
187	*vscode:*	TRUE
188	*vsls:*	TRUE
189	*vstfs:*	TRUE
190	*vsweb:*	TRUE
191	*windows-feedback:*	TRUE
192	*windowsdefender:*	TRUE
193	*xboxliveapp-1297287741:*	TRUE
194	*zune:*	TRUE
195	*SecureBrowser.security.getDeviceInfo:*	TRUE
196	*SecureBrowser.security.getMACAddress:*	TRUE
197	*SecureBrowser.security.examineProcessList:*	TRUE
198	*SecureBrowser.security.isRemoteSession:*	TRUE
199	*SecureBrowser.security.isVMSession:*	TRUE
200	*JavaScript:*	TRUE
201	*vbscript:*	TRUE
202	*about:*	TRUE
203	*ms-its:*	TRUE
204	*its:*	TRUE
205	*mk:@MSITStore:*	TRUE