mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Michael Haag
205 lines
5.0 KiB
CSV
205 lines
5.0 KiB
CSV
handler,ishandler
|
|
"*bingmaps:*",TRUE
|
|
"*calculator:*",TRUE
|
|
"*callto:*",TRUE
|
|
"*conf:*",TRUE
|
|
"*DLNA-PLAYSINGLE:*",TRUE
|
|
"*Explorer.AssocActionId.BurnSelection:*",TRUE
|
|
"*Explorer.AssocActionId.EraseDisc:*",TRUE
|
|
"*Explorer.AssocActionId.ZipSelection:*",TRUE
|
|
"*Explorer.AssocProtocol.search-ms:*",TRUE
|
|
"*Explorer.BurnSelection:*",TRUE
|
|
"*Explorer.EraseDisc:*",TRUE
|
|
"*Explorer.ZipSelection:*",TRUE
|
|
"*feed:*",TRUE
|
|
"*feeds:*",TRUE
|
|
"*file:*",TRUE
|
|
"*FirefoxURL-308046B0AF4A39CB:*",TRUE
|
|
"*ftp:*",TRUE
|
|
"*grvopen:*",TRUE
|
|
"*http:*",TRUE
|
|
"*https:*",TRUE
|
|
"*iehistory:*",TRUE
|
|
"*ierss:*",TRUE
|
|
"*im:*",TRUE
|
|
"*LDAP:*",TRUE
|
|
"*Lync15:*",TRUE
|
|
"*Lync15classic:*",TRUE
|
|
"*ma-chan:*",TRUE
|
|
"*ma-filelink:*",TRUE
|
|
"*mailto:*",TRUE
|
|
"*mapi:*",TRUE
|
|
"*mapi15:*",TRUE
|
|
"*mapi16:*",TRUE
|
|
"*mk:*",TRUE
|
|
"*MMS:*",TRUE
|
|
"*ms-access:*",TRUE
|
|
"*ms-actioncenter:*",TRUE
|
|
"*ms-apprep:*",TRUE
|
|
"*ms-availablenetworks:*",TRUE
|
|
"*ms-cortana:*",TRUE
|
|
"*ms-cxh:*",TRUE
|
|
"*ms-device-enrollment:*",TRUE
|
|
"*ms-excel:*",TRUE
|
|
"*ms-msdt:*",TRUE
|
|
"*ms-penworkspace:*",TRUE
|
|
"*ms-powerpoint:*",TRUE
|
|
"*ms-publisher:*",TRUE
|
|
"*ms-settings:*",TRUE
|
|
"*ms-settings-airplanemode:*",TRUE
|
|
"*ms-settings-bluetooth:*",TRUE
|
|
"*ms-settings-cellular:*",TRUE
|
|
"*ms-settings-connectabledevices:*",TRUE
|
|
"*ms-settings-displays-topology:*",TRUE
|
|
"*ms-settings-emailandaccounts:*",TRUE
|
|
"*ms-settings-language:*",TRUE
|
|
"*ms-settings-location:*",TRUE
|
|
"*ms-settings-lock:*",TRUE
|
|
"*ms-settings-mobilehotspot:*",TRUE
|
|
"*ms-settings-notifications:*",TRUE
|
|
"*ms-settings-power:*",TRUE
|
|
"*ms-settings-privacy:*",TRUE
|
|
"*ms-settings-proximity:*",TRUE
|
|
"*ms-settings-screenrotation:*",TRUE
|
|
"*ms-settings-wifi:*",TRUE
|
|
"*ms-settings-workplace:*",TRUE
|
|
"*ms-teams:*",TRUE
|
|
"*ms-windows-search:*",TRUE
|
|
"*ms-word:*",TRUE
|
|
"*mssharepointclient:*",TRUE
|
|
"*msteams:*",TRUE
|
|
"*mswindowsmusic:*",TRUE
|
|
"*mswindowsvideo:*",TRUE
|
|
"*odopen:*",TRUE
|
|
"*OneIndex16:*",TRUE
|
|
"*OneNote:*",TRUE
|
|
"*OneNote.URL.16:*",TRUE
|
|
"*OneNoteDesktop:*",TRUE
|
|
"*OneNoteDesktop.URL.16:*",TRUE
|
|
"*Outlook.URL.feed.15:*",TRUE
|
|
"*Outlook.URL.mailto.15:*",TRUE
|
|
"*Outlook.URL.stssync.15:*",TRUE
|
|
"*Outlook.URL.webcal.15:*",TRUE
|
|
"*res:*",TRUE
|
|
"*rlogin:*",TRUE
|
|
"*search:*",TRUE
|
|
"*search-ms:*",TRUE
|
|
"*sip:*",TRUE
|
|
"*sips:*",TRUE
|
|
"*skypecast15:*",TRUE
|
|
"*stssync:*",TRUE
|
|
"*tbauth:*",TRUE
|
|
"*tel:*",TRUE
|
|
"*telnet:*",TRUE
|
|
"*tn3270:*",TRUE
|
|
"*webcal:*",TRUE
|
|
"*webcals:*",TRUE
|
|
"*windows.tbauth:*",TRUE
|
|
"*WMP11.AssocProtocol.DLNA-PLAYSINGLE:*",TRUE
|
|
"*WMP11.AssocProtocol.MMS:*",TRUE
|
|
"*Word:*",TRUE
|
|
"*xbox-tcui:*",TRUE
|
|
"*appinstaller.oauth2:*",TRUE
|
|
"*bingnews:*",TRUE
|
|
"*bingweather:*",TRUE
|
|
"*feedback-hub:*",TRUE
|
|
"*git-client:*",TRUE
|
|
"*IE.HTTP:*",TRUE
|
|
"*insiderhub:*",TRUE
|
|
"*microsoft-edge:*",TRUE
|
|
"*microsoft-edge-holographic:*",TRUE
|
|
"*microsoft.windows.camera:*",TRUE
|
|
"*microsoft.windows.camera.multipicker:*",TRUE
|
|
"*microsoft.windows.camera.picker:*",TRUE
|
|
"*microsoft.windows.photos.crop:*",TRUE
|
|
"*microsoft.windows.photos.picker:*",TRUE
|
|
"*microsoft.windows.photos.videoedit:*",TRUE
|
|
"*Microsoft.Workfolders:*",TRUE
|
|
"*microsoftvideo:*",TRUE
|
|
"*ms-aad-brokerplugin:*",TRUE
|
|
"*ms-appinstaller:*",TRUE
|
|
"*ms-calculator:*",TRUE
|
|
"*ms-clock:*",TRUE
|
|
"*ms-contact-support:*",TRUE
|
|
"*ms-cortana2:*",TRUE
|
|
"*ms-cxh-full:*",TRUE
|
|
"*ms-default-location:*",TRUE
|
|
"*ms-device-enrollment2:*",TRUE
|
|
"*ms-drive-to:*",TRUE
|
|
"*ms-edu-secureassessment:*",TRUE
|
|
"*ms-eyecontrolspeech:*",TRUE
|
|
"*ms-gamebar:*",TRUE
|
|
"*ms-gamebarservices:*",TRUE
|
|
"*ms-gamingoverlay:*",TRUE
|
|
"*ms-get-started:*",TRUE
|
|
"*ms-getoffice:*",TRUE
|
|
"*ms-inputapp:*",TRUE
|
|
"*ms-insights:*",TRUE
|
|
"*ms-meetnow:*",TRUE
|
|
"*ms-meetnowflyout:*",TRUE
|
|
"*ms-mmsys:*",TRUE
|
|
"*ms-msime-imepad:*",TRUE
|
|
"*ms-msime-imjpdct:*",TRUE
|
|
"*ms-officeapp:*",TRUE
|
|
"*ms-officecmd:*",TRUE
|
|
"*ms-oobenetwork:*",TRUE
|
|
"*ms-people:*",TRUE
|
|
"*ms-perception-simulation:*",TRUE
|
|
"*ms-phone:*",TRUE
|
|
"*ms-photos:*",TRUE
|
|
"*ms-powerautomate:*",TRUE
|
|
"*ms-print-addprinter:*",TRUE
|
|
"*ms-print-printjobs:*",TRUE
|
|
"*ms-quick-assist:*",TRUE
|
|
"*ms-rdx-document:*",TRUE
|
|
"*ms-retaildemo-launchbioenrollment:*",TRUE
|
|
"*ms-retaildemo-launchstart:*",TRUE
|
|
"*ms-screenclip:*",TRUE
|
|
"*ms-screensketch:*",TRUE
|
|
"*ms-search:*",TRUE
|
|
"*ms-sttoverlay:*",TRUE
|
|
"*ms-taskswitcher:*",TRUE
|
|
"*ms-to-do:*",TRUE
|
|
"*ms-todo:*",TRUE
|
|
"*ms-unistore-email:*",TRUE
|
|
"*ms-virtualtouchpad:*",TRUE
|
|
"*ms-walk-to:*",TRUE
|
|
"*ms-wcrv:*",TRUE
|
|
"*ms-windows-store:*",TRUE
|
|
"*ms-windows-store-deskext:*",TRUE
|
|
"*ms-windows-store2:*",TRUE
|
|
"*ms-wpc:*",TRUE
|
|
"*ms-wpdrmv:*",TRUE
|
|
"*ms-wxh:*",TRUE
|
|
"*ms-xbet-survey:*",TRUE
|
|
"*ms-xbl-3d8b930f:*",TRUE
|
|
"*ms-xgpueject:*",TRUE
|
|
"*msgamepass:*",TRUE
|
|
"*msgamingapp:*",TRUE
|
|
"*msnews:*",TRUE
|
|
"*msnnews:*",TRUE
|
|
"*msnweather:*",TRUE
|
|
"*msxbox:*",TRUE
|
|
"*outlookaccounts:*",TRUE
|
|
"*outlookcal:*",TRUE
|
|
"*outlookmail:*",TRUE
|
|
"*read:*",TRUE
|
|
"*vscode:*",TRUE
|
|
"*vsls:*",TRUE
|
|
"*vstfs:*",TRUE
|
|
"*vsweb:*",TRUE
|
|
"*windows-feedback:*",TRUE
|
|
"*windowsdefender:*",TRUE
|
|
"*xboxliveapp-1297287741:*",TRUE
|
|
"*zune:*",TRUE
|
|
"*SecureBrowser.security.getDeviceInfo:*",TRUE
|
|
"*SecureBrowser.security.getMACAddress:*",TRUE
|
|
"*SecureBrowser.security.examineProcessList:*",TRUE
|
|
"*SecureBrowser.security.isRemoteSession:*",TRUE
|
|
"*SecureBrowser.security.isVMSession:*",TRUE
|
|
"*JavaScript:*",TRUE
|
|
"*vbscript:*",TRUE
|
|
"*about:*",TRUE
|
|
"*ms-its:*",TRUE
|
|
"*its:*",TRUE
|
|
"*mk:@MSITStore:*",TRUE |