Files
splunk-security_content/lookups/prohibited_apps_launching_cmd.csv
T
David Dorsey 3d25c40bf7 Updated macro definition in detections, investigations, and baselines to just be a list
Broke out macros definition into it's own manifest
Created macro manifests for all of current macros that we ship
Created lookup file manifest
Created lookup file manifests for all current lookup files that we ship
2019-09-30 13:53:25 -07:00

17 lines
375 B
CSV

prohibited_applications,isProhibited
winword.exe,prohibited
EXCEL.EXE,prohibited
OUTLOOK.EXE,prohibited
POWERPNT.EXE,prohibited
visio.exe,prohibited
mspub.exe,prohibited
Acrobat.exe,prohibited
Acrord32.exe,prohibited
chrome.exe,prohibited
iexplore.exe,prohibited
opera.exe,prohibited
firefox.exe,prohibited
java.exe,prohibited
powershell.exe,prohibited
mshta.exe, prohibited