cirt-ops/sysmon-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

log DNS queries after the beacon finding

Browse Source
This commit is contained in:
Bob Sponge
2026-02-21 12:04:18 +00:00
parent ee1bbb5009
commit 5cc74a5fce
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
sysmonconfig.xml
View File

@@ -1,5 +1,6 @@
<Sysmon schemaversion="4.90"> <Sysmon schemaversion="4.90">
<EventFiltering> <EventFiltering>
<ProcessCreate onmatch="exclude"/> <ProcessCreate onmatch="exclude"/>
<DnsQuery onmatch="include"/>
</EventFiltering> </EventFiltering>
</Sysmon> </Sysmon>