From ee1bbb5009b79248e20df3120e08d349bb1e9508 Mon Sep 17 00:00:00 2001
From: Bob Sponge <b-sponge@krusty.local>
Date: Thu, 28 Aug 2025 09:40:31 +0000
Subject: [PATCH] add base sysmon config

---
 sysmonconfig.xml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 sysmonconfig.xml

diff --git a/sysmonconfig.xml b/sysmonconfig.xml
new file mode 100644
index 0000000..c000c52
--- /dev/null
+++ b/sysmonconfig.xml
@@ -0,0 +1,5 @@
+<Sysmon schemaversion="4.90">
+  <EventFiltering>
+    <ProcessCreate onmatch="exclude"/>
+  </EventFiltering>
+</Sysmon>