add base sysmon config
This commit is contained in:
5
sysmonconfig.xml
Normal file
5
sysmonconfig.xml
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
<Sysmon schemaversion="4.90">
|
||||||
|
<EventFiltering>
|
||||||
|
<ProcessCreate onmatch="exclude"/>
|
||||||
|
</EventFiltering>
|
||||||
|
</Sysmon>
|
||||||
Reference in New Issue
Block a user