add base sysmon config
This commit is contained in:
5
sysmonconfig.xml
Normal file
5
sysmonconfig.xml
Normal file
@@ -0,0 +1,5 @@
|
||||
<Sysmon schemaversion="4.90">
|
||||
<EventFiltering>
|
||||
<ProcessCreate onmatch="exclude"/>
|
||||
</EventFiltering>
|
||||
</Sysmon>
|
||||
Reference in New Issue
Block a user