7 lines
152 B
XML
7 lines
152 B
XML
<Sysmon schemaversion="4.90">
|
|
<EventFiltering>
|
|
<ProcessCreate onmatch="exclude"/>
|
|
<DnsQuery onmatch="include"/>
|
|
</EventFiltering>
|
|
</Sysmon>
|