We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b1824ad commit de7f3f0Copy full SHA for de7f3f0
sysmonconfig-export.xml
@@ -271,8 +271,6 @@
271
<TargetFilename condition="begin with">C:\Windows\Tasks\</TargetFilename> <!--Microsoft:ScheduledTasks -->
272
<TargetFilename condition="begin with">C:\Windows\System32\Tasks</TargetFilename> <!--Microsoft:ScheduledTasks -->
273
<TargetFilename condition="end with">.cmdline</TargetFilename> <!--Microsoft:dotNet: Executed by cvtres.exe-->
274
- <!--SECTION: Mimikatz-->
275
- <!--Default-disable <TargetFileName condition="end with">.kirbi</TargetFileName> --> <!-- [ https://github.com/gentilkiwi/mimikatz/wiki/module-~-kerberos ] -->
276
</FileCreate>
277
<FileCreate onmatch="exclude">
278
<!--SECTION: Microsoft-->
0 commit comments