We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ae1444a commit f50e120Copy full SHA for f50e120
sysmonconfig-export.xml
@@ -370,6 +370,9 @@
370
<DestinationHostname condition="end with">microsoft.com</DestinationHostname> <!--Microsoft:Update delivery-->
371
<DestinationHostname condition="end with">microsoft.com.akadns.net</DestinationHostname> <!--Microsoft:Update delivery-->
372
<DestinationHostname condition="end with">microsoft.com.nsatc.net</DestinationHostname> <!--Microsoft:Update delivery-->
373
+ <!--Section: Loopback Addresses-->
374
+ <DestinationIp condition="is">127.0.0.1</DestinationIp>
375
+ <DestinationIp condition="begin with">fe80:0:0:0</DestinationIp>
376
</NetworkConnect>
377
378
<!--SYSMON EVENT ID 4 : RESERVED FOR SYSMON STATUS MESSAGES-->
0 commit comments