Skip to content

Commit f50e120

Browse files
authored
added loopback address to networkconnect exclusions
1 parent ae1444a commit f50e120

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

sysmonconfig-export.xml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -370,6 +370,9 @@
370370
<DestinationHostname condition="end with">microsoft.com</DestinationHostname> <!--Microsoft:Update delivery-->
371371
<DestinationHostname condition="end with">microsoft.com.akadns.net</DestinationHostname> <!--Microsoft:Update delivery-->
372372
<DestinationHostname condition="end with">microsoft.com.nsatc.net</DestinationHostname> <!--Microsoft:Update delivery-->
373+
<!--Section: Loopback Addresses-->
374+
<DestinationIp condition="is">127.0.0.1</DestinationIp>
375+
<DestinationIp condition="begin with">fe80:0:0:0</DestinationIp>
373376
</NetworkConnect>
374377

375378
<!--SYSMON EVENT ID 4 : RESERVED FOR SYSMON STATUS MESSAGES-->

0 commit comments

Comments
 (0)