relocate misplaced file

olafhartong · Jun 22, 2023 · d78d50c · d78d50c
1 parent 15dcb04
commit d78d50c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/1_process_creation/exclude_desktop_central.xml b/1_process_creation/exclude_desktop_central.xml
@@ -0,0 +1,10 @@
+<Sysmon schemaversion="4.30">
+  <EventFiltering>
+    <RuleGroup name="" groupRelation="or">
+      <ProcessCreate onmatch="exclude">
+        <Image condition="begin with">C:\program files (x86)\desktopcentral_agent\bin\</Image>
+        <Image condition="begin with">C:\program files\desktopcentral_server\bin\</Image>
+      </ProcessCreate>
+    </RuleGroup>
+  </EventFiltering>
+</Sysmon>