Skip to content

Commit

Permalink
Merge pull request SwiftOnSecurity#82 from itpropaul/patch-2
Browse files Browse the repository at this point in the history 
added loopback address to networkconnect exclusions
  • Loading branch information
@SwiftOnSecurity
SwiftOnSecurity authored Aug 26, 2019
2 parents 4979186 + f50e120 commit d1bdff9
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions sysmonconfig-export.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -370,6 +370,9 @@
<DestinationHostname condition="end with">microsoft.com</DestinationHostname> <!--Microsoft:Update delivery-->
<DestinationHostname condition="end with">microsoft.com.akadns.net</DestinationHostname> <!--Microsoft:Update delivery-->
<DestinationHostname condition="end with">microsoft.com.nsatc.net</DestinationHostname> <!--Microsoft:Update delivery-->
<!--Section: Loopback Addresses-->
<DestinationIp condition="is">127.0.0.1</DestinationIp>
<DestinationIp condition="begin with">fe80:0:0:0</DestinationIp>
</NetworkConnect>

<!--SYSMON EVENT ID 4 : RESERVED FOR SYSMON STATUS MESSAGES-->
Expand Down

0 comments on commit d1bdff9

Please sign in to comment.