Changeset 1349

Show
Ignore:
Timestamp:
03/11/08 13:16:24 (6 months ago)
Author:
kindlund
Message:

Updated false positive to reflect temporary files generated by flash.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

    r1348 r1349  
    230230 
    231231#### Honeyclient manual add - iexplore.exe - ticket #136 (flash) 
    232 +   Write   C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\fla.?\.tmp 
    233 +   Delete  C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\fla.?\.tmp 
     232+   Write   C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\fla.?.?\.tmp 
     233+   Delete  C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\fla.?.?\.tmp