Changeset 1462

Show
Ignore:
Timestamp:
04/04/08 22:38:19 (5 months ago)
Author:
kindlund
Message:

Updated exclusion list to account for writes to the "SoftwareDistribution\Download" directory for IE7.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/branches/exp/kindlund-simpler_agent/thirdparty/capture-mod/FileMonitor.exl

    r1406 r1462  
    263263+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\repair 
    264264+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\SoftwareDistribution 
     265+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\SoftwareDistribution\\Download 
    265266+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\Administrator\\Cookies 
    266267+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\Administrator\\Cookies\\index.dat