Changeset 1520

Show
Ignore:
Timestamp:
04/16/08 13:34:40 (4 weeks ago)
Author:
kindlund
Message:

Updated exclusion list to reflect Windows Side-by-Side benign activity. (d2436cb5b2fea8451b3151561a)

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

    r1517 r1520  
    300300+   Delete  C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\.+\\Cookies\\index.dat 
    301301+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\WinSxS\\Policies\\.* 
     302+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\WinSxS 
    302303+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\ 
    303304