Changeset 1536

Timestamp:

04/17/08 11:27:44 (4 weeks ago)

Author:

kindlund

Message:

IE7 benign activity - (392c0d3fa27bb6b46f5bba6804).

Files:

• honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl (modified) (1 diff)

honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

@@ -332 +332 @@
-# IE7 - Exclusion
-+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\LocalService
++   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\system32\\config\\SysEvent\.Evt