Changeset 1539
- Timestamp:
- 04/17/08 18:39:00 (3 weeks ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl
r1537 r1539 9 9 + Delete C:\\program Files\\capture\\captureclient\.exe C:\\program files\\capture\\.+\.zip 10 10 #Prefetch 11 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Prefetch \\.+12 + Delete C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Prefetch \\.+11 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Prefetch.* 12 + Delete C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Prefetch.* 13 13 + Write System C:\\WINDOWS\\Prefetch\\.+ 14 14 #NTFS Metadata
