Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- from Sysmon
- and sent to IT Alerts
- and with 'is Up' or 'is Down' in the subject
- move it to the Alerts folder
- except if the subject contains <list of systems I care about>
- stop processing more rules
Add Comment
Please, Sign In to add comment
