Advertisement
Guest User

Untitled

a guest
May 23rd, 2017
62
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.25 KB | None | 0 0
  1. <Sysmon schemaversion="3.30">
  2. <HashAlgorithms>MD5,SHA1,SHA256</HashAlgorithms>
  3. <EventFiltering>
  4. <ProcessAccess onmatch="include">
  5. <SourceImage condition="contains">powershell.exe</SourceImage>
  6. </ProcessAccess>
  7. </EventFiltering>
  8. </Sysmon>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement