Skip to content

Conversation

@ipfyx
Copy link

@ipfyx ipfyx commented Aug 21, 2024

I added some more exclusion for PSScriptPolicyTest files.

For event 11, i added a file to exclude thoses files created under : C:\Users*\AppData\Local\Temp_PSScriptPolicyTest*.ps1

For event 23 and 26, i added two config files to exclude files legitimately deleted under :

  • C:\Users*\AppData\Local\Temp_PSScriptPolicyTest*.ps1
  • C:\Windows\Temp*__PSScriptPolicyTest*.ps1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant