beenull/crowdsec
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Used asterisk for Defender Firewall log name (#2671)

Browse source 
Log name is configurable. MD Docs recommend a log file per profile: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/configure-logging?tabs=intune
This commit is contained in:
Zafer Balkan 2023-12-20 11:28:40 +02:00 committed by GitHub
parent 052accd6bb
commit e1932ff01e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/acquis_win.yaml
View file

@ -10,7 +10,7 @@ labels:
--- ---
##Firewall ##Firewall
filenames: filenames:
- C:\Windows\System32\LogFiles\Firewall\pfirewall.log - C:\Windows\System32\LogFiles\Firewall\*.log
labels: labels:
type: windows-firewall type: windows-firewall
--- ---
@ -28,4 +28,4 @@ use_time_machine: true
filenames: filenames:
- C:\inetpub\logs\LogFiles\*\*.log - C:\inetpub\logs\LogFiles\*\*.log
labels: labels:
type: iis type: iis