Skip to content

Instantly share code, notes, and snippets.

@olafhartong

olafhartong/download-block-example.xml

Created August 16, 2022 17:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save olafhartong/30ed8b22e77c21bb04af14038a47b1a5 to your computer and use it in GitHub Desktop.
Save olafhartong/30ed8b22e77c21bb04af14038a47b1a5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
download-block-example.xml
<Sysmon schemaversion="4.82">
<EventFiltering>
<RuleGroup name="" groupRelation="or">
<FileBlockExecutable onmatch="include">
<TargetFilename condition="contains all">C:\Users;Downloads</TargetFilename>
</FileBlockExecutable>
</RuleGroup>
</EventFiltering>
</Sysmon>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment