Merge pull request #139 from Korving-F/patch-1

Adds MDE for Linux Configuration File
SnaffCon · Mar 11, 2024 · 97e0513 · 97e0513
2 parents 23e96df + bc387eb
commit 97e0513
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...ultRules/FileRules/Keep/Infrastructure/DeploymentAutomation/KeepDefenderConfigByName.toml b/...ultRules/FileRules/Keep/Infrastructure/DeploymentAutomation/KeepDefenderConfigByName.toml
@@ -6,5 +6,5 @@ Description = "Files containing Defender Configs are very interesting."
 MatchLocation = "FileName"
 WordListType = "Exact"
 MatchLength = 0
-WordList = ["SensorConfiguration.json"]
+WordList = ["SensorConfiguration.json","mdatp_managed.json"]
 Triage = "Yellow"