SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing
4.68k stars 1.69k forks source link

Incorrect XML Configuration - Sysmon 14.16 #181

Open eastcoastnjdc opened 1 year ago

eastcoastnjdc commented 1 year ago

Receiving an error with sysmon 14.16 and this config file:

Error: Incorrect XML configuration: sysmonconfig-export.xml Reason: Element 'RuleGroup' is unexpected according to content model of parent element 'EventFiltering'.

Expecting: ProcessCreate, FileCreateTime, NetworkConnect, ProcessTerminate, DriverLoad, ImageLoad, CreateRemoteThread, RawAccessRead, ProcessAccess, FileCreate, RegistryEvent, FileCreateStreamHash.