search

SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing
4.74k stars 1.69k forks source link

RTF File Creation Typo #58

Closed p1sc3s closed 6 years ago

p1sc3s commented 6 years ago

Looks like it logs on .RFT, but not .RTF file creation.

https://github.com/SwiftOnSecurity/sysmon-config/blob/f24dc224a9484f91f3ebc66b87c7eb161149f899/sysmonconfig-export.xml#L501

p1sc3s commented 6 years ago

duplicate...