More flexible suppression syntax

droe / xnumon

monitor macOS for malicious activity

https://www.roe.ch/xnumon

Open Software License 3.0

230 stars 30 forks source link

Open droe opened 6 years ago

droe commented 6 years ago

Current suppression system works, but is inflexible. Should gain flexibility, such as:

Suppress eventcode 2 for image ident=com.apple.bsdiff if subject ident=com.logmein.GoToMeeting.G2MUpdate teamid=GFNFVT632V
Suppression by path relative to user home