olafhartong / sysmon-modular

A repository of sysmon configuration modules
MIT License
2.62k stars 585 forks source link

Managing multiple customer config example #163

Open oddieHA opened 1 year ago

oddieHA commented 1 year ago

Hi!

Would it possible to add examples / ideas on Readme about how to manage multiple customer configs? e.g. What would be the best practice folder structure?

Do I simply have to use copy-pasted include/exlude lists on containing all base rules + customer specific rules or are there some other strategies?

Basically, if I have some custom rules that are for all customers and for example 2 customer specific rules (one include and one exclude) per customer, how should I manage these?

Thanks, Oddie